Privacy Policy

2.1 Information Provided by Customers

When using our services, customers may provide:

• Full name
• Contact details (email, phone number)
• Address for service appointments
• Payment details (processed securely by third-party payment processors)
• Preferences for services and bookings
• Reviews, feedback, and other user-generated content

2.2 Information Provided by Service Providers

Beauty professionals using GlamHaus may provide:

• Full name and contact details
• Professional qualifications, certifications, and experience
• Banking information for payouts
• Availability and booking preferences
• Business profile details, including photos and service offerings

2.3 Automatically Collected Information

We automatically collect data when you interact with the Platform, including:

• Device and browser information (IP address, browser type, operating system)
• Usage data (pages visited, features used, booking history)
• Location data — only if enabled on your device and with your consent

2.4 Information from Third Parties

• Payment processors (for transaction verification)
• Marketing partners (to track engagement and improve outreach)
• Social media platforms (if you interact with our pages or ads)

2.5 External Calendar Integration

Artists who maintain booking schedules on third-party platforms (for example, Squarespace Scheduling, Acuity, or Calendly) may connect an external calendar to GlamHaus. When enabled, GlamHaus periodically imports the artist's busy times from that external calendar (via an iCal/webcal feed) and stores them as private busy blocks. This prevents double-bookings on GlamHaus and is the only external calendar information we ingest.

These imported busy blocks are stored securely and are read-locked — only the owning artist and authorized GlamHaus administrators can see them. Clients never receive raw busy-block data; instead, the Platform uses it solely to filter out unavailable times when showing open booking slots, which means clients may infer that an artist is unavailable during certain windows.

Artists may disconnect their external calendar at any time from their account settings, after which GlamHaus stops importing new busy times and removes the previously imported blocks during normal maintenance. Connecting an external calendar is optional and not required to use the Platform.

3.1 Consent

You may withdraw your consent to the collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions, by contacting us using the information below.

3.2 Use of AI & Automated Tools

GlamHaus uses artificial intelligence (AI) and automated tools to help operate the Platform, match clients with the right providers, and assist with beauty planning. Features that use AI include:

• Parsing your free-text GlamRequest into a service category and tags
• A "My Beauty Assistant" chatbot that answers beauty questions
• Auto-generated service descriptions, pricing, and service suggestions for artists
• Analyzing photos of beauty products and estimating expiry dates

To do this, AI processes the text and images you submit (for example, your request description, product photos, or chat messages) and may be combined with general public information from the internet. The AI providers GlamHaus uses host and process this data in the United States or other jurisdictions, as described in Section 10.

AI-generated results are provided for convenience and informational purposes only. They can be inaccurate, incomplete, or unsuitable, and they do not constitute professional, legal, medical, or financial advice. They should not be relied on as a guarantee of price, availability, scheduling, or suitability. AI outputs do not create a booking, quotation, or obligation — final services, pricing, and timing are always confirmed between you and your artist.

AI features are optional. You can enter details manually, ignore any suggestion, and review or edit your input before submitting. You are not required to use any AI tool in order to use the Platform.

GlamHaus does not control how its third-party AI providers retain or further use the data they process, as that is governed by each provider's own practices. If this matters to you, we encourage you to review those providers' privacy policies or contact us for more detail.

4.1 With Service Providers & Vendors

We work with third parties for payment processing, cloud storage, IT support, customer support, communication tools, and marketing and analytics. All third parties must adhere to privacy standards equal to or greater than ours.

4.2 Legal Compliance & Safety

We may disclose personal information if required by law, including responding to court orders, subpoenas, or regulatory requests, or to prevent fraud, abuse, or illegal activity.

4.3 Business Transactions

If GlamHaus is involved in a merger, acquisition, or sale of assets, personal information may be transferred to the new entity, subject to continued privacy obligations.

5.1 How We Protect Your Data

• Encryption — secure connections (SSL/TLS) for all transactions
• Access controls — limited access to authorized personnel only
• Data minimization — only collecting data that is necessary

5.2 Data Retention

We retain personal information only as long as necessary for the purposes outlined in this policy or as required by law. After this period, data is securely deleted or anonymized.

10.1 Where Your Data Is Stored

GlamHaus is a Canadian business serving clients and artists in British Columbia. However, the cloud infrastructure and several key service providers we rely on store and process personal information in the United States. In particular:

• Base44 — our application platform and database hosting provider — stores account, profile, booking, and message data on US-based servers.
• Stripe — our payment processor — stores payment and transaction data, including payout account details for artists, on US-based servers (with regional processing as required).
• Other vendors (email delivery, analytics, cloud storage) may also process data in the United States or other jurisdictions.

10.2 Safeguards for Cross-Border Transfers

British Columbia's Personal Information Protection Act (PIPA) permits the transfer of personal information outside of Canada provided we disclose the transfer and ensure reasonable safeguards. To meet this obligation, GlamHaus:

• Uses only vendors that provide encryption in transit (SSL/TLS) and at rest for stored data.
• Restricts access to personal information to authorized personnel and systems only.
• Enters data-processing terms with vendors that require them to protect your information to a standard at least equivalent to PIPA.
• Limits the personal information transferred to what is necessary to provide the service (data minimization).
• Allows you to request further detail about where your information is stored and how it is safeguarded by contacting us (see Section 12).

10.3 Consent to Cross-Border Processing

By using the Platform, creating an account, or booking a service, you acknowledge and consent to your personal information being stored and processed in the United States and other jurisdictions as described above, subject to the safeguards in this Policy and applicable Canadian privacy laws.