Privacy Policy

EFFECTIVE: JANUARY 1, 2025 · LAST REVIEWED: NOVEMBER 2025

1. Scope of This Policy

This policy covers the Company's public website only. It does not apply to appointment books, client consultation records, or employment files maintained by the Company in other contexts. Because this website is an informational publication — not a booking engine, consultation channel, or retail storefront — it is designed to collect the minimum information necessary to respond to general inquiries.

Important: This website is not a health or personal-care platform and must never be used to transmit medical details, allergy records, skin or scalp photos, body measurements, or health histories. If such information is nevertheless received, the Company will delete it without retention or use.

2. Information We Collect

2.1 Information You Voluntarily Provide

If you contact the Company by email or telephone, we receive whatever you send us — typically your name, email address or phone number, and the content of your message. The guest card on this website opens your own email client; it does not transmit or store submissions on this site.

2.2 Information Collected Automatically

When you visit this website, our hosting provider (Google Firebase Hosting) automatically records standard server logs: IP address, browser type, device information, requested pages, timestamps, and referring URLs. These logs are generated by the hosting infrastructure for security, abuse prevention, and operational purposes. The Company does not run analytics, advertising pixels, fingerprinting scripts, or behavioral tracking on this website.

2.3 Information We Do Not Collect

This website does not collect: account credentials, payment card numbers, appointment data, photographs, health or allergy information, product purchase history, biometric data, or precise geolocation. No registration system exists, and no visitor can create an account.

3. Cookies and Similar Technologies

This website does not set advertising cookies, analytics cookies, or tracking cookies. The hosting provider may use transient technical cookies or cache mechanisms strictly necessary to deliver pages securely (for example, content-delivery or DDoS-protection functions). Your browser settings can block cookies entirely without affecting your ability to read any page on this site.

4. How We Use Information

Information submitted to the Company is used only to:

• Respond to your inquiry or request;
• Maintain correspondence records for organizational and legal purposes;
• Detect, investigate, and prevent fraud, abuse, or security incidents;
• Comply with legal obligations, lawful requests, or enforce our legal rights.

The Company does not sell personal information, does not share it with advertisers or data brokers, and does not use visitor data for marketing profiles.

5. How Information Is Shared

The Company shares personal information only in these narrow circumstances:

• Hosting and infrastructure: Google LLC (Firebase Hosting) processes server logs as the site's hosting provider.
• Professional advisors: Attorneys, accountants, or auditors where disclosure is necessary for legitimate business purposes under confidentiality obligations.
• Legal process: Where required by subpoena, court order, or other lawful demand, or to protect the rights, safety, and property of the Company or others.
• Business transfer: If the Company is merged, acquired, or its assets sold, information may transfer to the successor entity subject to this policy.

6. Data Retention

Email correspondence is retained for as long as reasonably necessary to handle the inquiry and satisfy recordkeeping obligations, after which it is deleted or archived per the Company's internal retention schedule. Hosting logs are retained per the hosting provider's standard retention periods. Any health details or photographs inadvertently submitted are deleted promptly upon discovery without retention.

7. Data Security

The website is served exclusively over HTTPS with TLS encryption. The Company's email and records systems use access controls, and website-related data is restricted to personnel who need it for correspondence. No system is perfectly secure; the Company cannot guarantee absolute security of transmissions over the internet, and visitors should avoid sending sensitive information by unencrypted channels.

8. Fraud and Impersonation Notice

The Company will never request payment card numbers, gift-card purchases, wire transfers, appointment deposits, or identity documents by unsolicited email. If you receive a message purporting to be from PLA BEAUTY CO. LLC demanding payment or personal documents, treat it as fraudulent and verify by telephone at +1 (984) 422-5028 before acting. The Company's only official contact domain is plabea.shop.

9. Children's Privacy

This website is directed at adults. It is not directed to children under 13, and the Company does not knowingly collect personal information from children. If you believe a child has submitted information through this site, contact us and we will delete it.

10. State Privacy Rights

Depending on your state of residence, you may have rights to access, correct, delete, or restrict the use of personal information a business holds about you. Ohio residents and visitors from states with consumer-privacy statutes may submit requests to reach.sofia.reyes@plabea.shop. The Company will verify and respond to requests within the time required by applicable law. Because this website collects minimal data, most requests can be resolved quickly.

11. International Visitors

This website is operated from the United States and is intended for a U.S. audience. If you access it from outside the United States, you understand that any information you provide will be processed in the United States under U.S. law.

12. Changes to This Policy

The Company may revise this Privacy Policy from time to time. The current version will always be posted at www.plabea.shop/privacy-policy with the revision date at the top. Continued use of the website after changes take effect constitutes acknowledgment of the revised policy.

13. Contact