Privacy Policy

When you book: your name, email, phone, and the answers you give on the booking form. Depending on the service those answers can include allergies, sensitivities, and medications or conditions that affect your hair or scalp.

About your hair: what you tell us in the Ritual Quiz or on the booking form — hair type, porosity, density, texture, length, concerns, goals, how often you wash, what styles you wear, and products you love or want kept away.

Scalp readings: photographs of your scalp or hair taken in the studio with a digital microscope, where on the head each was taken, and the wellness reading produced from it. If the self-serve Scalp Scan is open, that also covers any photo you upload yourself.

Across your visits: your appointment history, hair length measurements, which styles you have worn and when, notes from your visits, and anything you add to your wash-day journal.

Notes we keep: Iman keeps her own working notes on each client — what you have mentioned, what she has noticed, what she recommends. You can ask to see them at any time (see your rights below).

When you pay: Stripe processes the payment. We receive a confirmation, never your full card number.

When you message us: what you write through the site, and your name and email so we can reply.

Loyalty and referrals: your points, and — if you refer someone or are referred — the connection between the two accounts.

Automatic: standard web analytics (browser, device, pages visited). We do not use ad-tracking cookies.

If you were a client before this site existed: we may already hold your name, email, phone and visit history from our previous booking system.

• To schedule and deliver your appointment, and to hold the right amount of time for your hair
• To process payments, deposits and memberships
• To produce your scalp reading and the suggestions that come from it
• To choose which products to use on you during a visit
• To send appointment confirmations, reminders and the answers to messages you send
• To run the Circle loyalty programme and referrals
• To improve our services (anonymised analytics only)

We do not use any of it to advertise to you, and we do not profile you for anyone else.

• Stripe — payments, deposits and memberships
• Klarna and Affirm — only if you choose to pay in instalments, and only what they need to offer it
• Anthropic — scalp photographs are sent to their API to produce the reading. Per their published policy, data sent through the API is not used to train their models.
• Resend — sending the emails we send you
• Supabase — our database and file storage, hosted in the U.S.
• Vercel — hosting this website

We do not sell or rent your personal information, and we do not share it for cross-context behavioural advertising.

Two things we collect may count as sensitive personal information under California law: photographs of your scalp, which may qualify as biometric or health-adjacent information, and anything you tell us about medications or conditions affecting your hair or scalp.

For scalp photographs taken in the studio:

• We ask before we photograph. When you book you choose whether readings may be kept on your profile or only looked at with you on the day, and you can change that at any visit.
• If you ask us not to keep them, nothing is stored — we look at the reading together and it is gone.
• Photographs we do keep are deleted within 30 days unless you ask us to keep yours on file. The reading itself — the scores and notes — is kept so you can see your scalp change over time.
• They are used only for your reading and the recommendations that come from it, and are never sold or shared for advertising.

For what you tell us about your health: we use it only to deliver your service safely, and never for anything else.

You have the right to:

• Know what we've collected about you
• Request deletion of your information
• Correct inaccurate information
• Opt out of any “sale” or “sharing” (we don't do either)
• Limit use of sensitive personal information

That includes the working notes Iman keeps on you, your scalp readings, and anything from our previous booking system.

To exercise any of these, email businesswiman@gmail.com. We respond within 45 days.

If you have been coming to Iman for a while, we may already hold your details from our previous booking system — your name, email, phone and visit history. If we take a scalp reading for you, it is kept against that record in the same way and under the same rules as everyone else's, and we ask before we photograph.

You have exactly the same rights over it. Email us and we will tell you what we hold or delete it.

We use only essential cookies (session, auth). No third-party advertising cookies.

LUXE LA services and this website are not intended for users under 18 without a parent/guardian.

We use industry-standard encryption (TLS in transit, encrypted at rest in Supabase). Scalp photographs, visit notes and Iman's working notes are restricted at the database level, not merely hidden in the interface — only Iman can read them. You can see your own readings, measurements and visit history on your own page.

No system is completely secure; you use the service at your own risk.

Current version always at https://luxelaheadspa.com/privacy. Material changes will be emailed to active members.