We use the information you share to arrange your makeup appointment, manage your account and communicate with you.
Information we collect
When you create an account or book, we collect your name, email, phone number, appointment details and, for on-location services, the appointment address. Messages, booking notes and payment status are stored so Shaza can manage your service. Please share only personal details relevant to your appointment.
Payments and service providers
Stripe processes checkout securely. We store payment references and status, not your full card details. MongoDB hosts application data and Heroku hosts this website. If enabled, SendGrid delivers account and appointment emails, Cloudinary hosts portfolio images, and Google Maps suggests addresses as you type and calculates driving distance for on-location travel. Your address search text is sent to Google for suggestions. You can enter an address manually. See the Google Privacy Policy. Your appointment address is shared with the mapping service for that calculation.
Instagram and portfolio
Shaza may connect the business Instagram account to display selected public posts. Following a link to Instagram takes you to a separate service with its own privacy practices. Customer portfolio photos are managed by Shaza. To ask about a photo of you, send a message through your account.
Cookies and security
This website uses essential session cookies to keep you signed in and protect forms. Passwords are stored as hashes. Integration credentials saved through the admin portal are encrypted. No system can promise absolute security.
Retention and your choices
We retain account and appointment information as needed to provide the service, maintain transaction records and resolve disputes. You can update your account details and request access, correction or deletion by messaging Shaza. Some transaction records may need to be retained for legal or accounting purposes.
Contact and requests
Use the contact page or your account messages for privacy questions. Read the data deletion instructions to request removal.