Privacy Policy

Numi & Company Hair Salon ("Numi," "we," "us," or "our") respects your privacy. This Privacy Policy describes what information we collect through our website and booking system, how we use it, who we share it with, and the rights you have over your personal data. If you have any questions, please contact us using the details in Section 12.

01Introduction & Scope

This Privacy Policy applies to information we collect through our website at numihair.com, our online booking system operated by Phorest, and any interactions you have with Numi Hair Salon in connection with these services.

Numi & Company Hair Salon is located at 69 Harney Road, Scarsdale, NY 10583. This policy is written for our clients and website visitors. By using our website or booking an appointment with us, you agree to the practices described here.

02Information We Collect

Information you provide to us

You provide information directly when you:

• Book an appointment through our online booking system (Phorest) — including your name, email address, phone number, appointment details, service preferences, and any notes you share about your hair.
• Submit our contact form — including your name, email address, phone number (if provided), and message content.
• Leave a comment on our blog — including your name, email address, and comment content.

Information collected automatically

When you visit our website, we automatically collect certain technical information through cookies and similar technologies:

• IP address, general geographic location (city and country level), and internet service provider
• Browser type, operating system, and device information
• Pages viewed, time spent on pages, referral source, and click behavior
• Site usage patterns and interaction data

Information from third parties

We may receive information about you from third parties such as Meta (Facebook / Instagram) if you interact with our advertisements or embedded social content, and from analytics providers such as Google. We do not purchase personal information from data brokers or marketing list vendors.

03How We Use Your Information

We use the information we collect for the following purposes:

• Provide our services — schedule and confirm appointments, communicate with you about your visits, and respond to inquiries.
• Improve our website and services — analyze how visitors use our site so we can make it more useful and easier to navigate.
• Marketing and communications — send appointment reminders, service updates, promotions, and occasional newsletters (with your consent where required).
• Personalize your experience — remember your preferences and improve your future visits.
• Legal and safety purposes — comply with applicable law, respond to lawful requests, and protect our rights and the safety of our staff and clients.

04Calls, Texts & Marketing Communications

By providing your phone number to Numi Hair Salon (through our booking system, contact form, or in-salon check-in), you consent to receive appointment reminders, confirmations, and follow-up messages from us by phone call or SMS text message. Standard message and data rates from your carrier may apply.

You may opt out of promotional SMS messages at any time by replying STOP to any text you receive from us. You may opt out of promotional email at any time by clicking the unsubscribe link in any marketing email. Opting out of promotional messages will not affect transactional messages related to your appointments (confirmations, reminders, and similar).

05Cookies & Tracking Technologies

Our website uses cookies and similar technologies to make the site work, understand how it's used, and support advertising. Cookies we use include:

• Essential cookies — required for basic site functionality (login, comment forms, session management).
• Analytics cookies — Google Analytics 4 (measurement ID G-2KLLECWNY7) and Google Tag Manager collect anonymized information about how visitors interact with our site.
• Advertising cookies — the Meta Pixel (Facebook / Instagram advertising) helps us measure the effectiveness of ads and show relevant content to people who have visited our site.
• Comment and login cookies — WordPress-standard cookies for saving your comment details or keeping you logged in if you have an account.

You can control cookies through your browser settings. You can opt out of Google Analytics tracking with the Google Analytics Opt-out Browser Add-on, and adjust your Meta / Facebook advertising preferences on the Facebook Ad Preferences page.

06How We Share Your Information

We share limited information with the following categories of third-party service providers who help us operate our business:

• Phorest — our salon booking and customer management system. Receives contact and appointment data. See the Phorest Privacy Policy.
• Google — Google Analytics 4 and Google Tag Manager receive anonymized website analytics data. See Google's Privacy Policy.
• Meta (Facebook / Instagram) — the Meta Pixel receives website interaction data for advertising, and Instagram-embedded content on our site may set cookies. See Meta's Data Policy.
• WP Engine — our website hosting provider. See the WP Engine Privacy Policy.
• Automattic (Gravatar) — used only if a commenter has a Gravatar-registered email address.

We may also disclose information when required by law, in response to lawful requests from public authorities, or to protect the safety of our staff and clients.

We do not sell your personal information. We do not share your personal information with third parties for their independent marketing purposes.

07Third-Party Links & Services

Our website contains links to third-party websites and embedded content, including our social media profiles (Facebook, Instagram, YouTube), our Phorest booking page, and embedded Instagram posts and YouTube videos. When you interact with these third-party services, their own privacy policies apply — not this policy.

Embedded content behaves as if you had visited that third-party website directly, which means the third party may set cookies, collect data, and monitor your interaction with the embedded content.

08Data Retention & Security

We retain your information only as long as necessary for the purposes described in this policy:

• Appointment records in Phorest — retained as long as you remain an active client and as required by applicable business record laws.
• Contact form submissions — retained up to 24 months.
• Blog comments — retained indefinitely so we can approve follow-up comments from returning visitors.
• Analytics data — retained per Google Analytics 4 default retention (14 months for user-level data).

We protect your information using industry-standard security measures. Our website uses SSL (HTTPS) encryption for all data transmitted between your browser and our server. Our hosting provider (WP Engine) maintains firewalls, malware scanning, automated backups, and PCI-compliant infrastructure. Booking data stored in Phorest is protected by Phorest's own security infrastructure, including encrypted storage and industry-standard access controls. Administrative access to our website is limited to authorized Numi staff.

09Your Privacy Rights

Depending on where you live, you may have the following rights over your personal information:

• Right to know what personal information we collect, use, and share about you.
• Right to access a copy of the personal information we hold about you.
• Right to delete your personal information (subject to legal exceptions).
• Right to correct inaccurate personal information we hold about you.
• Right to opt out of the sale or sharing of your personal information (Numi Hair Salon does not sell or share personal information for cross-context behavioral advertising).

To exercise any of these rights, please contact us using the details in Section 12. We will respond within 45 days.

California residents

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you additional rights described above. You may designate an authorized agent to submit privacy requests on your behalf. We will not discriminate against you for exercising your CCPA rights.

New York residents

If you are a New York resident, the New York SHIELD Act requires that we maintain reasonable safeguards to protect your personal information from unauthorized access, use, or disclosure. The security measures described in Section 08 satisfy these requirements. You may contact us using the details in Section 12 to exercise your rights.

10Children's Privacy

Our website and services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe we have collected information from your child, please contact us using the details in Section 12 and we will promptly delete the information.

For minors between 13 and 18 who book appointments (including children's haircuts), we request that a parent or guardian provide any personal information required for scheduling and communication.

11Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other reasons. The date at the top of this policy shows when it was last updated.

For material changes that significantly affect your rights, we will provide additional notice such as email notification (for current clients whose email we have on file) or a prominent notice on our website. We encourage you to review this policy periodically.