Privacy
Policy.

This Privacy Policy describes how [LEGAL BUSINESS NAME], doing business as Z's Roots & Radiance(“we,” “us,” or “the studio”), based in Petersburg, VA, collects, uses, and shares information when you visit our website, shop the NourishLocz line, book an appointment, or join our newsletter.

1. Information we collect

• Account & profile. Your name, email, phone number, and the hair details you choose to share (hair state, porosity, and notes for your stylist).
• Orders. The products you buy, your shipping address, and order history. We never see or store your full card number — card data is handled directly by our payment processor (see below).
• Bookings. The service you book, appointment date/time, and the deposit you pay.
• Newsletter.The email address you submit to subscribe to our “Crowned” newsletter.
• Technical & usage. Basic information your browser sends (e.g. device/browser type) and the local storage / cookie data described in section 4.

2. How we use it

• To create and manage your account and Crown Points loyalty balance.
• To process orders, ship products, and confirm and remind you about appointments.
• To send transactional email (order, shipping, and booking confirmations) and, if you opt in, the newsletter.
• To operate, secure, and improve the site.
• To comply with our legal and tax obligations.

3. Service providers who process your data

We share information only with the vendors that help us run the studio. Each processes data on our behalf under its own privacy terms:

• Stripe — payment processing. Card details go directly to Stripe; we never store them.
• Supabase — accounts, profiles, orders, bookings, and loyalty data storage.
• Cal.com — appointment scheduling and availability.
• Resend — transactional email delivery.
• EmailOctopus — newsletter list management and delivery.
• Vercel — website hosting and delivery.

We do not sell your personal information. See section 6 for our CCPA-style statement.

4. Cookies & local storage

We keep this light. The site uses your browser’s local storage and a small number of cookies for the things that make it work:

• Cart — remembers the items in your shopping cart.
• Referral code — remembers a friend’s referral link for up to 30 days so they get credited.
• Authentication / session — keeps you signed in to your account.
• Cookie consent — remembers that you dismissed the cookie notice.

You can clear or block this data in your browser settings, though some features (cart, sign-in) won’t work without it.

5. Data retention

We keep account, order, and booking records for as long as your account is active and as needed to provide services, resolve disputes, and meet tax and legal requirements (typically [RETENTION PERIOD, e.g. 7 years for transaction records]). When you delete your account (section 7), your profile and loyalty data are removed; order and booking records are retained but anonymized (disassociated from your account) so our financial history stays intact.

6. Your rights & choices

Depending on where you live, you may have the right to access, correct, or delete your personal information, and to opt out of marketing email.

• Access & correction: view and edit your profile any time under your account.
• Deletion: delete your account yourself from your account page (Profile tab → “Delete my account”), or email us to request it.
• Newsletter: unsubscribe from any newsletter via the link in its footer.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. California residents (CCPA/CPRA) and residents of other states with similar laws may exercise their rights without discrimination by contacting us below.

7. How to exercise your rights

The fastest way to delete your data is the self-serve control on your account page. You can also email us at hello@zrootsandradiance.com or write to us at 1428 W Washington St, Petersburg, VA 23803, and we will respond within the time required by applicable law.

8. Children

The site is not directed to children under [AGE, e.g. 13], and we do not knowingly collect their personal information.

9. Changes to this policy

We may update this policy from time to time. We will revise the “Last updated” date above and, where required, notify you.