Privacy Policy

Who we are

Yellow Butterfly Salon is a hair salon at 4143 Ringgold Road Suite C, Chattanooga, TN 37412, owned and run by Catie O'Neill. This policy covers the website at yellowbutterflysalon.com, including the salon's own staff area. What happens in the salon chair, and on the booking and payment pages Square runs for us, is covered by the salon's policies and Square's.

What this site does not do

• No analytics, no advertising, no tracking pixels, and no "like" buttons that report back to a social network.
• No cookies at all for visitors. The only cookies this site sets are for the salon's own staff when they sign in.
• We do not sell, rent or trade anyone's information, and we do not use it for advertising.
• Our fonts and images are served from this site itself, not from a font or image service.

What we keep, and why

When you send a message

The contact form sends us your name, your email address, your phone number and a subject if you give them, and your message. We also keep the internet address (IP address) the message came from, so the form can limit how many messages arrive from one place in an hour and stay free of spam. Messages are stored in the salon's database and read by the salon in its staff area, and are kept until the salon deletes them.

If the salon has turned on notifications, its phone is sent a notice through a notification service saying only that a new message has arrived. None of what you wrote, and none of your details, is in that notice.

The salon's staff sign-in

The staff area is for the salon only. When a member of staff signs in, the site sets a sign-in cookie (yb_session, ending after 12 hours unused and at most 14 days) and a cookie that recognises a device that has signed in before (yb_device, 180 days), and records the device's browser description and IP address with the sign-in. To stop password guessing, the site also records attempts to sign in that fail — the username tried and the IP address they came from — including attempts by people who are not staff.

Sales at the salon's till

When the salon rings up a sale in its staff area, the site keeps what was sold, the amounts, how it was paid, and any note typed with the sale, such as the client's name. These are the salon's own business records, kept for its books and its stock.

Every visit

Like any website, every page you open passes through the servers of our hosting company, Railway, which handle your IP address and the details your browser sends in order to deliver the page. This site's own code does not record visitors' addresses, apart from the contact form and the staff sign-in above.

Other companies you may meet on our pages

• Google Maps. The home, about and contact pages show a map embedded from Google. When it loads, Google receives your IP address and may set its own cookies, under Google's privacy policy.
• Square. Booking an appointment, and any online payment, happens on pages Square runs for the salon, under Square's privacy policy.
• Instagram and other social links take you to those sites, under their own policies. Nothing from them is loaded until you follow the link.

Companies that handle information for the salon

These services work on the salon's behalf. Each receives only what is listed.

• Railway hosts the website and its database, so it holds everything described on this page.
• Square takes card payments in the salon. When a sale rung up at the salon's till is sent to the salon's Square card reader, Square receives the amount, the sale's reference number, and any note typed with the sale at the till — which can be the client's name. When a sale is handed to the Square app instead, Square receives the amount, the sale's reference number and how much of it was sales tax. Square in turn tells the site about the salon's Square payments (the amount, any tip, and any note on the payment) and about sales rung up in the Square app (what was sold and for how much), so the till's records and stock match. Card details never reach this site.
• Intuit (QuickBooks), if the salon connects its books, receives each day's retail sales totals: amounts, sales tax, the till's sale reference numbers, and the salon's own address for the sales tax. No client names, notes or contact details are sent.
• OpenAI is asked to identify a product when the salon scans a barcode this site does not recognise. It receives the barcode and what was found about the product — never anything about a customer.
• Product barcode databases (UPCitemdb, Open Food Facts, Open Beauty Facts, and Go-UPC if the salon uses it) receive product barcodes only.

The salon also downloads encrypted backups of its database from time to time, which include contact messages and the till's sales records. They are kept by the salon.

Your choices

You can ask to see what we hold about you, to correct it, or to have it deleted — a message you sent, for example. Call the salon on (423) 668-7097 or email hello@yellowbutterflysalon.com, and we will do it.

Keeping it safe

The site is only served over an encrypted connection. The staff area needs a password (and can require a code from an authenticator app), and the keys the site holds for other services are stored encrypted.

Children

This site is not meant for children under 13, and we do not knowingly collect their information.

Changes

If what the site collects changes, this page will change with it, and the date at the top will say when.