Velvet Rose Salon & Spa ("we," "our," or "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard data when you visit our salon, use our website, or contact us.
We collect information you provide directly to us, including:
Your information is used solely to provide and improve our services. Specifically, we use it to:
We do not sell, trade, or rent your personal data to any third party under any circumstances.
Your data is stored securely on encrypted servers. We implement industry-standard security measures including SSL encryption, password hashing, and access controls. Only authorised staff can access client records. Payment information is never stored on our servers — it is processed through PCI-compliant payment providers.
Our website uses minimal cookies to maintain session state and understand general visitor behaviour. We do not use advertising or cross-site tracking cookies. You may disable cookies in your browser settings; however, some site features may not function correctly without them.
We may share limited data with trusted service providers who assist us in operating the website and delivering services, including email delivery services and appointment management software. These providers are contractually required to maintain confidentiality and may not use your data for their own purposes.
You have the right to access, correct, or request deletion of your personal data at any time. You may also withdraw consent for marketing communications at any time by clicking "unsubscribe" in any email we send, or by contacting us directly at hello@velvetrosenyc.com. We will process all requests within 14 business days.
We retain client records for up to 3 years to support your ongoing service history. After this period, records are securely deleted. You may request earlier deletion at any time by contacting us in writing.
Our services are intended for adults aged 16 and over. We do not knowingly collect personal information from children under 16. If you believe a child has submitted information to us, please contact us so we can delete it promptly.
We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page with a revised date. Your continued use of our services after changes constitutes acceptance of the updated policy.
If you have any questions about this Privacy Policy or your data, please contact us at: