Privacy Policy

1. Information we collect

Information you give us

• Account: your email address and password. Your password is stored in encrypted form by our login provider – we can't see it. We give every customer a customer number.
• Your details: first and last name, phone number, billing address and – if you add one – a delivery address, the hair color and length you're looking for, and whether you'd like emails or texts when new hair arrives.
• Requests and orders: the hair you request or buy, whether you chose keratin bonding, prices, notes you add, dates and the status of each request (for example reserved, paid or cancelled).
• Messages: the questions you send us through “Ask a question” and our replies.

Information we receive from others

• Payments: you pay through a secure Square payment link. Square processes your card details; we receive the confirmation and amount of your payment, never your full card number.
• Referral links: if you opened the shop through a partner's referral link, we record which link it was.

Information collected automatically

When you visit the shop, our hosting providers automatically process technical information such as your IP address, browser type and the pages you request, in order to deliver the website and keep it secure. We do not use analytics, advertising or social media tracking tools.

2. Cookies

We only use cookies that are needed for the shop to work:

• Login cookies keep you logged in to your account.
• Referral cookie remembers a partner's referral link for up to one year, so the partner is credited if you create an account.
• Password reset cookie lasts 30 minutes and lets you choose a new password after you open a reset link.

We don't use advertising or tracking cookies.

3. How we use your information

• to create and manage your account;
• to reserve the hair you request, send you a payment link, ship your order and give you customer service;
• to answer your questions and messages;
• to let you know about new hair by email or text – only if you opted in. You can opt out at any time by telling us; for texts you can also reply STOP. Message and data rates may apply;
• to calculate commissions for referral partners;
• to prevent fraud and keep the shop secure;
• to keep the records we need for tax, accounting and legal purposes.

4. Who we share it with

• Our team – the people who run JB Hair Gallery and handle your requests.
• Referral partners – if you signed up through a partner's referral link, that partner can see your account details, requests, orders and messages so they can look after you and their commission can be calculated.
• Service providers who run parts of the shop for us and may only use your information for that purpose: Supabase (database, login and photo storage), Vercel (website hosting), Square (payments), shipping carriers (your name, address and phone number to deliver your order) and providers we use to send emails or texts.
• Authorities, if the law requires it, or to protect our rights, our customers or the public.

We do not sell your personal information, and we don't share it for targeted (cross-context behavioral) advertising.

5. Where your information is stored

Your information is stored and processed in the United States. If you live in Canada, please note that your information will be transferred to and processed in the U.S., where it may be accessible to U.S. authorities under U.S. law.

6. How long we keep it

We keep your account information for as long as your account is open. Order and payment records are kept for as long as tax and accounting rules require (generally up to seven years). When you delete your account, we delete or anonymize your information, except what we must keep for those legal reasons.

7. Your choices and rights

You can ask us to:

• give you access to, or a copy of, the personal information we have about you;
• correct information that is wrong or incomplete;
• delete your account and personal information;
• stop sending you emails or texts about new hair.

Email us at shop@jbhair.shop from the address on your account. We may need to confirm your identity before we act on a request, and we'll answer within 30 days. We won't treat you differently for using these rights.

California residents may have additional rights under the California Consumer Privacy Act, including the right to know, delete and correct personal information and to opt out of its sale or sharing (we don't sell or share it). Residents of Canada have the right to access and correct their personal information and may contact the Office of the Privacy Commissioner of Canada if they have concerns.

8. Security

The shop uses encrypted connections (HTTPS), and access to customer information is limited to the people who need it to handle your requests. No method of transmission or storage is completely secure, but we work to protect your information and will inform you as required by law if a breach affects you.

9. Children

Our shop is not intended for children under 16, and we don't knowingly collect personal information from them. You must be at least 18 years old (or the age of majority where you live) to buy from us – see our Terms of Sale.

10. Changes to this policy

We may update this policy from time to time. The new version is posted on this page with a new date; if the changes are significant, we'll also let you know by email.

11. Contact

JB Hair Gallery Corp.
5422 W Devon Avenue
Chicago, IL 60646
Email: shop@jbhair.shop