PRIVACY POLICY

Effective Date: August 19, 2026
Last Updated: August 19, 2026

Whole Lash Care and Rebecca Trento (“Whole Lash Care,” “we,” “us,” or “our”) respect your privacy.

This Privacy Policy explains how personal information may be collected, used, disclosed, and otherwise processed when you visit wholelashcarechico.com (the “Website”), contact Whole Lash Care, join a waitlist, follow links to book an appointment, or otherwise interact with our business.

Whole Lash Care is located inside Livvy & Co Salon at:

1 Williamsburg Lane, Suite A
Chico, California 95973

1. Information We May Collect

The information we collect depends on how you interact with Whole Lash Care.

Information You Provide Directly

We may receive information you voluntarily provide, such as:

```
name;
```
```
telephone number;
```
```
email address;
```
```
appointment information;
```
```
service preferences;
```
```
messages or inquiries;
```
```
waitlist information;
```

transaction or customer-service information;

information submitted through appointment forms;

information you provide during consultations; and

other information you voluntarily provide.

Information relating to allergies, sensitivities, health conditions, medications, prior reactions, or other matters relevant to safely performing a service may also be provided during an appointment consultation or intake process.

Please provide only information reasonably necessary for your service or request.

2. Information Collected Automatically

When you visit the Website, Squarespace and other Website service providers may automatically collect technical and usage information through cookies, server logs, and similar technologies.

This may include:

```
Internet Protocol (IP) address;
```
```
browser type;
```
```
device type;
```
```
operating system;
```
```
pages viewed;
```
```
links clicked;
```
```
referring website or page;
```
```
date and time of access;
```

approximate geographic location derived from an IP address; and

```
other Website interaction information.
```

3. Squarespace and Website Cookies

The Website uses Squarespace infrastructure.

Squarespace and related technology providers may use cookies and similar technologies to operate, secure, troubleshoot, and measure use of the Website.

Cookies are small files stored on a browser or device. Depending on the Website configuration, cookies may be used for:

```
essential Website functionality;
```
```
security;
```
```
preferences;
```
```
Website analytics; and
```
```
performance measurement.
```

You can generally control cookies through your browser settings. Disabling some cookies may affect Website functionality.

If Whole Lash Care adds advertising pixels, additional analytics platforms, or other tracking technologies in the future, this Privacy Policy should be updated to accurately describe those practices.

4. Appointment Booking Through Square

The Website currently directs users to Square to book appointments.

When you access Square or another third-party booking or payment platform, information you provide may be collected directly by that provider.

This may include:

```
name;
```
```
telephone number;
```
```
email address;
```
```
appointment date and time;
```
```
selected services;
```
```
payment or card information;
```
```
transaction information;
```
```
device information; and
```

other information needed to schedule or manage an appointment.

Square processes information according to its own privacy policy, terms, and security practices.

Whole Lash Care may receive appointment, contact, transaction, or other information from Square that is reasonably necessary to provide services, communicate with you, manage appointments, process payments, maintain business records, or address customer-service issues.

5. Payment Information

Payments may be processed through Square or another third-party payment processor.

Complete payment-card information submitted directly through a third-party processor is generally processed by that provider rather than stored directly through the Whole Lash Care Website.

Payment processors maintain their own privacy and security practices.

6. Consultation and Service Information

To safely and appropriately provide certain lash and brow services, Whole Lash Care may ask clients for information relating to allergies, sensitivities, previous reactions, medications, eye or skin conditions, or other circumstances relevant to the requested service.

This information is used for purposes such as:

determining whether a service is appropriate;

```
reducing foreseeable risks;
```
```
documenting informed consent;
```
```
customizing services;
```

responding to an adverse reaction or concern; and

```
maintaining appropriate client records.
```

Whole Lash Care does not use this information for unrelated advertising purposes.

This Website is not intended to collect detailed medical records, and Whole Lash Care is not representing that it is a healthcare provider subject to HIPAA merely because health-related information may be relevant to cosmetic services.

7. How We May Use Personal Information

Whole Lash Care may use information to:

```
operate and maintain the Website;
```
```
schedule and manage appointments;
```
```
maintain a client waitlist;
```
```
provide lash and brow services;
```
```
communicate about appointments;
```

send appointment confirmations or reminders;

respond to questions and customer-service requests;

```
process transactions;
```
```
maintain client and business records;
```
```
assess service suitability and safety;
```

prevent fraud, misuse, or security threats;

understand Website traffic and performance;

```
comply with legal obligations;
```
```
enforce agreements and policies; and
```

establish, exercise, or defend legal claims.

We may also use aggregated or deidentified information that does not reasonably identify an individual.

8. Text Messages and Communications

If you contact Whole Lash Care by text message or provide your telephone number in connection with an appointment, we may use that number to communicate with you about appointments, scheduling, services, customer-service matters, or other communications you request.

Standard message and data rates may apply based on your mobile carrier.

Providing a telephone number for appointment-related purposes does not automatically authorize unrelated promotional text messages where separate consent is required by law.

9. How Information May Be Disclosed

We may disclose information to service providers that assist us in operating Whole Lash Care, such as:

```
Squarespace;
```
```
appointment-booking providers;
```
```
payment processors;
```
```
information-technology providers;
```
```
communication providers;
```
```
accounting or bookkeeping providers;
```
```
professional advisers; and
```

other vendors reasonably necessary to operate the business.

We may also disclose information:

when you request or authorize us to do so;

when reasonably necessary to provide a requested service;

when required by applicable law, legal process, subpoena, court order, or governmental request;

when reasonably necessary to protect Whole Lash Care, Rebecca Trento, clients, or others;

to investigate fraud, security incidents, or unlawful activity;

to establish, exercise, or defend legal claims; or

in connection with a merger, sale, financing, restructuring, or transfer of the business.

10. Sale or Sharing of Personal Information

Whole Lash Care does not sell personal information for monetary consideration based on the Website practices described in this Privacy Policy.

The Website is not currently described as using personal information for cross-context behavioral advertising.

If Whole Lash Care begins using advertising pixels or similar technologies that may constitute a “sale” or “sharing” under California privacy law, this Privacy Policy and any legally required privacy controls should be updated accordingly.

11. California Privacy Rights

California law provides certain privacy rights to California residents in specified circumstances.

The California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), applies only to businesses that meet statutory requirements and thresholds.

If Whole Lash Care becomes subject to the CCPA or another applicable California privacy requirement, eligible California residents may have rights that include:

requesting information about personal information collected;

requesting access to certain personal information;

requesting correction of inaccurate personal information;

requesting deletion of certain personal information;

requesting information regarding certain disclosures;

opting out of the sale or sharing of personal information where applicable;

limiting certain uses of sensitive personal information where applicable; and

exercising applicable privacy rights without unlawful discrimination.

These rights are subject to statutory limitations and exceptions.

Even where a particular privacy statute does not apply, Whole Lash Care may consider reasonable requests concerning personal information on a case-by-case basis.

Privacy requests may be submitted using the contact information below.

12. California “Shine the Light”

California Civil Code Section 1798.83 may provide certain California residents with rights regarding disclosure of personal information to third parties for their own direct-marketing purposes.

Whole Lash Care does not disclose personal information to third parties for their own direct-marketing purposes in exchange for compensation based on the practices described in this Policy.

13. Data Retention

Whole Lash Care retains information for as long as reasonably necessary for the purposes for which it was collected.

This may include periods reasonably necessary to:

```
manage appointments;
```
```
maintain client history;
```
```
provide customer service;
```

maintain tax, accounting, and transaction records;

document consultation or consent information;

```
resolve disputes;
```
```
comply with legal obligations; and
```

establish, exercise, or defend legal claims.

Retention periods vary depending on the nature of the information.

14. Data Security

Whole Lash Care uses reasonable administrative and technical measures designed to protect personal information under its control.

However, no website, electronic transmission, mobile communication, payment system, or information-storage method can be guaranteed to be completely secure.

Third-party providers such as Squarespace and Square maintain their own security measures for information they process.

15. Children and Minors

The Website is intended for a general audience and is not directed to children under 13.

Whole Lash Care does not knowingly use the Website to collect personal information directly from children under 13 without appropriate authorization.

Appointments for minors may require involvement or consent from a parent or legal guardian depending on the age of the client, nature of the service, and applicable requirements.

If you believe information from a child has been submitted through the Website inappropriately, contact Whole Lash Care at 530-566-0103.

16. Third-Party Websites and Social Media

The Website may contain links to Square, Instagram, other social-media services, mapping platforms, or other third-party websites.

Those services operate independently and may collect information according to their own privacy policies.

Whole Lash Care does not control third-party privacy, security, or data-processing practices.

17. Do Not Track and Privacy Preference Signals

Some browsers provide “Do Not Track” or other privacy preference mechanisms.

Because there is not a uniform legal or technical standard applicable to every type of browser signal, the Website may not respond to all such signals.

Where applicable law requires Whole Lash Care to recognize a particular legally valid opt-out preference signal, Whole Lash Care will endeavor to comply with that requirement.

18. International Visitors

Whole Lash Care is based in California, United States.

If you access the Website from outside the United States, information may be transferred to or processed in the United States or in other jurisdictions in which our service providers operate.

19. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in the Website, services, technology providers, business practices, or applicable requirements.

The “Last Updated” date above identifies the most recent revision.

20. Contact Us

Questions or privacy-related requests may be directed to:

Whole Lash Care
Rebecca Trento
Located inside Livvy & Co Salon
1 Williamsburg Lane, Suite A
Chico, CA 95973
530-566-0103