Privacy Policy

Last Updated: July 25, 2025

1. Information We Collect

We collect various information based on your interaction with our Website and Services:

Personal Contact: Name, email, phone, billing address. Collected when you create an account, schedule, contact us, or subscribe.
Voluntary Submissions: Any details you input into forms or scheduling tools.
Billing & Transactional: Payment info (processed by third-party gateways; we don't store full credit card details), billing address, purchase records.
Technical & Usage Data: Automatically collected when you visit. Includes:
- IP Address, Browser/Device Info, Operating System.
- Referring/Exit Pages, Date/Time Stamps.
- Cookies & Tracking: (See Cookie Policy) Collects Browse activity to enhance experience, analyze traffic, and personalize content.

2. How We Use Your Information

We use collected information for:

Responding to Inquiries & Support: Answering questions, troubleshooting, providing assistance.
Scheduling & Managing Appointments: Booking, sending confirmations/reminders, managing changes.
Processing Payments: Securely handling transactions.
Communications: Sending essential service-related updates (confirmations, instructions) and, with your consent, promotional emails/newsletters (opt-out always available).
Improving Website & User Experience: Analyzing data to optimize design, navigation, and functionality.
Personalizing Your Experience: Using cookies to remember preferences and tailor content.
Ensuring Security & Preventing Fraud: Monitoring for suspicious activity, detecting fraud, maintaining platform integrity.
Complying with Legal Obligations: Disclosing information when legally required (e.g., subpoena) or to protect our rights/safety.
Internal Analysis: Aggregating and anonymizing data for research and service improvement.

3. How We Share Your Information

We do not sell, rent, or trade your personal information for direct marketing. We share information only in limited circumstances:

Service Providers: Trusted third parties (payment processors, hosting, email marketing, analytics) who process data on our behalf, under strict contractual obligations.
Legal Requirements & Protection: If required by law, subpoena, or to protect our/others' rights, property, or safety (e.g., fraud investigation).
Business Transfers: In case of merger, acquisition, or asset sale, your information may transfer as part of assets. We will notify you of such changes.
With Your Consent: For purposes not in this policy, only with your explicit consent.

4. Data Security & Retention

We use robust technical, administrative, and physical security measures (e.g., SSL) to protect your personal information. However, no method is 100% secure. You accept these inherent risks.

We retain your information only as long as necessary for its collected purpose, including legal, accounting, or reporting needs. Data is securely deleted or anonymized when no longer needed.

5. Your Data Protection Rights

You may have rights regarding your personal data based on your location:

Access: Get a copy of your data.
Rectification/Correction: Correct inaccurate/incomplete data.
Erasure ("Right to Be Forgotten"): Request data deletion under certain conditions.
Restrict Processing: Request processing restriction under certain conditions.
Object to Processing: Object to processing (e.g., for direct marketing).
Data Portability: Request data transfer to another organization or to you.
Withdraw Consent: Withdraw consent at any time (doesn't affect prior lawful processing).

Contact us at [Insert Contact Email] to exercise these rights. We'll verify your identity and respond as required by law.

6. Children's Privacy

Our Website and Services are not for children under 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If we learn we have, we'll immediately delete it.

Parents/guardians of children under 13 can review their child's data, request deletion, and refuse further collection. Contact [Insert Contact Email].

7. Changes & Contact

We may update this Privacy Policy anytime; changes will be posted with an updated "Last Updated" date. Your continued use signifies acceptance.

III. Cookie Policy

Effective Date: July 25, 2025

1. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They help websites work efficiently and remember your preferences.

2. How We Use Cookies

We use cookies for:

Essential: Necessary for Website operation (security, accessibility).
Analytical/Performance: Help us understand user interaction, improve performance (e.g., Google Analytics).
Functionality: Remember your choices (e.g., language) for personalized features.
Advertising/Targeting: Deliver relevant ads, limit ad frequency, measure ad effectiveness.

3. Third-Party Cookies

We may use third-party cookies (e.g., Google Analytics, social media platforms) for usage statistics and advertising.

4. Your Cookie Choices

You can accept or decline cookies. Most browsers accept them by default, but you can change settings to decline. Disabling cookies may affect Website functionality. Some third-party cookies allow direct opt-outs.

5. Changes & Contact

We may update this Cookie Policy; the "Effective Date" will show the last revision. Review periodically.

IV. Child Privacy & Protection Policy

Effective Date: July 25, 2025

1. Our Children's Privacy Policy

Cara Currey, LLC is committed to protecting children's privacy. Our Website and Services are not for children under 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If we do, we will immediately delete it.

2. Information Not Collected from Children

We avoid collecting personal information from children under 13, including names, addresses, emails, photos, or geolocation.

3. Parental Consent (Rare Circumstances)

If we ever introduce services for children under 13, we would obtain verifiable parental consent before collecting their data, strictly following COPPA guidelines. This includes clear notice to parents, robust consent methods, and parental review rights (to review, delete, or prevent further collection).

4. Protecting Children's Safety

We ensure Website content is general audience appropriate and encourage parents to monitor children's online activity and use parental control tools.

5. Contact Us Regarding Children's Privacy

If you believe we've collected child data without consent, or as a parent, wish to manage your child's information, contact us immediately:

Cara Currey, LLC [Insert Mailing Address] Email: [Insert Contact Email]

V. GDPR

Effective Date: July 25, 2025

1. GDPR Compliance (EEA & UK Residents)

If you're in the EEA or UK, GDPR gives you rights. Cara Currey, LLC is a data controller.

Legal Basis for Processing: We process data based on:

Contract Performance: To provide Services you booked.
Legitimate Interests: Improving Website, security, direct marketing (where allowed).
Consent: For marketing, you can withdraw anytime.
Legal Obligation: To comply with law (e.g., tax).

Your GDPR Rights: (In addition to general rights in Privacy Policy II.5)

Data Portability: Receive your data in a usable format and transmit it elsewhere.
Object to Automated Decisions/Profiling: Not be subject to solely automated decisions (we don't currently do this).
Lodge a Complaint: With a supervisory authority if you think we violate GDPR.

International Data Transfers: Your data may transfer to the U.S. (where we operate). We use appropriate safeguards (e.g., standard contractual clauses) to protect your data.

VI. California Consumer Protection Info

Effective Date: July 25, 2025

1. CCPA/CPRA Compliance (California Residents)

If you're a California resident, CCPA/CPRA gives you rights.

Collected & Disclosed Info (Past 12 months): We may have collected/disclosed:

Identifiers: Name, email, IP address.
Commercial Info: Purchase records.
Internet Activity: Browse history, Website interaction.

Your California Rights: (In addition to general rights in Privacy Policy II.5)

Right to Know: What personal info we collected, sources, business purpose, and third parties shared with.
Right to Delete: Request deletion, with exceptions.
Right to Opt-Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioral advertising, so no opt-out is offered for these activities.
Non-Discrimination: Not treated differently for exercising rights.
Correct Inaccurate Info: Request correction of inaccurate data.
Limit Use of Sensitive Info: We don't intentionally collect sensitive personal info as defined by CCPA/CPRA.

Exercising California Rights: Contact [Insert Contact Email] for Right to Know, Delete, or Correct. You can use an authorized agent. We'll verify your identity.

3. Contact Us

For GDPR/CCPA/CPRA questions or to exercise rights:

Cara Currey, LLC [Insert Mailing Address] Email: [Insert Contact Email]