Privacy Policy

Overview

Nectar at the Villa Salon • Spa ("we," "us," or "our") operates a luxury salon and spa located at 3905 Park Dr #100, El Dorado Hills, CA 95762. We are committed to protecting the privacy and personal information of our clients, website visitors, and anyone who interacts with our business.

This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit our website at nectaratthevillasalonspa.com, contact us, book appointments, or use our services. Please read this policy carefully. By using our website or services, you agree to the practices described herein.

Information We Collect

Information You Provide Directly

We collect information you voluntarily provide when you:

• Book an appointment — name, phone number, email address, and service preferences
• Complete our contact form — name, email address, phone number, and the content of your message
• Create a client profile — name, contact details, hair or skin history, and service notes
• Purchase gift cards or memberships — billing information and contact details
• Subscribe to marketing communications — email address and communication preferences
• Apply for a position — resume, contact information, and work history

Information Collected Automatically

When you visit our website, we may automatically collect certain technical information, including:

• IP address and approximate geographic location
• Browser type and version
• Device type and operating system
• Pages visited, time spent, and links clicked
• Referring website or source
• Date and time of your visit

Information from Third Parties

We may receive information about you from third-party platforms we use to operate our business, including our booking software (Boulevard), our website platform (GoHighLevel), and payment processors. We may also receive information when you interact with our social media pages on Instagram or Facebook.

How We Use Your Information

We use the personal information we collect for the following purposes:

• To schedule, confirm, and manage your appointments
• To communicate with you about your bookings, including reminders and follow-ups
• To process payments and manage your account
• To provide personalized salon and spa services based on your history and preferences
• To send you marketing emails, promotions, and special offers — only with your consent
• To respond to your inquiries and provide customer support
• To improve our website, services, and client experience
• To comply with legal obligations and protect our legal rights
• To detect and prevent fraud or other harmful activities

Marketing Communications

If you have opted in to receive marketing communications from us, we may send you emails about new services, promotions, events, and news from Nectar at the Villa Salon • Spa. You may opt out at any time by clicking the "unsubscribe" link in any marketing email or by contacting us directly. We will not send you marketing communications without your prior consent.

Sharing Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

Service Providers

We share your information with trusted third-party vendors and service providers who assist us in operating our business, including:

• Boulevard — appointment scheduling and client management
• GoHighLevel (GHL) — website hosting, CRM, and marketing platform
• Payment processors — to securely process transactions
• Email marketing platforms — to deliver communications you have requested
• Google — analytics and mapping services

These service providers are contractually obligated to use your information only as directed by us and to protect it appropriately.

Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect the rights, property, or safety of our business, our clients, or others.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business assets, your personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and understand how visitors use our site. Cookies are small text files stored on your device.

Types of Cookies We Use

• Essential cookies — necessary for the website to function properly
• Analytics cookies — help us understand how visitors interact with our site (e.g., Google Analytics)
• Marketing cookies — used to deliver relevant advertisements and track campaign effectiveness
• Functionality cookies — remember your preferences and settings

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website. Most browsers allow you to refuse cookies or delete existing ones — consult your browser's help documentation for instructions.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, including maintaining your client history for service continuity, complying with our legal obligations, resolving disputes, and enforcing our agreements.

Client records are generally retained for a minimum of three (3) years following your last appointment. Marketing data is retained until you opt out or request deletion. You may request deletion of your personal information at any time, subject to legal and business record-keeping requirements.

Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. Our booking and payment systems use industry-standard encryption (SSL/TLS) to protect data in transit.

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach that affects your rights or freedoms, we will notify you as required by applicable law.

Your California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have specific rights regarding your personal information under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

Your Rights

• Right to Know — You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, our business purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete — You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to Correct — You have the right to request that we correct inaccurate personal information we hold about you.
• Right to Opt-Out of Sale or Sharing — We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information — You have the right to limit our use of sensitive personal information to purposes reasonably necessary for providing our services.
• Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA/CPRA rights.

Categories of Personal Information Collected (Last 12 Months)

• Identifiers (name, email, phone number, IP address)
• Commercial information (services purchased, appointment history)
• Internet or network activity (website usage data)
• Geolocation data (general location from IP address)
• Professional or employment information (for job applicants only)

How to Exercise Your Rights

To exercise any of your California privacy rights, please contact us using the information in the Contact section below. We will respond to verified requests within 45 days, as required by law. We may need to verify your identity before processing your request. You may also designate an authorized agent to submit requests on your behalf.

Shine the Light

California Civil Code Section 1798.83 permits California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. As noted above, we do not sell or share your personal information for third-party direct marketing purposes.

Children's Privacy

Our website and services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately and we will promptly delete such information.

Clients under the age of 18 must have a parent or guardian present for services and must have parental consent for booking appointments.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email or by posting a notice on our website.

We encourage you to review this policy periodically to stay informed about how we protect your information. Your continued use of our website or services after any changes constitutes your acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us: