Privacy policy

Information we collect

• Contact information: name, email, phone number, and (optionally) birthday.
• Booking information: services selected, appointment times, service history, and any preferences or notes you share with us.
• Payment information: a card on file is required to reserve appointments. Cards are stored by our payment processor, Square — we never see or store full card numbers.
• Account information: if you create an account, we store the email you sign in with and a session identifier. We use magic-link sign-in; we do not store passwords.
• Usage information: standard web-server logs (IP address, browser, timestamp) collected by our hosting provider.

How we use it

• To book, confirm, remind you of, and manage your appointments.
• To process payments and any authorized cancellation or no-show fees under our cancellation policy.
• To send transactional messages: confirmations, reminders, receipts, sign-in verification codes, and updates about changes to your appointment.
• To improve our services and diagnose technical issues.

SMS messaging

With your consent, we send SMS messages for appointment reminders, booking confirmations, and account verification (2FA) codes.

• Message frequency varies based on your appointment activity.
• Message and data rates may apply.
• Reply STOP to opt out at any time. Reply HELP for help, or contact us at 813.364.2545.

Mobile information and SMS opt-in data will not be shared or sold to third parties or affiliates for promotional or marketing purposes. No mobile opt-in data is shared with third parties for any purpose other than delivering the messages you have asked us to send (through our SMS delivery provider, Telnyx).

Who we share information with

We share information only with service providers who help us operate and only for the purpose of that service:

• Square — payment processing and card-on-file storage.
• Supabase — database and authentication hosting.
• Resend — email delivery.
• Telnyx — SMS delivery.
• Vercel — web hosting.

We may also disclose information if required by law, court order, or to protect our rights. We do not sell your personal information, and we do not share your information with third parties for their own marketing.

Your choices

• You can update your profile, preferences, and marketing consent at any time from your account.
• You can request deletion of your account and personal data by emailing support@thecanvasnailstudio.com. Appointment and payment records required for accounting or legal obligations will be retained as required by law.
• To stop SMS: reply STOP to any message. To stop marketing emails: use the unsubscribe link.

Cookies and tracking

We use only the cookies required to keep you signed in and to remember what you have selected during booking. We do not use advertising or cross-site tracking cookies.

Children’s privacy

Our services are intended for adults. If you are booking on behalf of a minor, a parent or guardian must provide consent.

Changes to this policy

We may update this policy from time to time. The effective date at the top of this page reflects the latest revision.