A|Y Skin Studio LLC ("A|Y Skin Studio," "we," "our," or "us") respects your privacy. This Privacy Policy explains what information we collect when you visit https://www.ayskinstudio.com, create an account, book an appointment, purchase a service, communicate with us, or otherwise interact with our business.
1. Information We Collect
Depending on how you use the website, we may collect the following information.
Contact and account information: Full name, email address, phone number, account profile details, password-reset activity, appointment history, selected services, and future booking information.
Booking and intake information: Appointment date and time, service requested, appointment notes, skin type, skin concerns, intake answers, allergies or sensitivities voluntarily provided, treatment preferences, skincare products used, and other information relevant to safely providing an esthetic service.
Communication preferences: Whether you want appointment reminders and whether you want skincare follow-ups or rebooking notes. Marketing and follow-up communications are controlled by your consent and unsubscribe choices.
Guest bookings: You may book without creating an account. Guest bookings may require your name, email, phone number, selected service, appointment date and time, and intake information needed for the requested appointment.
2. How We Use Information
We use information to schedule and manage appointments, process deposits and payments, provide personalized esthetic services, maintain account and appointment history, respond to inquiries, send account and booking communications, prevent fraud or unauthorized activity, improve the booking experience, and comply with legal obligations.
Skin and service information is collected only to help us prepare for and provide the requested cosmetic or relaxation services. It is not used to diagnose or treat medical conditions.
3. Payments and Stripe
Stripe processes appointment deposits and other payments. We do not store complete credit or debit card numbers on our own systems.
We may receive limited payment and transaction details from Stripe, such as payment status, transaction or payment reference, amount, customer name, and information needed to match a payment to an appointment. Stripe handles payment card data under its own privacy and security practices.
4. Supabase Authentication and Data Storage
We use Supabase for account authentication and secure application data storage. Supabase may store account identifiers, profile information, appointment information, preferences, and booking information needed to operate the client account and admin systems.
Passwords are managed by Supabase Auth. A|Y Skin Studio does not receive or store your password in plain text. If you forget your password, you can use the password reset flow on the website to receive a secure reset link and set a new password through Supabase Auth.
Guest bookings are stored as guest appointment records and are not used to create a fake Supabase Auth account. Guests cannot use the public website to read other clients' appointments, profiles, or private admin notes.
5. Email Communications and Resend
We use Resend to deliver transactional emails related to the website and appointments, including welcome messages, booking confirmations, payment confirmations or receipts when available, appointment reminders, password reset messages, thank-you messages, and rebooking messages.
Automatic appointment reminders are sent only when the appointment reminder preference is enabled. Marketing, skincare follow-up, and rebooking emails are sent only when the applicable consent is enabled. You may unsubscribe from marketing or follow-up emails at any time.
Service-related messages that are necessary to operate your account, process a booking, provide a receipt, or communicate about an appointment may still be sent after you opt out of marketing messages.
6. Cookies, Sessions, and Browser Storage
Our website may use cookies and similar browser technologies, including local storage or session storage, to maintain secure login sessions, remember limited preferences, support account recovery, preserve booking flow state, and provide core website functionality.
Supabase Auth uses browser session information so the website can recognize an authenticated user. You can control or delete cookies and browser storage through your browser settings, but doing so may prevent login, booking, or account features from working correctly.
7. How We Share Information
We do not sell your personal information.
We may share information only as reasonably necessary with trusted service providers and other parties that help us operate the website or provide requested services, including:
- Stripe for payment processing;
- Supabase for authentication and secure data storage;
- Resend for email delivery;
- Website hosting and infrastructure providers;
- Professional advisers; and
- Government authorities or other parties when required by law or necessary to protect rights, safety, or security.
These providers receive only the information reasonably necessary for their services and may process it under their own terms and privacy policies.
8. Data Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These include Supabase authentication, access controls, encrypted communications where appropriate, database security policies, and secure third-party payment processing.
No website, database, or online transmission can guarantee absolute security. Please protect your account credentials and contact us promptly if you believe your account may have been compromised.
9. Data Retention
We retain personal information only for as long as reasonably necessary to provide services, operate accounts and appointment history, process payments, maintain business and accounting records, resolve disputes, enforce agreements, and comply with applicable law.
Retention periods vary depending on the type of information, the reason it was collected, legal requirements, and whether an active account or appointment relationship exists.
10. Florida and U.S. Privacy Rights
Depending on where you live and the law that applies to your request, you may have rights to request access to, correction of, deletion of, or a copy of certain personal information, and to receive information about how it is used. You may also have the right to opt out of marketing communications or withdraw consent for optional follow-up communications.
Florida residents and other U.S. residents may have additional rights under applicable state or federal law. To exercise a privacy right, contact us using the information below. We may need to verify your identity before completing certain requests, and legal exceptions may apply.
11. Children's Privacy
The website and our services are not directed to children. If services are provided to a minor, the appointment must be scheduled by or with the authorization of a parent or legal guardian, as required by our policies.
If we learn that we collected personal information from a child without appropriate authorization where required, we will take reasonable steps to delete it.
12. HIPAA Clarification
A|Y Skin Studio provides cosmetic and professional esthetic services. We are not a healthcare provider, health plan, or healthcare clearinghouse, and the website is not intended to create obligations under HIPAA unless applicable law requires otherwise.
Information you provide about skin concerns, allergies, sensitivities, or treatment preferences is used to prepare for requested esthetic services. It is not medical diagnosis or treatment information provided through a healthcare relationship.
13. Third-Party Links
The website may contain links to third-party websites or services, including payment, social media, or other external platforms. We are not responsible for the privacy practices, content, or security of those third parties. Please review their policies before providing information.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page and reflected by updating the "Last Updated" date. We encourage you to review this page periodically.
15. Contact Us
Business: A|Y Skin Studio LLC
Website: https://www.ayskinstudio.com
Phone: (561) 787-8383
Support email: [Insert Support Email]
If you have questions about this Privacy Policy or how we handle personal information, contact us using the information above.