PRIVACY POLICY

Effective Date: July 19, 2023

Draft revised: October 9, 2026

Business: The Freedom Esthetician
Website: https://www.thefreedomesthetician.com
Email: [email protected]

Thank you for visiting The Freedom Esthetician (the “Website”). Your privacy is important to us. This Privacy Policy (the “Policy”) describes the types of information The Freedom Esthetician (the “Company”, “us”, “we”, or “our”) may collect from you or that you may provide when you visit the Website and the products, features, materials, and services we offer (collectively with the Website, the “Services”). This Policy also describes our policies and procedures for collecting, using, maintaining, protecting, and disclosing that information.

This Policy applies to information we collect on the Website and through your use of the Services generally (including when you register for an account), and through communications between you and the Website (including email, text, and other electronic messages).

This Policy does not apply to information collected by third parties, including any websites, services, and applications that you elect to access through the Services.

Please review this Policy carefully to understand our information practices. This Policy is a notice of those practices. Using our Website does not, by itself, constitute consent to marketing text messages or to processing that requires separate consent under applicable law.

Changes to Our Privacy Policy.

This Policy was last revised on the date noted at the top of this page. We may update this Policy from time to time. If we make material changes, we will post the updated Policy on this page and notify you of such changes by means of an email to the email address specified in your account, a message on the Services, or through a notice on the Website home page. Please check the Policy periodically for updates. Where required by applicable law, we will obtain consent before making changes to processing that require it.

Information We Collect.

We receive several types of information about you from various sources, including (A) information and content that you give us; (B) automatically-collected information; and (C) demographic information or other aggregate information. Each is described in detail below.

Information and Content That You Give Us.

We collect personal information that you knowingly choose to disclose. This may include:

Personal Information (or Data). Personal information, such as your name, address, email address, phone number, username, password, and any other information you directly provide us on or through the Services. This includes information you provide when you register or create an account, complete a questionnaire or a contest entry form, or make a request for customer service.

Correspondences. Records and copies of your email messages together with your email address and our responses, if you choose to correspond with us through email, and records of your phone number, phone calls with us, and voice messages, if you choose to correspond with us via phone.

User Content. Information or content you submit to be published or displayed on public areas of the Services or transmitted to other users of the Services or third parties (collectively, “User Content”). Your User Content is posted and transmitted to others at your own risk. The Company cannot control the actions of other users of the Services with whom you may choose to share your User Content. Therefore, we cannot and do not guarantee that your User Content will not be viewed by unauthorized persons.

Transaction Information. Information about any purchase or transactions made on the Services. This may include purchase amounts, payment status, transaction references, and billing, shipping, and contact details. Payment card details submitted through an external payment processor are handled according to that processor’s privacy policy; the information we receive depends on the payment integration.

Search Queries. Your search queries on the Website.

Information We Collect Automatically.

We may use a variety of technologies to collect certain information about your equipment, browsing actions, and patterns whenever you interact with the Services, including:

Activity Information. Details of your visits to our Services, including the types of content you view or engage with; the features you use; the actions you take; the people or accounts you interact with; the time, frequency, and duration of your activities; and other information about your use of and actions on the Services.

Equipment Information. Information about your computer and internet connection, including your computer operating system, IP address, browser type, and browser language.

Location Information. We may derive approximate location from your IP address. Precise device location, if requested by an enabled feature, is collected only with the permission required by applicable law and device settings.

The gathering of this information may be used for maintaining the quality of the Services we provide, as well as providing overall general statistics related to the use of the Services. The technologies we use for this automatic data collection may include:

Cookies. A cookie is a small data file stored on the hard drive of your computer either for only the duration of your visit on a website (“session cookies”) or for a fixed period (“persistent cookies”). Cookies contain information that can later be read by a web server. We may use cookies to provide you with a more personal and interactive experience on the Services.

Web Beacons. Web beacons (also known as “clear gifs”, “pixel tags”, “web bugs”, and “single-pixel gifs”) are small files that are embedded in webpages, applications, and emails. Web beacons allow the Company, for example, to track who has visited those webpages or opened an email, test the effectiveness of our marketing, and compile other related website statistics.

JavaScripts. JavaScripts are code snippets embedded in websites and applications that facilitate a variety of operations including accelerating the refresh speed of certain functionality or monitoring usage of various online components.

Entity Tags. Entity Tags are HTTP code mechanisms that allow portions of websites to be stored or “cached” within your browser and validates these caches when the website is opened, accelerating website performance since the web server does not need to send a full response if the content has not changed.

HTML5 Local Storage. HTML5 local storage allows data from websites to be stored or “cached” within your browser to store and retrieve data in HTML5 pages when the website is revisited.

Resettable Device Identifiers. Resettable device identifiers (also known as “advertising identifiers”) are similar to cookies and are found on many mobile devices and tablets (e.g., the “Identifier for Advertisers” or “IDFA” on Apple iOS devices and the “Google Advertising ID” on Android devices), and certain streaming media devices. Like cookies, resettable device identifiers are used to make online advertising more relevant.

This Policy does not cover the use of tracking technologies by third parties. The Services may contain links, content, advertising, or references to other websites by third parties, including advertisers, ad networks and servers, content providers, and application providers. These third parties may use cookies or other tracking technologies to collect information about you when you use the Services. The information they collect may be associated with your personal information or they may collect information about your online activities over time and across different websites. Please be aware that we do not control these third parties’ tracking technologies or when and how they may be used. Therefore, the Company does not claim nor accept responsibility for any privacy policies, practices, or procedures of any third party. We encourage you to read the privacy statements and terms and conditions of linked or referenced websites you enter. If you have any questions about an ad or other targeted content, you should contact the responsible provider directly.

Demographic Information.

We may collect demographic, statistical, or other aggregate information that is about you, but individually does not identify you. Some of this information may be derived from personal information, but it is not personal information and cannot be tied back to you. We treat information as aggregated or de-identified only where it cannot reasonably be linked to an individual, and we do not attempt to re-identify it.

Information from Other Sources.

We may receive information about you from other sources and add it to our account information. We protect this information according to the practices described in this Policy, plus any additional restrictions imposed by the source of the data. These sources may include online and offline data providers, from which we obtain demographic, interest-based, and online advertising related data; publicly-available sources such as open government databases or social networks; and service providers who provide us with information, or updates to that information, based on their relationship with you. By gathering additional information about you, we can correct inaccurate information, enhance the security of your transactions, and give you product or service recommendations and special offers that are more likely to interest you.

How We Use Your Information.

We may use the information we collect about you in a variety of ways, including:

to provide the Services and its content to you;

to respond to comments and questions, and provide customer service;

to fulfill the purpose for which you provide such information, or fulfill any other purpose disclosed by us when you provide the information;

to communicate with you about your order, purchase, account, or subscription;

to inform you about important changes to, or other news about, the Services or any of its features or content;

to operate, maintain, improve, personalize, and analyze the Services;

to monitor and analyze trends, usage, and activities for marketing or advertising purposes;

to detect, prevent, or investigate security breaches, fraud, and other unauthorized or illegal activity;

to carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection;

to maintain appropriate records for internal administrative purposes;

to allow you to participate in interactive features on the Services;

to send promotional communications, such as information about features, newsletters, offers, promotions, contests, and events;

to share information across the Company’s products, services, and devices to provide a more tailored and consistent experience on all Company products, services, and devices that you use;

to develop, test, troubleshoot, and improve new products, services, and features, including by conducting surveys and research, and testing and troubleshooting new products, services, and features;

in any other way we may describe when you provide the information; and

for any other purpose with your consent.

We may use the information we have collected from you to enable us to display advertisements to our advertisers’ target audiences. Even though we do not disclose your personal information for these purposes without your consent, if you click on or otherwise interact with an advertisement, the advertiser may assume that you meet its target criteria.

How We Share Your Information.

We may disclose aggregated or de-identified information consistent with applicable law and obligations to preserve its de-identified status. We will not share your personal information that we collect or you provide as described in this Policy except in the following circumstances:

With subsidiaries and affiliates for business purposes. To our subsidiaries and affiliated companies for purposes of management and analysis, decision-making, and other business purposes.

When we work with service providers. To service providers, professional advisors, contractors, and other third parties that provide us with support services, such as payment processing, website hosting, information technology, sales, email and postal delivery, location mapping, product and service delivery, or analytics services, and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.

When we become involved in a sale or transfer of the Company. If we become involved with a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of the Company’s assets (whether as a going concern or as part of a bankruptcy, liquidation, or similar proceeding), to business entities or people involved in the negotiation or transfer.

When we are required by law. To comply with any court order, law, or legal process, including to respond to any government or regulatory request.

When we enforce our rights. To enforce or apply this Policy, our Terms of Use, where applicable, and other agreements, including for billing and collection purposes.

To help protect lawful interests. If we believe disclosure will help us protect the rights, property, or safety of the Company, our users, partners, agents, and others. This includes exchanging information with other companies and organizations for fraud protection, and spam and malware prevention.

To fulfill the purpose for that information or with your consent. To fulfill the purpose for which you provide the information, for any other purpose disclosed by us when you provide the information, or with your consent.

When we work with marketing service providers. To marketing service providers to assess, develop, and provide you with promotions and special offers that may interest you; administer contests, sweepstakes, and events; or for other promotional purposes.

When we work with business partners. To third parties whom we have strategic marketing alliances or partnerships with to provide you information regarding products and services that we think will be of interest to you.

Third-party platforms and social media networks. To third-party platforms and social media networks, if you have enabled features or functionality that link the Services to such a platform or network (such as logging into the Services using your account with the third party).

Information that you post on or through the public areas of the Services (e.g., in chat rooms, bulletin boards, and discussion groups) is generally accessible to, and may be collected and used by, others and may result in unsolicited messages or other forms of contact from others. Users of the Services are encouraged to exercise caution when providing personal information about themselves in public or interactive areas.

Detailed Information About Service Providers and Advertising.

We may use providers for website hosting, customer relationship management, appointment scheduling, payment processing, email delivery, text messaging, analytics, and workflow automation. These providers receive information needed to perform their services on our behalf, subject to applicable agreements and legal requirements.

The original template names Google Analytics, Google Ads, Google Ad Manager, Google Tag Manager, Meta/Facebook advertising tools, Zapier, Stripe, Mailgun, and Twilio. Their inclusion in that template does not establish that The Freedom Esthetician uses them. The published policy must identify the providers and practices actually used, including applicable vendor privacy and opt-out links.

If we use advertising pixels, audience tools, or remarketing services, those tools may process online identifiers, browsing activity, and other information disclosed at collection. Such disclosures may constitute a sale or sharing under applicable privacy law depending on the tool configuration, contracts, and use of the information. A transfer to a service provider is not automatically a sale merely because a vendor receives information.

The SMS protections below apply to every disclosure described in this Policy, including disclosures involving affiliates, advertising providers, business partners, and other third parties.

SMS Communications and Consent.

If you separately opt in to our text messaging program, The Freedom Esthetician may send the types of messages described at the point of opt-in, such as appointment reminders, responses to inquiries, service updates, or promotional messages. Promotional messages require the applicable marketing consent. Providing a phone number, submitting a form, making a purchase, or accepting this Policy does not by itself authorize promotional texts.

SMS consent is voluntary and is not a condition of purchase. Message frequency varies. Message and data rates may apply. Reply STOP to unsubscribe from text messages or HELP for assistance. You may also contact [email protected] for support. After opting out, you may receive one message confirming your request; further messages will stop unless you opt in again as permitted by applicable law.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be sold or shared with third parties for their own use. We may provide information necessary to vendors that deliver or support our messaging program on our behalf, solely for that purpose and subject to confidentiality and use restrictions. These protections apply notwithstanding other sharing provisions in this Policy.

We may retain records of your consent and opt-out requests to administer the messaging program and document compliance. Carriers are not liable for delayed or undelivered messages.

Your Choices.

Mechanisms to Control Your Information.

We strive to provide you with choices regarding the personal information you provide to us. We have created mechanisms to provide you with the following control over your information:

Cookies and Other Tracking Technologies. You may be able to set your browser to reject cookies and certain other technologies by adjusting the appropriate settings in your browser. Each browser is different, but many common browsers have preferences that may be adjusted to allow you to either accept or reject cookies and certain other technologies before they are set or installed, or allow you to remove or reject the use or installation of certain technologies altogether. We recommend that you refer to the Help menu in your browser to learn how to modify your browser settings. If you disable or refuse cookies or other tracking technologies, please note that some parts of the Services may become inaccessible or may not function properly.

Promotional Communications from the Company. If you do not wish to have your contact information used by the Company to promote our own or third-party products or services, you can opt out by (i) informing us of your preference at the time you register for an account, complete an order form, sign up for our newsletter, or complete any other form on or through the Services which we collect your data; (ii) modifying your user preferences in your account profile; (iii) following the opt-out instructions in the promotional emails we send you; or (iv) sending us an email stating your request. Please note that if you opt out of receiving promotional communications from us, we may still send you transactional communications, including emails about your account or purchases.

The Freedom Esthetician uses personal information for the purposes described in this Policy and at the time of collection. Disclosures to service providers and other recipients are limited as described above. Mobile information and SMS opt-in data are subject to the additional protections in the SMS section.

Targeted Advertising. If you do not want us to use information that we collect or that you provide to us to deliver advertisements according to our advertisers’ target-audience preferences, you can opt out by modifying your user preferences in your account profile. We do not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. Many advertising companies that collect information for interest-based advertising are members of the Digital Advertising Alliance or the Network Advertising Initiative, both of which maintain websites where people can opt out of interest-based advertising from their members.

.

Location Information. You may be able to adjust the settings of your device so that information about your physical location is not sent to us or third parties by (a) disabling location services within the device settings; or (b) denying certain websites or applications permission to access location information by changing the relevant preferences and permissions in your device or browser settings. Please note that your location may be derived from your GPS, WiFi, Bluetooth, and other device settings. If you have questions about how to disable your device’s location services, we recommend you contact your mobile service carrier or your device manufacturer.

Voice Transmissions. You may be able to adjust the settings of your device so that your voice transmissions cannot be sent to us or third parties by (a) disabling microphone and speech recognition services within the device settings; or (b) denying certain websites or mobile applications permission to access microphone and speech recognition services by changing the relevant preferences or permissions in your device or browser settings.

How We Respond to Do Not Track Signals.

“Do Not Track” is a privacy preference you can set in most web browsers. When you turn on this preference, it sends a signal or message to the websites you visit indicating that you do not wish to be tracked. Please note that we currently do not respond to Do Not Track browser settings.

Accessing and Correcting Your Information.

You may send us an email to request access to, correct, or remove any personal information that you have provided to us. If the Services offer an account profile, you may also be able to update information there. You do not need to create an account to submit a privacy request. Some information may need to be retained for legal, accounting, security, or other permitted purposes.

We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

If you delete your User Content from the Services or your account, copies of your User Content may remain viewable in cached and archived pages, or might have been copied or stored by other users of the Services.

State Privacy Rights.

Depending on your residence, the laws that apply to The Freedom Esthetician, and applicable exceptions, you may have rights to access or obtain a copy of your personal information, correct inaccurate information, request deletion, and opt out of a sale of personal information, sharing for cross-context behavioral advertising, targeted advertising, or certain profiling. Some laws also provide rights concerning sensitive personal information and the right to appeal a denied request.

California residents may have rights under the California Consumer Privacy Act, as amended by the CanadaPrivacy Rights Act, where that law applies. Virginia residents may have rights under the Virginia Consumer Data Protection Act where that law applies. Other state privacy laws may provide additional rights. These laws do not automatically apply to every business.

To submit a request, email [email protected]. Describe your request and provide enough information for us to locate the relevant records. We may need to verify your identity for access, correction, or deletion requests. We do not require identity verification for requests to opt out of sale or sharing where applicable law prohibits it. An authorized agent may submit a request subject to applicable authorization and verification requirements.

We will respond within the time required by applicable law, explain any permitted extension or denial, and provide an appeal process where required. You may submit an appeal to [email protected]. We will not unlawfully discriminate against you for exercising your privacy rights.

Where legally required, we will process recognized opt-out preference signals, such as Global Privacy Control, as requests to opt out of sale or sharing. Browser Do Not Track settings are distinct from these signals. Any advertising opt-out links or cookie controls described in a published policy must be available and operational on the Website.

Data Retention.

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including providing services, maintaining business records, resolving disputes, preventing fraud, meeting legal obligations, and documenting consent and opt-out requests. Retention periods depend on the type of information, its purpose, and applicable legal requirements. We delete or de-identify information when it is no longer needed, subject to lawful retention exceptions.

Children’s Privacy.

The Website is not directed to children under 13, and we do not knowingly collect their personal information through the Website without legally required authorization. If you believe a child has provided personal information improperly, contact [email protected] so we can investigate and take appropriate action. Any services offered to minors must follow the applicable parental consent and privacy requirements.

How We Protect Your Information.

We take reasonable precautions to secure your personal information. We have implemented technical, physical, and administrative security measures designed to reduce the risk of loss, misuse, unauthorized access, disclosure, or modification of your information. We have put in place appropriate physical, electronic, and managerial procedures to safeguard the information we collect. Security measures may include access controls and encryption in transit, as appropriate to the systems and information involved. Payment processors maintain their own security measures.

The safety and security of your information also depend on you. Where we have given you (or where you have chosen) a password for access to certain parts of the Services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

While we have employed security technologies and procedures to assist in safeguarding your personal information, no system or network can be guaranteed to be 100% secure. Unauthorized entry or use, hardware or software failure, and other factors may compromise the security of user information at any time. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website or any other Services.

Terms of Use and Third-Party Sites.

Any separately published Terms of Use govern use of the Services as applicable. This Privacy Policy does not establish a governing-law clause or waive your statutory privacy rights. External sites and services have their own privacy policies; review those policies before providing information to them.

Cookies and Tracking Choices.

Where enabled, cookies and similar technologies may support essential website functions, analytics, and advertising. You can manage cookies through browser settings and any available website privacy controls. Disabling certain cookies may affect website functionality. Where required by applicable law, we obtain consent for nonessential tracking and honor applicable opt-out preference signals.

Contact Us.

For privacy questions, requests, or messaging support, contact:

The Freedom Esthetician
Email: [email protected]