Privacy Policy
Effective
1. Who is responsible for the information
This Privacy Policy explains how Pure Joy Pet Salon (“Pure Joy,” “we,” “us,” or “our”) handles personal information through our website, online and staff-assisted booking, staff tools, grooming operations, payment processing, messages, waitlists, and customer report cards (the “Services”).
- Pure Joy Pet Salon
- 1490 Broadway Ave, Atwater, CA 95301
- purejoypetsalon@gmail.com
2. Information collected
Depending on how a customer or staff member uses the Services, Pure Joy may collect:
- Customer identity and contact information, including name, phone number, optional email, mailing or mobile service address, time zone, emergency contact, and communication preferences.
- Pet and care information, including pet name, species, breed, birth date, weight, veterinarian contact, vaccination information, health and behavior notes, bite history, permissions, care notes, alerts, and staff tags.
- Booking and service information, including requested services, location, staff preference or assignment, appointment and arrival-window times, waitlist preferences, notes, status changes, service history, prices, discounts, deposits, fees, tips, receipts, and review or rebooking activity.
- Agreement and authorization evidence, including agreement version, typed name, acceptance time, hashed IP-address and user-agent evidence, and any staff member who facilitated an in-person signature.
- Payment information, including Square customer and card references, card brand and last four digits, payment and refund identifiers, status, amounts, tips, and fee-resolution records. Square, not Pure Joy’s database, receives full card-entry details through Square’s card-entry software.
- Messages and feedback, including SMS or MMS addresses, message text, media references and metadata, delivery and error status, ratings, and private feedback.
- Photos and report cards, including staff-only coat-condition, injury, and goal photos; related notes and upload metadata; and a customer-visible report-card photo and grooming summary when staff creates one.
- Staff and security information, including staff account and role data, session and access records, PIN credential hashes, audit activity, device or kiosk context, and staff-app cached data and preferences.
- Technical and operational information, including request time, route, response status, request identifier, IP and browser information when needed for security or agreement evidence, integration events, error details, and import or synchronization records.
- Source history, including customer, pet, appointment, payment, and service data received from Square or authorized historical imports for reconciliation and continuity.
Please do not send full card numbers, card security codes, passwords, or other unnecessary sensitive information in free-text notes or messages.
3. Sources
- Information may come directly from a customer during booking, intake, signing, payment, waitlist, messaging, feedback, or an in-person or phone interaction.
- Information may come from Pure Joy staff documenting services and customer communications.
- Information may come from Square for customer, booking, catalog, card-reference, payment, refund, and reconciliation information.
- Information may come from Twilio for inbound and outbound message content and delivery data.
- Information may come from the customer’s browser or device for security, agreement evidence, and service operation.
- Information may come from authorized historical business records imported to preserve service history.
4. Purposes and reasons for use
Pure Joy may use information to:
- Identify customers and pets and provide salon or mobile grooming.
- Evaluate safety, handling, scheduling, staff qualification, and service needs.
- Create, manage, remind, reschedule, document, and reconcile appointments and waitlist requests.
- Prepare quotes, save an authorized card, process an approved deposit or payment, assign tips, issue receipts or refunds, and administer authorized fees.
- Capture and prove agreements and payment authorizations.
- Communicate with customers and deliver private appointment, report-card, review, and rebooking links.
- Maintain staff-only service notes, condition photos, goal photos, alerts, and audit records.
- Prevent fraud, misuse, unauthorized access, and unsafe bookings.
- Troubleshoot, secure, back up, and improve the Services.
- Comply with law, accounting duties, lawful requests, and dispute-resolution needs.
- Perform authorized migration and reconciliation with Square and historical records.
Where law requires a legal basis, these purposes may rely on steps requested by the customer or performance of a contract, consent, compliance with law, protection of vital interests in an emergency, or Pure Joy’s legitimate interests in operating and securing the business.
5. Providers and disclosures
Pure Joy may disclose information to:
- Square for secure card entry, customer and card profiles, payments, deposits, fees, tips, refunds, checkout, booking synchronization, and financial reconciliation. Data can include identity, contact, address, booking, payment, and tokenized card-reference information.
- Twilio for SMS/MMS delivery, inbound messages, media metadata or references, phone addressing, delivery status, and messaging troubleshooting.
- Cloudflare for website and Worker hosting, database and photo storage, queues, security, and operational logging. Cloudflare infrastructure can process information carried by those services.
- Google only after a visitor selects “Load Google Map” on the location page. The map can receive ordinary browser, device, network, and interaction information. Google Maps directions receive information only when the visitor follows the directions link. Pure Joy uses locally hosted Fraunces and Libre Franklin fonts, so no Google request is made to render text.
- Authorized staff and contractors for scheduling, grooming, customer service, payments, administration, security, and technical support, limited by role and operational need.
- Veterinarians or emergency providers when a customer authorizes disclosure or disclosure is otherwise permitted by law.
- Authorities, professional advisers, or transaction parties when required by law, valid legal process, safety needs, fraud prevention, or a reorganization or transfer of the business, subject to applicable protections.
External links are governed by the external service’s privacy practices after the visitor follows the link. Pure Joy does not use the current website or app to sell personal information or share it for cross-context behavioral advertising. The current Services do not include advertising pixels, targeted-advertising integrations, or a data-sale mechanism.
7. Communications choices
Service-related messages may be necessary to manage a booking, waitlist request, payment, pickup, report card, or customer inquiry. Optional marketing messages require a separate consent process and provide the choices required by applicable law.
A customer may contact Pure Joy to update communication preferences. Opting out of optional marketing does not cancel an appointment or necessarily stop a direct reply or operational message about an active service.
8. Retention
Pure Joy keeps information only as long as reasonably needed for the purposes described here. Retention depends on criteria including service-history and safety needs, active customer requests, agreement and payment records, accounting obligations, disputes, security needs, backup cycles, and legal requirements. When information is no longer needed under those criteria, Pure Joy deletes, de-identifies, or restricts it as appropriate.
9. Security
Pure Joy uses reasonable administrative, technical, and physical safeguards appropriate to the information and Services. Measures include role-based staff permissions, authenticated staff routes, private storage for staff photos, tokenized customer links, Square-hosted card entry, storage of card references rather than full card details, hashed technical evidence for agreements, and audit or event records for important actions.
No system is completely secure. Pure Joy reviews safeguards and responds to incidents as required by law. This description is not a claim of any security or privacy certification.
10. Customer choices and privacy rights
Depending on applicable law, a person may have rights to request access, correction, deletion, or a portable copy; object to or restrict certain use; withdraw consent for future consent-based use; appeal or complain to a regulator; and receive equal service when exercising a privacy right.
Requests may be emailed to purejoypetsalon@gmail.com or mailed to Pure Joy Pet Salon, 1490 Broadway Ave, Atwater, CA 95301. Pure Joy may verify identity and authority before acting and may retain information when permitted or required for transactions, safety, security, legal compliance, or disputes. Deleting information needed to provide an active service may require cancellation or closure of that service. The rights and process available depend on applicable law.
11. Children
The customer-facing Services are intended for adults arranging pet services. Pure Joy does not intend to collect personal information directly from a child under 13. A parent or guardian who believes a child submitted personal information may contact Pure Joy for review and appropriate action.
12. Automated processing and AI
Pure Joy does not currently use AI to send customer messages. The current Services do not make solely automated decisions that have legal or similarly significant effects on a person.
13. Processing locations
Pure Joy and its providers may process information in the United States and other locations where those providers operate. This Privacy Policy does not claim that a particular international transfer contract, certification, or mechanism is in place.
14. Changes
Pure Joy will update this Privacy Policy when data practices materially change and will provide notice or obtain consent when required. The current effective date and version appear at the top of the policy, which remains accessible where personal information is collected.