We use the information you share to arrange your makeup appointment, manage your account and communicate with you.
Information we collect
When you create an account or book, we collect your name, email, phone number, appointment details and, for on-location services, the appointment address. Messages, booking notes and payment status are stored so Shaza can manage your service. Please share only personal details relevant to your appointment.
Payments and service providers
Stripe processes checkout securely. We store payment references and status, not your full card details. MongoDB hosts application data and Heroku hosts this website. If enabled, SendGrid delivers account and appointment emails, Cloudinary hosts portfolio images, and Google Maps suggests addresses as you type and calculates driving distance for on-location travel. Your address search text is sent to Google for suggestions. You can enter an address manually. See the Google Privacy Policy. Your appointment address is shared with the mapping service for that calculation.
Instagram and portfolio
Shaza may connect the business Instagram account to display selected public posts. Following a link to Instagram takes you to a separate service with its own privacy practices. Customer portfolio photos are managed by Shaza. To ask about a photo of you, send a message through your account.
Affiliate referrals
When you visit an affiliate link, a signed 30-day cookie records which link sent you here. We count link visits and connect a referral or promo code to a booking at checkout. Shaza can see the referred customer and appointment; affiliates see service, booking status and commission without the customer's name, email or phone. Affiliate mailing addresses and payout details support manual payouts. Zelle or bank details are encrypted in storage.
Cookies and security
This website uses session cookies to keep you signed in and protect forms, and a referral cookie if you visit an affiliate link. Passwords are stored as hashes. Integration credentials saved through the admin portal are encrypted. No system can promise absolute security.
Retention and your choices
We retain account and appointment information as needed to provide the service, maintain transaction records and resolve disputes. You can update your account details and request access, correction or deletion by messaging Shaza. Some transaction records may need to be retained for legal or accounting purposes.
Contact and requests
Use the contact page or your account messages for privacy questions. Read the data deletion instructions to request removal.