Privacy Policy

Updated August 15, 2026

Privacy Policy

Effective date: August 16, 2026
Baseline version: tenant-privacy-v1

This Privacy Policy explains how Sacramento Nails (the “Business”) handles information through this website and the services offered on it. USLY LLC (“USLY”) provides the website, booking, commerce, and analytics technology used by the Business.

Who is responsible

The Business decides why client, booking, purchase, and website information is used and is generally the controller or business for that information. USLY generally processes that information for the Business as its processor or service provider. USLY separately decides how it uses limited account, billing, security, support, and service-operation information for its own disclosed purposes.

  • Business: Sacramento Nails
  • Email: [email protected]
  • Address: 621 Capitol Mall Suite 120, Office 17, Sacramento, CA 95814

For questions about a booking, purchase, or this Business's practices, contact the Business first. Questions specifically about USLY may be sent to [email protected].

Information handled through this website

Depending on the features you choose to use, the Business and USLY may handle:

  • contact details you submit, such as name, email address, and phone number;
  • appointment, service, staff, scheduling, and communication details;
  • order, purchase, payment-status, refund, and fulfillment records;
  • form, message, review, upload, or other content you choose to submit;
  • account, consent, notification, and preference records; and
  • limited technical and security records needed to deliver the site, prevent abuse, diagnose errors, and protect accounts.

Stripe or another enabled payment provider processes payment-card or bank details. USLY does not store full payment-card numbers through Tenant Analytics.

Why information is used

The Business and USLY use information as reasonably needed to:

  • provide the website, appointments, purchases, digital products, and requested services;
  • process payments, refunds, fulfillment, and related records;
  • communicate about bookings, purchases, service messages, or support;
  • maintain accounts, availability, security, fraud prevention, and service reliability;
  • comply with applicable obligations and establish, exercise, or defend legal claims; and
  • perform the limited Tenant Analytics described below when enabled.

Tenant Analytics

If the Business enables Tenant Analytics, it receives aggregate reports about how its own website and business flows perform. The Business determines this measurement purpose; USLY operates the feature for the Business as a processor or service provider.

Optional website measurement

Browser-based Tenant Analytics is off until you select Allow analytics. After permission, USLY may create a pseudonymous handle limited to this exact website origin and record only approved visit, page-area, campaign, booking-step, and purchase-step event keys. It may connect those approved events to an authoritative booking or purchase outcome for aggregate reporting.

Before a choice, a campaign link may place one opaque campaign code in this tab's temporary session storage for no more than 30 minutes. The code is not a visitor identifier or event, sends no analytics request, and is deleted on use, decline, withdrawal, expiry, or a tenant boundary.

Choosing Keep analytics off does not affect your ability to browse, book, or buy. Without permission, Tenant Analytics does not collect or link a browser journey. Global Privacy Control is a hard deny. Do Not Track keeps browser measurement off until an explicit choice; an explicit Allow analytics choice may enable this first-party measurement when no hard prohibition applies. If Do Not Track appears after a grant, collection stops and requires a new explicit choice. You may withdraw later; withdrawal stops future browser collection but does not by itself delete earlier records.

Operational outcomes and money statistics

The Business may still use its ordinary booking, order, payment, and refund records to count completed outcomes and prepare aggregate business statistics even when browser analytics is off. When money reporting is enabled, those statistics may include successful payment and refund amounts in minor currency units, currency, and whether the transaction concerns an initial booking payment or digital product. An operational outcome is not connected to a browser journey that was not permitted.

Money reporting does not collect full card numbers, bank-account credentials, profit, tax advice, or medical information. Amounts remain separated by currency. Reports are intended as operational estimates and are not accounting, tax, or financial advice.

Analytics exclusions and use limits

Tenant Analytics is designed not to store names, contact details, form entries, message content, raw URLs or queries, raw referrers, IP addresses, user-agent strings, advertising click IDs, full payment-card or bank details, medical records, diagnosis or treatment information, or health histories.

USLY does not use Tenant Analytics to sell or share personal information, provide cross-context behavioral advertising, track a person across unrelated sites, build cross-tenant or individual profiles, make eligibility or pricing decisions, or train AI or general-purpose models. Tenant Analytics records are not described as anonymous merely because direct names are excluded.

Analytics retention

  • The optional exact-origin visitor handle expires after 45 days without accepted activity or 90 days from issue, whichever happens first.
  • An individual visit becomes inactive after 30 minutes without accepted activity and lasts no more than 24 hours.
  • A pre-choice opaque campaign code may remain only in the current tab for no more than 30 minutes.
  • Raw minimized visit and event records are retained for no more than 90 days.
  • Booking, purchase, payment, and refund projection facts and aggregate reports are retained for no more than 25 months under their applicable lifecycle.
  • Consent-choice and governance evidence may be retained for no more than 25 months.
  • Detailed security rejection records are retained for no more than 7 days, network tokens for no more than 24 hours, and minimized security counters for no more than 30 days.

Legal preservation may apply to a narrow record when required. Backups may retain a deleted record until the applicable restore cycle expires; restored analytics data remains subject to deletion controls.

Providers and disclosures

Information may be disclosed only as reasonably needed to providers supporting the selected service, such as USLY for the platform, AWS for hosting and storage, Cloudflare for delivery and edge security, Stripe for payments, and enabled communications providers. The Business may identify additional tools in its supplemental section below.

Information may also be disclosed when reasonably necessary to comply with law, protect people or the service, investigate abuse, complete a business transaction, or establish or defend legal claims. Neither the Business nor USLY uses Tenant Analytics to sell personal information or share it for cross-context behavioral advertising.

Your choices and possible rights

Depending on your location and applicable law, you may be able to request access, correction, deletion, portability, restriction, objection, or an appeal. Rights and exceptions differ by location. Contact the Business using the details above and describe the website, booking, purchase, or request involved. The Business may ask USLY to assist.

USLY and the Business use proportionate verification. They may be unable to match a deliberately low-identification analytics record without collecting disproportionate additional information. Withdrawal of analytics permission is prospective; deletion is a separate request.

Children and medical information

This website and USLY's service are intended for adults and are not directed to children. USLY is built for non-clinical beauty businesses and is not a medical-record system. Do not submit medical records, diagnoses, treatment plans, clinical notes, or health histories through this website. USLY does not promise to continuously inspect or medically classify all tenant or visitor content, and USLY does not provide a HIPAA business associate agreement for Tenant Analytics.

Security

The Business and USLY use measures selected for the size and risk of the service, including encrypted connections, access controls, tenant separation, data minimization, rate limits, and monitoring. No system is completely secure. Do not send passwords, payment-card details, medical information, or other unnecessary sensitive information in a privacy request.

Changes

This protected baseline may be updated when the service or its practices change. A material new analytics purpose or materially changed consent notice requires a new version and, where applicable, a new visitor choice. The Business may separately update its supplemental practices below.

Additional practices of the Business

The following content is supplied and controlled by the Business. It may describe additional purposes, tools, disclosures, retention periods, or local rights that apply to the Business. It does not expand USLY's permitted use of Tenant Analytics or override the protected baseline above.

Privacy Policy

This Privacy Policy describes how Sacramento Nails (“we”, “our”, “us”) collects, uses, and shares information when you use our website and services.

Information we collect

  • Contact details (name, email, phone)
  • Appointment details
  • Payment data (processed via Stripe)

How we use your information

  • Provide and manage services
  • Process payments
  • Communicate with you

Contact

If you have questions, contact us at [email protected].