Privacy Policy

Effective and last updated: October 5, 2026

YEN by Katie is an esthetics studio in Santa Clara, California. This policy explains how we handle personal information when you visit our website or campaign pages, submit an inquiry or Meta lead form, book a service, or communicate with us.

1. Information we collect

• Contact information: your name, email address, phone number, and information you include in a message or form.
• Appointment and transaction information: requested services, appointment dates, booking history, preferences, and payment or transaction status. Square handles payment-card information through its own systems.
• Skin concerns and service details: answers you choose to provide about concerns such as dryness, breakouts, sensitivity, texture, or uneven tone, and other details relevant to your requested service. These answers may be sensitive. Please avoid sending medical records or information unrelated to your inquiry through lead forms, SMS, or email.
• Communication and consent records: messages, follow-up history, marketing preferences, and records of consent or opt-out requests.
• Website and device information: IP address, browser and device type, pages viewed, referring links, approximate location derived from IP address, cookie identifiers, and interactions with pages or ads, depending on the tools and settings in use.

We receive information directly from you and from services you use to interact with us, including Meta (Facebook and Instagram), GoHighLevel, and Square.

2. How we use information

We use information to respond to inquiries; understand your service interests; arrange and manage appointments; follow up about a facial or another requested service; send confirmations, reminders, and service updates; and maintain customer and transaction records.

Where permitted and with consent when required, we also send offers, skincare tips, and other marketing communications. Website and advertising information helps us understand traffic, measure campaign results, improve our website, and deliver or evaluate advertising. We may also use information to prevent misuse, resolve disputes, and meet applicable recordkeeping or legal obligations.

3. Service providers and other disclosures

We use providers to support our business, including:

• Meta: Facebook and Instagram lead forms, advertising, and campaign measurement.
• GoHighLevel: managing inquiries and customer records, follow-up workflows, and SMS and email communications.
• Square: scheduling, appointment management, and payment processing.
• Website, communications, and analytics providers: hosting (including Netlify), technical support, message delivery, and website or advertising measurement.

Information is disclosed as needed for the relevant service. Providers may also handle information under their own privacy policies when you use their platforms directly. We may disclose information when reasonably necessary to comply with law, respond to lawful requests, protect rights or safety, or support a business transfer subject to appropriate protections.

Mobile information and SMS consent: We do not sell or share mobile phone numbers, text-message opt-in data, or consent with third parties or affiliates for their own marketing or promotional purposes. We may provide this information to service providers that help us operate and deliver our messaging program, such as GoHighLevel and messaging carriers, only for those services.

4. Text messages and email

If you provide your contact information, we may contact you about your inquiry or appointment. Automated or marketing texts and emails are sent only where permitted and with the consent required for that communication. Submitting an inquiry or reading this policy does not by itself provide consent to automated marketing messages. Consent to marketing is not a condition of purchasing a service.

Message frequency varies with your inquiry, appointments, and subscriptions. Message and data rates may apply. To stop texts from a messaging program, reply STOP. For help, reply HELP or contact us below. You may receive a final confirmation of your opt-out. To stop marketing emails, use the unsubscribe link in the email or contact us. You can still receive necessary service or transaction emails after opting out of marketing email.

5. Cookies, analytics, and advertising

Our website and campaign pages may use cookies, pixels, browser storage, and similar technologies for functionality, traffic analysis, and advertising measurement. Where enabled, tools such as the Meta Pixel may allow providers to collect browser identifiers and information about page visits or actions over time and across websites. This activity can be considered “sharing” for cross-context behavioral advertising under certain privacy laws.

You can manage or delete cookies through your browser and adjust advertising preferences in your Meta account. Blocking cookies may affect some website features and does not necessarily stop all data collection. If a page offers cookie controls, you can use them to manage the choices available there. Contact us to ask about the tracking used on a particular page or to request an applicable advertising opt-out.

Browser “Do Not Track” signals do not have a uniform industry response, and we cannot promise that every provider responds to them. Where applicable law requires recognition of an opt-out preference signal such as Global Privacy Control, that requirement applies independently of Do Not Track.

6. How long we keep information

We retain information for as long as reasonably needed for the purposes described here. Retention depends on whether you become a client, your appointment and communication history, accounting or other legal requirements, and any ongoing dispute. We may keep limited consent and suppression records to document your preferences and avoid contacting you after an opt-out. Deletion requests may be subject to these needs and to information remaining in backups until normal replacement.

7. Your choices and privacy requests

You may choose not to provide optional information, ask us to update inaccurate details, request access to or deletion of your information, or opt out of marketing using the methods above. Some information is needed to answer an inquiry or complete a booking.

Contact us using the details below and describe your request. We may ask for information reasonably needed to verify your identity and locate the relevant records. Please do not send sensitive identification documents unless we explain why they are needed and provide an appropriate way to submit them.

8. California residents

Depending on which laws apply to the business and your information, California residents may have rights to know about and access personal information, request correction or deletion, opt out of sale or sharing, limit certain uses of sensitive personal information, and exercise applicable rights without unlawful discrimination. These rights have exceptions and may not all apply to a small business such as ours.

This policy does not represent that YEN by Katie meets the thresholds for coverage under the California Consumer Privacy Act (CCPA/CPRA). You can still contact us with a privacy request, including a question about direct-marketing disclosures under California law. We will review it under the requirements that apply. If you use an authorized agent, we may need proof of authorization and appropriate identity verification.

9. Children

Our website, lead forms, and marketing are intended for adults and are not directed to children under 13. We do not knowingly collect personal information online from children under 13. If you believe a child has provided information, contact us so we can review and address it. A parent or guardian should contact us directly about services for a minor.

10. Security

We use reasonable safeguards appropriate to our business and the information we handle. However, no website, storage system, email, or text-message service can be guaranteed completely secure. Please avoid sending payment-card numbers or detailed medical information through ordinary email, text, or lead forms.

11. Changes to this policy

We may update this policy as our services or practices change. The latest version will appear on this page with an updated date. If applicable law requires additional notice or consent for a change, we will provide it.

12. Contact us

For privacy questions, requests, or help with communication preferences: