PRIVACY POLICY

Last updated July 13, 2026

This Privacy Notice for The Nest Beauty Services LLC ("we," "us," or "our") describes how and why we may access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

• Visit our website at https://www.thenestbeautyservices.com/ or any website of ours that links to this Privacy Notice.

• Use The Nest Beauty Services. The Nest Beauty Services is a full-service salon and spa located in Riverdale, Utah. We offer professional beauty services including manicures, pedicures, builder gel nails, haircuts and styling, eyelash extensions, Korean and traditional lash lifts, brow laminations, waxing, custom spray tanning, facials, chemical peels, and other esthetic services. As part of our commitment to making self-care more accessible, we provide complimentary onsite childcare during appointments. Our website allows clients to book appointments, purchase gift cards and retail products, complete required intake forms, subscribe to marketing communications, and contact our team.

• Engage with us in other related ways, including marketing, promotions, or events.

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you have questions or concerns, contact us at thenestbeautyservices@gmail.com.

 

SUMMARY OF KEY POINTS

This summary provides key points from our Privacy Notice. More details appear in the numbered sections below.

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us, the choices you make, and the products and features you use.

Do we process sensitive personal information? Some information may be considered "special" or "sensitive" in certain jurisdictions. We may process sensitive personal information when necessary, with your consent, or as otherwise permitted by applicable law.

Do we collect information from third parties? We may collect information from public databases, marketing partners, social media platforms, and other outside sources.

How do we process your information? We process information to provide, improve, and administer our Services, communicate with you, protect against fraud and security threats, comply with law, and for other purposes with your consent.

When and with whom do we share personal information? We may share information in specific situations and with specific third parties as described in this Privacy Notice.

How do we keep your information safe? We use reasonable organizational and technical safeguards, but no electronic transmission or storage method can be guaranteed to be completely secure.

What are your rights? Depending on where you live, you may have rights regarding your personal information.

How do you exercise your rights? Contact us at thenestbeautyservices@gmail.com. We will consider and act on requests in accordance with applicable data protection laws.

 

TABLE OF CONTENTS

1. WHAT INFORMATION DO WE COLLECT?

2. HOW DO WE PROCESS YOUR INFORMATION?

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

5. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?

6. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

7. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?

8. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

9. HOW LONG DO WE KEEP YOUR INFORMATION?

10. HOW DO WE KEEP YOUR INFORMATION SAFE?

11. DO WE COLLECT INFORMATION FROM MINORS?

12. WHAT ARE YOUR PRIVACY RIGHTS?

13. CONTROLS FOR DO-NOT-TRACK FEATURES

14. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

15. DO WE MAKE UPDATES TO THIS NOTICE?

16. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

17. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

 

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you voluntarily provide to us.

We collect personal information that you voluntarily provide when you register for the Services, express an interest in obtaining information about us or our products and Services, participate in activities on the Services, book or purchase through the Services, complete forms, or otherwise contact us.

 

Personal Information Provided by You

The personal information we collect depends on the context of your interactions with us, the choices you make, and the products and features you use. It may include:

• Names

• Phone numbers

• Email addresses

• Mailing addresses

• Usernames

• Passwords

• Contact preferences

• Contact or authentication data

• Billing addresses

• Debit or credit card information

Sensitive Information

When necessary, with your consent or as otherwise permitted by applicable law, we may process health data and other information provided through intake or service forms that may be considered sensitive.

Payment Data

We may collect data necessary to process payments, such as payment instrument details and associated security codes. Payment data is handled and stored by our payment processors, including Boulevard and Stripe. Their own privacy notices govern their handling of payment data.

Social Media Login Data

We may allow you to register or log in using an existing social media account. If you choose to do so, we may receive profile information from the social media provider as described in Section 8.

All personal information you provide must be true, complete, and accurate, and you must notify us of changes.

Information automatically collected

In Short: Some information, such as your Internet Protocol (IP) address and browser or device characteristics, is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information generally does not directly reveal your identity but may include device and usage information, such as IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, approximate location, information about how and when you use our Services, and other technical information. This information is used primarily for security, operation, analytics, and reporting.

Like many businesses, we also collect information through cookies and similar technologies.

• Device Data. Information about the computer, phone, tablet, or other device used to access the Services, which may include IP address or proxy server, device and application identifiers, browser type, hardware model, Internet service provider or mobile carrier, operating system, and system configuration.

• Location Data. Information about your device's location, which may be precise or imprecise depending on your device and settings. You can limit this collection through your device permissions, although doing so may affect certain features.

Google API

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including applicable Limited Use requirements.

Information collected from other sources

In Short: We may collect limited data from public databases, marketing partners, social media platforms, and other outside sources.

To improve our ability to provide relevant marketing, offers, and Services and to update our records, we may obtain information from public databases, joint marketing partners, affiliate programs, data providers, social media platforms, and other third parties. This may include mailing addresses, job titles, email addresses, phone numbers, intent or user-behavior data, IP addresses, social media profiles, social media URLs, and custom profiles.

If you interact with us through a social media platform, we may receive information such as your name, email address, gender, profile information, or other information permitted by your privacy settings. The platform's own use of your information is governed by its privacy notice.

2. HOW DO WE PROCESS YOUR INFORMATION?

​

In Short: We process your information to provide, improve, and administer our Services, communicate with you, protect against security threats and fraud, comply with law, and for other purposes with your consent.

We process personal information for a variety of reasons depending on how you interact with our Services, including:

• To facilitate account creation and authentication and otherwise manage user accounts.

• To respond to inquiries and offer customer support.

• To fulfill and manage appointments, orders, payments, returns, and exchanges.

• To request feedback and contact you about your use of the Services.

• To send marketing and promotional communications in accordance with your preferences.

• To deliver targeted advertising and personalized content.

• To protect our Services, including fraud monitoring and prevention.

• To identify usage trends and improve the Services.

• To determine the effectiveness of marketing and promotional campaigns.

• To save or protect an individual's vital interests, such as preventing harm.

• To comply with legal obligations and enforce our agreements.

• ​

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

In Short: We process personal information when we believe it is necessary and we have a valid legal reason under applicable law, such as consent, performance of a contract, compliance with law, protection of rights, or legitimate business interests.

If you are located in the European Economic Area or United Kingdom

The GDPR and UK GDPR require us to explain the legal bases we rely on. Depending on the circumstances, we may rely on:

• Consent. You have given permission to use personal information for a specific purpose. You may withdraw consent at any time.

• Performance of a Contract. Processing is necessary to fulfill contractual obligations to you or to take steps at your request before entering into a contract.

• Legitimate Interests. Processing is reasonably necessary to achieve legitimate business interests, provided those interests do not outweigh your rights and freedoms. Examples include sending information about offers, developing relevant advertising, analyzing and improving Services, supporting marketing, diagnosing problems, preventing fraud, and understanding how users interact with our products and Services.

• Legal Obligations. Processing is necessary to comply with legal or regulatory obligations, cooperate with authorities, exercise or defend legal rights, or disclose information as evidence.

• Vital Interests. Processing is necessary to protect your vital interests or those of another person.

If you are located in Canada

We may process information with express or implied consent. You may withdraw consent at any time. In limited cases, applicable law may permit processing without consent, including for fraud detection, investigations, certain business transactions, insurance claims, emergencies, compliance with subpoenas or court orders, publicly available information, journalism or artistic purposes, and approved research or statistical projects.

 

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information in specific situations described below and with service providers needed to operate our business. We do not sell or rent your personal information. We may share your information with trusted third-party service providers (such as appointment scheduling platforms, payment processors, and website hosting providers) only as necessary to operate our business and provide our services.

We will not share mobile information or personally identifiable information with third parties or affiliates for marketing or promotional purposes.

We may share personal information in the following situations:

• Business Transfers. In connection with or during negotiations of a merger, sale of company assets, financing, acquisition, or similar transaction.

• Google Maps Platform APIs. We may share location information with Google Maps Platform services, such as Maps or Places APIs, when needed to provide location-related features or directions. You can revoke location permissions through your device or by contacting us.

• Affiliates. With parent companies, subsidiaries, joint venture partners, or other entities under common control, provided they honor this Privacy Notice.

• Business Partners. With business partners to offer certain products, Services, or promotions.

• Service Providers and Contractors. With vendors that perform services for us, such as website hosting, booking, payment processing, analytics, communications, customer support, advertising, security, and technology services, under contractual safeguards where appropriate.

• Legal and Safety Disclosures. When required by law or reasonably necessary to protect rights, safety, property, prevent fraud, or respond to lawful requests.

 

By entering your mobile number, you agree to receive recurring automated text messages from The Nest Beauty Services, including appointment reminders, confirmations, account notifications, exclusive offers, promotions, and Beauty Insider updates. Consent is not a condition of purchase. Message frequency varies. Message and data rates may apply. Reply STOP to unsubscribe or HELP for help. By signing up, you agree to our Terms of Service and Privacy Policy.

​

5. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?

In Short: We are not responsible for the safety of information you share with third parties linked to or advertising on our Services but not affiliated with us.

The Services may link to third-party websites, services, or applications or contain third-party advertisements. We do not guarantee or endorse those third parties and are not responsible for their content, privacy, or security practices. Information collected by third parties is not covered by this Privacy Notice. Review their policies and contact them directly with questions.

​

6. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We may use cookies and other tracking technologies to collect and store information.

We may use cookies, web beacons, pixels, and similar technologies when you interact with our Services. These technologies help maintain security, prevent crashes, fix bugs, save preferences, enable basic functionality, analyze usage, manage advertising, tailor advertisements, and, depending on your communication preferences, send abandoned-cart or appointment-related reminders.

To the extent these technologies are considered a sale, sharing, or targeted advertising under applicable US state law, you may have the right to opt out as described in Section 14.

Google Analytics

We may use Google Analytics to track and analyze use of the Services. Advertising features may include remarketing, display network impression reporting, and demographics and interests reporting. You may use Google's available opt-out tools and advertising settings to limit this tracking.

Most browsers accept cookies by default. You can usually remove or reject cookies in browser settings, although doing so may affect certain features of the Services.

​

7. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?

In Short: We may offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies.

As part of our Services, we may offer AI-powered features ("AI Products") designed to improve user experience and provide automated assistance.

Use of AI Technologies

We may provide AI Products through third-party service providers, including Wix Smart Chat. Your input, output, and related personal information may be shared with and processed by these providers to enable the AI Product. Do not use AI Products in a way that violates any provider terms or policies.

Our AI Products

• Image generation

• AI development

• AI research

• Automated customer assistance or chat features

How We Process Your Data Using AI

Personal information processed through AI Products is handled in accordance with this Privacy Notice and our agreements with applicable third-party providers.

​

8. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

In Short: If you register or log in using a social media account, we may receive certain information about you.

If the Services allow login through a third-party social media provider, we may receive profile information such as your name, email address, friends list, profile picture, and other information you make public. We use this information only for purposes described in this Privacy Notice or otherwise disclosed to you. We do not control how the social media provider uses your information, so you should review its privacy notice and privacy settings.

​

9. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless a longer period is required or permitted by law.

No purpose in this Notice requires us to keep personal information longer than the period in which a user maintains an account with us, except where tax, accounting, legal, dispute-resolution, fraud-prevention, or other legitimate requirements require longer retention.

When we have no ongoing legitimate business need to process personal information, we will delete or anonymize it, or securely isolate it in backups until deletion is possible.

For the categories identified in Section 14 as collected, our general retention period is as long as the user maintains an account with us, subject to the exceptions above.

​

10. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect personal information through reasonable organizational and technical security measures.

We have implemented safeguards designed to protect personal information we process. However, no electronic transmission or storage technology can be guaranteed to be completely secure, and we cannot promise that unauthorized third parties will never defeat our security measures. Transmission of personal information to and from the Services is at your own risk. Access the Services only within a secure environment.

​

11. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18 years of age, except where a parent or legal guardian provides information or consent in connection with services or complimentary onsite childcare.

We do not knowingly solicit personal information directly from children under 18 or knowingly sell such information. By using the Services, you represent that you are at least 18, or that you are the parent or guardian of a minor and consent to the minor's use of the Services where applicable. If we learn that information from a child was collected without appropriate authorization, we will take reasonable steps to delete it. Contact thenestbeautyservices@gmail.com if you believe we may have collected such information.

​

12. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: Depending on where you live, you may have rights that give you greater access to and control over personal information.

Depending on applicable law, rights may include requesting access to and a copy of personal information, correcting or deleting information, restricting or objecting to processing, data portability, withdrawing consent, and not being subject to certain solely automated decisions. Rights may be limited in some circumstances.

Withdrawing your consent

Where processing relies on consent, you may withdraw consent at any time by contacting us. Withdrawal does not affect processing that occurred before withdrawal or processing based on another lawful ground.

Opting out of marketing and promotional communications

You may unsubscribe from marketing emails using the unsubscribe link, reply "STOP" or "UNSUBSCRIBE" to SMS messages, or contact us. We may still send service-related or transactional communications.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors in support services, such as customer service, is permitted. All other use-case categories exclude text-message originator opt-in data and consent; this information will not be shared with third parties.

Account Information

To review or change account information or terminate an account, contact us. Upon a termination request, we will deactivate or delete the account and information from active databases, but may retain information to prevent fraud, troubleshoot problems, assist investigations, enforce legal terms, or comply with law.

Cookies and similar technologies

You can usually configure your browser to remove or reject cookies. Doing so may affect certain features or Services.

Questions about privacy rights may be sent to thenestbeautyservices@gmail.com.

​

13. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature. No uniform technology standard for recognizing and implementing DNT signals has been finalized. We therefore do not currently respond to DNT browser signals or other automatic mechanisms communicating a choice not to be tracked online. If a standard we are required to follow is adopted, we will describe that practice in a revised Privacy Notice.

​

14. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: If you are a resident of a US state with a comprehensive privacy law, including Utah and other states listed below, you may have rights to request access to, correction of, a copy of, or deletion of personal information, and to withdraw consent or opt out of certain processing. These rights may be limited by applicable law.

This section applies, where relevant, to residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states that enact applicable privacy laws.

​

Categories of Personal Information We Collect

The table below describes categories of personal information collected in the preceding twelve months. Examples are illustrative and may not reflect every item collected from every person.

CategoryExamplesCollected

A. IdentifiersReal name, alias, postal address, telephone or mobile number, unique personal identifier, online identifier, IP address, email address, and account nameYES

B. Customer records informationName, contact information, education, employment history, and financial informationYES

C. Protected classification characteristicsGender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic dataYES

D. Commercial informationTransaction information, purchase history, financial details, and payment informationYES

E. Biometric informationFingerprints and voiceprintsNO

F. Internet or similar network activityBrowsing history, search history, online behavior, interest data, and interactions with websites, applications, systems, and advertisementsYES

G. Geolocation dataDevice locationYES

H. Audio, electronic, sensory, or similar informationImages, audio, video, or call recordings created in connection with business activitiesNO

I. Professional or employment-related informationBusiness contact details, job title, work history, and professional qualificationsNO

J. Education informationStudent records and directory informationNO

K. Inferences drawn from collected personal informationInferences used to create a profile or summary about preferences and characteristicsYES

L. Sensitive personal informationAccount login information, contents of email or text messages, debit or credit card numbers, health data, and genetic dataYES

We collect sensitive personal information only as permitted by applicable privacy laws, for purposes allowed by law, or with consent. We do not collect or process sensitive personal information for the purpose of inferring characteristics about you.

We may also collect personal information when you interact with us in person, online, by phone, or by mail, including when you receive customer support, participate in surveys or contests, use our Services, or submit inquiries.

Sources of Personal Information

Sources are described in Section 1 and may include you directly, your devices, service providers, public databases, marketing partners, social media platforms, and other third parties.

How We Use and Share Personal Information

Our uses are described in Section 2. We may disclose personal information to service providers under written contracts. We may use personal information for internal research, technological development, and demonstration. We do not consider these activities a sale of personal information.

We have not sold personal information for monetary consideration in the preceding twelve months. We do not intend to sell personal information belonging to website visitors, users, or consumers. Some analytics or advertising activities may nevertheless be considered 'sharing' or targeted advertising under certain state laws, in which case applicable opt-out rights will be honored.

Your Rights

Depending on your state, rights may include:

• Right to know whether we process your personal data.

• Right to access personal data.

• Right to correct inaccuracies.

• Right to request deletion.

• Right to obtain a copy of personal data previously shared with us.

• Right to non-discrimination for exercising privacy rights.

• Right to opt out of targeted advertising, sale or sharing of personal data, and certain profiling.

• Right to access categories of personal data being processed.

• Right to obtain categories or specific identities of third parties to which personal data has been disclosed or sold, where applicable.

• Right to review, understand, question, and in some states correct how personal data has been profiled.

• Right to limit use and disclosure of sensitive personal data.

• Right to opt out of certain collection of sensitive data or data collected through voice or facial recognition features, where applicable.

How to Exercise Your Rights

Submit a request by emailing thenestbeautyservices@gmail.com or by using the contact details in Section 16. You may designate an authorized agent where permitted. We may require proof of authority and may deny an agent request that lacks valid authorization.

Request Verification

We may need to verify your identity and authority to make a request. We will use information provided in the request only for verification, security, or fraud-prevention purposes. If we cannot verify identity using information already maintained, we may request additional information.

Appeals

Under certain state laws, if we decline to act on your request, you may appeal by emailing thenestbeautyservices@gmail.com. We will respond in writing as required by applicable law. If an appeal is denied, you may submit a complaint to your state attorney general.

Financial Incentives

A financial incentive is a program, benefit, or offering that provides payments, discounts, or other value in exchange for the retention, disclosure, sale, or sharing of personal information. If we offer a financial incentive or price or service difference, we will provide the required notice, explain material terms, describe implicated categories of information, and explain how the value of the data is reasonably related to the incentive.

You may withdraw from a financial incentive at any time by emailing thenestbeautyservices@gmail.com.

California "Shine The Light" Law

California Civil Code Section 1798.83 permits California residents to request, once per year and free of charge, information about categories of personal information disclosed to third parties for direct marketing purposes and the names and addresses of those third parties. Submit requests using the contact information in Section 16.

​

15. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes. We will update this Notice as necessary to remain compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be identified by an updated "Last updated" or "Revised" date. If we make material changes, we may post a prominent notice or send a direct notification. Review this Notice periodically to stay informed.

​

16. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this Notice, email us at thenestbeautyservices@gmail.com or contact us by post at:

The Nest Beauty Services LLC 4091 Riverdale Road Ogden, Utah 84405 United States

​

17. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country or US state of residence, you may have the right to request access to personal information we collect from you, details about how it has been processed, correction of inaccuracies, or deletion. You may also have the right to withdraw consent. These rights may be limited in some circumstances by applicable law.

To request review, update, correction, access, portability, or deletion of personal information, email thenestbeautyservices@gmail.com with the subject line “Privacy Request” and describe the request. We may need to verify your identity before completing it.