Privacy Policy

Skin Deep Esthetics and Wellness LLC

Effective Date: July 4, 2026
Last Updated: July 4, 2026

1. Introduction

Skin Deep Esthetics and Wellness LLC ("Skin Deep," "we," "us," or "our") respects your privacy and is committed to protecting it through this Privacy Policy. This policy explains how we collect, use, disclose, and safeguard information when you visit our website at https://myfaciallady.com/ (the "Site"), purchase products, book appointments, or otherwise interact with us.

By using the Site, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Site.

2. Who We Are

Skin Deep Esthetics and Wellness LLC is a Utah limited liability company providing esthetics and skincare services, located in Eagle Mountain, Utah.

Business name: Skin Deep Esthetics and Wellness LLC
Address: 1805 East American Way Unit 5, Eagle Mountain UT 84005
Email: jenny@myfaciallady.com
Phone: 410-382-1975

3. Information We Collect

We collect the following categories of information:

3.1 Information You Provide Directly

Contact information: name, email address, phone number, mailing/shipping address.
Account/booking information: appointment details, service preferences, appointment history, communications with us.
Client intake and health information: when you book a service, we collect intake information — skin type, skin conditions, allergies, sensitivities, medications, pregnancy status, and similar information reasonably necessary to safely and effectively provide esthetics services — through a digital intake form via Acuity Scheduling, typically completed in advance of your appointment. For walk-in clients or clients who do not complete the digital form in advance, we instead collect this information on a paper intake form at the time of your appointment. Paper intake forms are stored in a locked filing cabinet and retained for 5 years following your last service appointment for liability purposes. This information is treated as sensitive personal information (see Section 8). We do not collect this intake/health information from customers who purchase products only, unless that customer separately books an in-person service with us.
Order information: products purchased, order history, and shipping information. Online product orders are fulfilled via drop-shipment directly by our supplier, Skin Script, which means your name, shipping address, and order details are shared with Skin Script to fulfill your order. In-person product purchases are completed at the time of your service appointment and do not involve Skin Script.
Payment information: we do not directly collect or store full credit card numbers. Online payments are processed through Stripe. In-person payments may be made by cash, Venmo, or card via a Square card reader. We may receive limited transaction information (such as the last four digits of a card, order total, and confirmation status) from these providers, but we do not have access to your full payment credentials.
Communications: messages you send us through contact forms, email, or booking-platform messaging.

3.2 Information Collected Automatically

When you visit the Site, we and our service providers may automatically collect:

Device and browser information, IP address, approximate location, referring/exit pages, and pages viewed.
Cookies and similar tracking technologies (see Section 6).
Analytics data regarding how you interact with the Site (e.g., via Google Analytics).
Advertising identifiers collected through retargeting/advertising pixels (e.g., Meta/Facebook Pixel, Google Ads).

3.3 Information from Third Parties

We may receive information about you from:

Our scheduling and intake platform, Acuity Scheduling.
Our payment processors, Stripe and Square (for in-person card payments).
Shipping carriers and fulfillment providers.
Marketing platforms (e.g., email service providers), if you subscribe to communications.

4. How We Use Information

We use the information we collect to:

Schedule, confirm, and manage appointments;
Process orders, payments, and shipping;
Provide safe and appropriate esthetics services based on intake information;
Communicate with you about appointments, orders, and customer service;
Send marketing communications, where permitted, and honor opt-out requests;
Operate, maintain, and improve the Site;
Analyze Site usage and measure the effectiveness of advertising;
Detect, prevent, and address fraud, security issues, or technical problems;
Comply with legal obligations and enforce our terms.

We do not sell your health/intake information, and we do not use it for advertising purposes.

5. How We Share Information

We do not sell your personal information for money. We may share information with:

Service providers who perform functions on our behalf, including:
- Acuity Scheduling (appointment booking and digital intake forms);
- Stripe and Square (payment processing);
- Squarespace (website hosting and platform);
- Skin Script (drop-shipment order fulfillment for online product orders — your name, shipping address, and order details are shared for this purpose);
- Shipping and fulfillment carriers;
- Email/marketing platforms;
- Analytics and advertising providers (Google Analytics, Meta/Facebook, Google Ads).
Legal and safety reasons: to comply with law, respond to legal process, protect our rights, or protect the safety of any person.
Business transfers: in connection with a merger, acquisition, or sale of business assets, subject to standard confidentiality protections.

Under certain state privacy laws (e.g., California), sharing information with advertising partners via cookies/pixels for targeted advertising may be considered a "sale" or "sharing" of personal information even though no money changes hands. See Section 9 for your rights regarding this.

We do not control, and are not responsible for, the privacy practices of third-party platforms (such as Acuity Scheduling, Stripe, Square, Squarespace, or Skin Script) once your information is in their possession. We encourage you to review their privacy policies directly:

6. Cookies and Tracking Technologies

Our Site is built on Squarespace, which places cookies to operate the Site and (where enabled) to support analytics. We use the following categories of cookies:

Necessary cookies: required for core Site functionality, such as shopping cart/checkout, customer account login, and Acuity Scheduling's booking and login features. These cannot be disabled through the cookie banner because the Site would not function properly without them.
Analytics/performance cookies: help us understand how visitors use the Site (e.g., unique visitors, traffic sources, cart abandonment) through Squarespace's built-in analytics and Google Analytics (if enabled). These are only placed if you consent via our cookie banner.
Advertising/marketing cookies: used by us and third-party ad networks (e.g., Meta/Facebook Pixel, Google Ads) to show relevant ads on other sites and measure ad performance. These are only placed if you consent via our cookie banner.

Cookie banner: Our Site displays Squarespace's standard cookie consent banner when you first visit. You can Accept or Reject non-essential (analytics and marketing) cookies through that banner, or manage your preferences at any time by revisiting the banner's settings. Necessary cookies are placed regardless of your choice, since they are required for the Site to function.

Other choices: Most browsers also let you refuse or delete cookies through browser settings. You can separately opt out of interest-based Google advertising and Meta advertising through their respective account settings or industry opt-out tools such as the Digital Advertising Alliance opt-out page and the Network Advertising Initiative opt-out page. Disabling cookies may affect Site functionality (e.g., booking or checkout may not work correctly).

We currently do not respond to browser "Do Not Track" signals as an opt-out mechanism; enabling "Do Not Track" in your browser does not stop analytics tracking on the Site; it only affects how Squarespace's built-in analytics count that visit (e.g., each page view may be counted as a new visitor). Where required by law, we honor recognized opt-out preference signals such as the Global Privacy Control (GPC).

7. Data Retention

We retain personal information for as long as necessary to:

Provide services and fulfill orders;
Maintain business, tax, and accounting records as required by law;
Maintain client intake/health records to support safe service delivery and to document informed consent and services rendered; and
Resolve disputes and enforce agreements.

Retention periods vary by data type:

Paper intake forms: retained for 5 years following your last service appointment with us, then securely destroyed. These are stored in a locked filing cabinet.
Digital intake information in Acuity Scheduling: retained according to Acuity's standard data retention policy; review Acuity Scheduling's privacy policy for details.
Payment and order records: retained as long as required for tax, accounting, and business purposes (typically 3–7 years depending on applicable law).
Other personal information: retained only as long as reasonably necessary for the purposes above, after which it is securely deleted or de-identified.

8. Sensitive Information and Health Data

Our intake forms may collect health-adjacent information (skin conditions, allergies, medications, pregnancy status, etc.) to safely and effectively perform esthetics services. We only collect this information from clients booking an in-person service with us in Utah. If you purchase products only — including customers located outside Utah — we do not collect or request this intake/health information.

Important clarification: Skin Deep Esthetics and Wellness LLC is an esthetics/wellness business, not a healthcare provider, and is not a "covered entity" under the Health Insurance Portability and Accountability Act (HIPAA). Information you provide is used solely to inform the services we provide and is not shared with insurers or used for medical treatment, diagnosis, or billing purposes.

We treat this information as sensitive personal data. We do not use it for advertising, do not sell it, and limit access to it to personnel who need it to provide your service. Where state law (such as the Utah Consumer Privacy Act or California law) classifies certain intake data as "sensitive personal information," you may have additional rights described in Section 9.

9. Your Privacy Rights

Depending on where you live, you may have rights under applicable state privacy laws, including the Utah Consumer Privacy Act (UCPA) and, for residents of other states where you may be shopping from (such as California's CCPA/CPRA), similar state laws.

Where applicable, you may have the right to:

Confirm whether we process your personal information;
Access the personal information we hold about you;
Delete personal information you have provided;
Obtain a copy of personal information you provided, in a portable format;
Opt out of the processing of personal information for purposes of targeted advertising or the "sale" of personal information (as those terms are defined under applicable law).

Note: The UCPA (Utah's law) does not currently include a right to correct inaccurate information, and its scope of covered businesses is narrower than California's law; whether specific rights legally apply to a given request may depend on our size, revenue, and the volume of data we process. This section describes rights that may be available under various state laws generally — it does not guarantee that every right applies to every visitor.

How to Exercise Your Rights

To submit a request, contact us at jenny@myfaciallady.com or 410-382-1975. We may need to verify your identity before completing certain requests. You may designate an authorized agent to act on your behalf where permitted by law. We will not discriminate against you for exercising these rights.

10. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including relying on reputable third-party platforms for payment processing (which maintain their own PCI-DSS compliance) rather than storing full payment card data ourselves. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

12. Third-Party Links and Platforms

The Site is built on Squarespace and uses Acuity Scheduling for booking and intake, Stripe and Square for payment, and Skin Script for drop-shipped product fulfillment. Those platforms have their own privacy policies and terms, which govern your interaction with them. We encourage you to review those policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Material changes may be communicated through additional notice (such as email or a Site banner) where required by law.

14. Governing Law

This Privacy Policy is governed by the laws of the State of Utah, without regard to conflict-of-law principles, except as otherwise required by applicable state consumer privacy laws where you reside.

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:

Skin Deep Esthetics and Wellness LLC
1805 East American Way Unit 5, Eagle Mountain UT 84005
jenny@myfaciallady.com
410-382-1975