Privacy Policy

Effective Date: July 2026

1. Introduction

Dharma's Esthetic Design Center ("we," "us," "our," "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website and engage with our services.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our website or services.

2. Information We Collect

A. Information You Provide Directly

Contact Information:

• Name, email address, phone number, company name
• Collected when you fill out inquiry forms, request quotes, or contact us via email

Business Information:

• Details about your online store (platform type, product categories, business stage)
• Collected to provide tailored recommendations and proposals

Payment Information:

• Billing address, payment method details
• Payment information is processed securely through Stripe and is not stored by us

Service-Related Information:

• Files, assets, content, and access credentials you provide for service delivery
• Store analytics, customer data, or other business information you share

B. Information Collected Automatically

Website Usage:

• Pages visited, time spent on site, links clicked
• Device type, operating system, browser type
• IP address and general location (country/region)
• Collected via cookies and analytics tools (Google Analytics)

Communication Data:

• Email open rates, link clicks (if email tracking is enabled)
• Email addresses, message content from communications with us

3. How We Use Your Information

We use collected information for the following purposes:

• Service Delivery: Providing, maintaining, and improving our services
• Communication: Responding to inquiries, sending proposals, updates, and service-related notices
• Payment Processing: Billing and managing payment transactions
• Analytics: Understanding how our website is used to improve user experience
• Marketing: Sending promotional materials (only if you opt in)
• Legal Compliance: Complying with applicable laws and protecting our legal rights
• Security: Detecting and preventing fraud, abuse, or security incidents

4. Legal Basis for Processing (GDPR)

For users in the EU or other jurisdictions with similar privacy laws, we process personal data based on:

• Contractual Necessity: Processing needed to deliver services you've engaged us to perform
• Legitimate Interest: Improving our services, analytics, fraud prevention
• Consent: For marketing communications and non-essential tracking
• Legal Obligation: When required by law

5. Information Sharing & Disclosure

We do not sell your personal information to third parties.

We may share information with:

Service Providers:

• Payment processors (Stripe)
• Email delivery services (SendGrid, etc.)
• Cloud storage providers (Google Drive, etc.)
• Website analytics tools (Google Analytics)

These providers are contractually obligated to use your information only as necessary to provide services to us and must maintain adequate security.

Legal Requirements:

• Law enforcement, government agencies, or courts when required by law
• To protect our legal rights or respond to legal claims
• To prevent fraud, security threats, or harm

Business Transfers:

• If we merge, acquire, or sell assets, your information may be transferred as part of that transaction (you will be notified)

6. International Data Transfers

If you are located outside the United States, your information may be transferred to, stored in, and processed in the United States or other countries where we operate. By using our services, you consent to such transfers.

For users in the EU, such transfers are conducted under appropriate safeguards (Standard Contractual Clauses or other legal mechanisms).

7. Data Retention

• Service Delivery Data: Retained as long as needed to provide services and fulfill contractual obligations (typically 1–3 years after project completion)
• Analytics Data: Retained for up to 26 months (per Google Analytics defaults)
• Communications: Retained for 2 years unless longer retention is required by law
• Payment Records: Retained for 7 years (tax and legal requirements)

You may request deletion of your data at any time (subject to legal obligations).

8. Cookies & Tracking

Our website uses cookies and similar tracking technologies for:

• Essential Cookies: Required for website functionality
• Analytics Cookies: Google Analytics to understand site usage
• Marketing Cookies: To track conversions and retarget ads (if enabled)

You can control cookies through your browser settings. Disabling cookies may affect website functionality.

We do not track you across other websites (no cross-site tracking).

9. Third-Party Links & Services

Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies before providing information.

10. Your Privacy Rights

A. Access & Portability

You have the right to request a copy of your personal information in a portable format.

B. Correction

You can request that we correct inaccurate or incomplete information.

C. Deletion

You have the right to request deletion of your personal information, subject to legal obligations (e.g., we may retain records for tax purposes).

D. Opt-Out of Marketing

You can opt out of promotional emails by clicking "Unsubscribe" at the bottom of emails or by contacting us.

E. GDPR Rights (EU Users)

• Right to restrict processing
• Right to withdraw consent
• Right to lodge a complaint with a data protection authority

To exercise any of these rights, contact us at: jason@dharmasestheticdesign.com

11. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect information from children under 13. If we learn we have collected such information, we will delete it promptly.

12. Data Security

We implement industry-standard security measures to protect your information, including:

• SSL/TLS encryption for data in transit
• Secure password practices
• Access controls and authentication
• Regular security assessments
• Confidentiality agreements with employees and contractors

Important: No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we take reasonable precautions.

13. Breach Notification

If we experience a data breach affecting your personal information, we will notify affected users promptly (within 72 hours where required by law) via email or website notice.

14. Marketing Communications

Opt-In/Opt-Out:

• We only send marketing emails if you have consented (or are an existing client)
• You can unsubscribe from emails at any time by clicking the unsubscribe link
• Transactional emails (invoices, service updates) will continue even if you unsubscribe from marketing

15. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect
• Delete personal information we have collected
• Opt-out of the "sale" of personal information (we do not sell information, but you have this right)
• Non-discrimination for exercising these rights

To submit a CCPA request, contact us at: jason@dharmasestheticdesign.com

16. Changes to This Privacy Policy

We may update this Privacy Policy at any time. Changes will be effective immediately upon posting, with the "Effective Date" updated. Your continued use of our services constitutes acceptance of updated policies.

17. Contact Us

For questions about this Privacy Policy or to exercise your privacy rights, contact:

Dharma's Esthetic Design Center
Email: jason@dharmasestheticdesign.com
Website: dharmasestheticdesign.com

Last Updated: July 2026