Your information Privacy Policy

Details you give us. Your name, phone number, email address and preferred language; the services, times and notes in your booking requests; the messages you send us through the website, by text, by email or by voicemail; and your choices about texts and email. If you book for someone else, such as a child, we record the details you give us for that appointment.

Your client record. Your visits and appointments, invoices and payment status, your hair color formulas (products, shades and mixing ratios, developer, processing time, technique and results), service notes, and before-and-after photos taken at your appointments. If you tell us about allergies, sensitivities or other health information that matters for your service, we note it so we can keep you safe. Staff may also record optional details such as your birthday, your Instagram handle or who referred you.

Payments. Card payments, online and on the studio’s card reader, are processed by Stripe. We receive the amount and status of each payment, details Stripe shares about the card, such as its brand and last four digits, and Stripe’s reference numbers. We never receive or store your full card number or security code. Please never send a card number by text, email, voicemail or website message; we will never ask you to.

Calls and texts. For calls to the studio line, we keep the number you called from and the date, time, length and outcome of the call. If you leave a voicemail, we keep the recording and, for messages in English, an automatic transcript when one is available. We keep the text messages you exchange with the studio, whether they were delivered, and your text-message permissions and opt-outs.

Website. When you send a booking request, a consultation request or a message through the website, our servers receive your IP address and use it to limit spam and abuse, and we keep it with consultation requests and website messages. We also note how you reached the site (the referring page, the first page you visited, any campaign tags or ad-click identifiers in the link you followed and, when analytics is on, your browser’s analytics identifier) and keep it with your booking. When the email address or phone number you enter matches a client record, the booking page lets you book as an existing client and shows the last two digits of the phone number on file, so you know where your code will go.

To book, confirm, remind, move and provide your appointments; to keep your formulas and history so your color can be reproduced; to take deposits and payments, send receipts and handle refunds; to answer your calls and messages; and to keep accurate business and tax records.

To protect you and the studio: to confirm it is you before a booking without a deposit, to prevent spam, fraud and misuse, to secure our systems and to resolve disputes.

To understand which pages and referrals lead to bookings, and to improve the website.

To send marketing email, only if you opt in. A booking, a call, a payment or a text conversation does not sign you up for marketing. We never send marketing texts.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.

We keep the number, date, source and scope of your text-message permission, together with opt-out records, so we can honor your choice. Requesting one booking-link text by pressing 1 on the phone does not subscribe you to recurring appointment texts or marketing.

Service providers that operate our phone and messaging systems may process your number, message and consent records only as needed to provide those services. We do not provide SMS consent to third parties for their own messaging or advertising.

When an existing client books without a deposit, we confirm your phone number with a one-time code you request, sent by text or read aloud in a phone call. Twilio, our phone and messaging provider, generates, sends and checks the code and uses your number only for that purpose. The studio keeps a record that your number was confirmed, not the code. Asking for a code does not sign you up for texts or marketing.

Texts you send to the studio number arrive in the studio’s inbox. So that Rudy sees them promptly, a copy with your name or number may also be forwarded to his own mobile phone. Rudy replies from the studio.

Calls to (239) 544-4899 are answered by our phone system, which connects you to Rudy on his mobile phone or on the studio’s own devices. We do not record live conversations.

If Rudy cannot answer, you can leave a voicemail. Your message is recorded, and messages in English may be transcribed automatically by Twilio. We copy the recording to our own secure storage and delete it from Twilio a few minutes later. Rudy may get a notice of your call or message on his phone so he can get back to you.

Photos taken at your appointment are part of your private client record and help Rudy plan your next visit. Rudy may also import photos he took from his own Google Photos account into the studio’s private library.

We show a photo on this website or on our social media accounts (such as Instagram, Facebook, Pinterest and our Google Business Profile) only with your permission, or a parent’s or guardian’s for a child. You can withdraw your permission at any time: we will take the photo off this website and stop using it in new posts, but we cannot recall copies that others have already shared.

We email appointment confirmations, reminders and changes, receipts, refund notices and replies to your messages. Marketing email, such as news, openings and occasional offers, is sent only if you opt in, and every marketing email includes our postal address and an unsubscribe link.

After a completed visit, we may send you one email inviting you to review the studio, even if you have not opted in to marketing email. It includes an unsubscribe link.

Our email provider tells us whether an email was delivered and may tell us whether it was opened or a link in it was clicked.

We share information with service providers only as needed to run the studio:

• Amazon Web Services: hosting, databases and secure file storage, in the United States.
• Stripe: online and in-studio card payments and refunds. On payment pages, Stripe may collect device and browser information to prevent fraud; see stripe.com/privacy.
• Twilio: our phone line, voicemail and its transcription, text messages and one-time verification codes.
• Resend: email delivery.
• Google: Google Workspace, including Rudy’s appointment calendar (each appointment shows your name, the services and any booking notes); Google Photos; our Google Business Profile; Google Analytics; and Google Ads, which measures which of our ads lead to bookings, as described below.
• Cloudflare: Turnstile, a check that a form is being sent by a person rather than an automated program.

We also disclose information when the law requires it; to protect the safety, rights or property of our clients, the studio or others; and to a successor if the business is sold or transferred, in which case this policy continues to apply to your information.

We do not sell your personal information, and we do not share it for targeted advertising.

The website uses your browser’s session storage, which is cleared when you close the tab, to keep a booking in progress, bring you back to it after a card payment and remember how you reached the site during that visit. It also remembers, in your browser, if you turn off ad measurement (see below). Stripe’s payment form may set its own cookies to help prevent fraud.

When Google Analytics is turned on, it sets first-party cookies (named _ga, and _ga_ followed by an identifier) that can last up to two years, and it receives the pages you view, how you arrived, device and browser details and an approximate location that Google derives from your IP address. We have turned off Google signals and ad personalization, private appointment and payment links are removed from what it receives, and no page view is recorded for the appointment-management page. You can block these cookies in your browser settings or use Google’s opt-out add-on at tools.google.com/dlpage/gaoptout.

When a booking is confirmed, or a payment is completed or refunded, our server may also send Google Analytics the booking or invoice reference, the services or products, the amounts and the analytics identifier noted from your visits to this website (or a random one), never your name, email address or phone number. Ad measurement: we advertise on Google, and unless you turn it off, Google’s advertising cookies (such as _gcl_au and _gcl_aw, which can last about three months) record that a visit began with one of our ads, and Google may use these booking and payment events to tell us which ads lead to bookings. We never use your information for ad personalization or remarketing. To turn ad measurement off for your browser, use “Your privacy choices” at the bottom of any page, or send a Global Privacy Control signal from your browser; we then stop using advertising cookies and tell Google not to use your bookings for ads.

Cloudflare Turnstile checks device and browser signals and your IP address when you send a booking request, a consultation request or a message, to tell people from automated programs.

Browsers’ “Do Not Track” signals have no common standard, so this website does not respond to them; it does honor Global Privacy Control, as described above. Apart from Google Analytics, Google’s ad measurement and the fraud and spam checks described here, we do not allow other companies to collect information about your activity on this website.

We keep your client record, including your formulas, notes and photos, for as long as you are a client, so your color history is there when you come back. You can ask us to delete it at any time.

We keep invoices, payments and refunds for as long as tax and accounting rules require, and we keep a record of your text-message permissions and opt-outs so we can keep honoring your choices.

Call records, voicemails, text messages and website messages are kept until we delete them. Ask us, and we will delete what we are not required to keep.

Our database has automatic backups, which are kept for 7 days, and we take a snapshot of it before each software update, which is kept until we remove it. Files we delete, such as photos and voicemail recordings, stay in our storage’s version history for up to 90 days. Information we delete can therefore remain in these encrypted backups, snapshots and file histories until they expire or are removed.

We protect client records with encryption in transit and at rest, individual staff accounts and access limited to the people who need it. No system is perfectly secure. If a security breach affects your personal information, we will notify you as Florida law requires.

Reply STOP to stop studio texts or HELP for assistance. You may receive a final opt-out confirmation. You can also tell us by phone or in writing that you no longer want texts, and we will honor it. You can unsubscribe from marketing email using the link in each marketing message. These choices do not prevent you from booking or receiving salon services.

You can ask us for a copy of your information, including your formula history, or ask us to correct or delete it. Before we discuss or change a private client record, we confirm it is you, for example by contacting you at the phone number or email address on file. We respond within 30 days. We may keep records we must retain for tax, accounting, payment-dispute or legal reasons, and a record of your opt-outs so we can keep honoring them.

If the law where you live gives you additional privacy rights, contact us and we will honor them as that law requires.

This website and online booking are meant for adults. A parent or guardian can book an appointment for a child. We do not knowingly collect personal information directly from children under 13; if you believe a child has sent us information, contact us and we will delete it.

Our website, databases and files are hosted by Amazon Web Services in the United States. Our other providers may process information in the United States and in other countries where they operate.

We will post any change on this page with a new effective date. If a change materially affects how we use information we already have, we will tell you by email or with a notice on this website before it takes effect. We will obtain any additional permission needed before expanding the scope of your text-message permission.

For privacy questions or requests, write to The Real Blossom LLC at 800 5th Ave S, #201 Room 37, Naples, FL 34102, call or text (239) 544-4899, or use the Contact page.