Legal information

Privacy

Privacy Policy

Last updated: March 19, 2026

1. Introduction

[PENDING: Full legal business name], operating under the trade names “Alexa Torrellas” and “Alexa Lash Studio”, with business address at 17430 Campbell Rd, Dallas, TX 75252 and registration number [PENDING: Registration number / EIN] (hereinafter “we” or “Alexa Torrellas”), is responsible for the processing of personal data collected through the website alexatorrellas.com (the “Site”).

This Privacy Policy describes what personal data we collect, how we use it, with whom we share it, and what your rights are as a user. We are committed to protecting your privacy and processing your personal data in a transparent, secure manner consistent with applicable law.

This policy complies with the Texas Data Privacy and Security Act (TDPSA) for Texas residents.

Use of the Site is also subject to our Terms and Conditions.

2. What personal data we collect

2.1 Voluntarily provided data

We collect personal data that you voluntarily provide when interacting with our services:

  • Via Calendly (appointment scheduling): name, email address, and selected appointment date and time.
  • Via WhatsApp: phone number, profile name, and the content of messages you send.
  • Via email: email address, name, and the content of your message.
  • Via the contact form: name, phone, email, service of interest, and message.

2.2 Automatically collected data

When you visit our Site, our web hosting provider may automatically collect certain technical information through server logs, including:

  • IP address
  • Browser type and version
  • Operating system and device type
  • Pages visited and access date/time
  • Referring page (URL from which you arrived at the Site)

This information is collected for security and server administration purposes and is not used to identify individual users.

2.3 Data collected by third-party services

  • Calendly: when using the integrated calendar to schedule an appointment, Calendly may collect additional data under its own privacy policy.
  • Google Maps: our Site integrates a Google map to display our location. When loading the map, your IP address and connection data may be transmitted to Google.

2.4 Data we do NOT collect

Our Site does not use first-party tracking cookies, web analytics tools (such as Google Analytics), tracking pixels, advertising scripts, or any other behavioral tracking technology. We do not collect browsing data for advertising purposes.

3. How we use your personal data

We use the personal data collected for the following specific purposes:

  • Managing appointments and bookings: processing reservations made through Calendly and following up on them.
  • Responding to your communications: addressing inquiries, questions, and requests received via WhatsApp, email, or Instagram.
  • Providing beauty services: using the information provided to customize treatments to your needs and preferences.
  • Ensuring Site security: server logs help detect and prevent unauthorized access or malicious activity.
  • Complying with legal obligations: when required by applicable law, courts, or government agencies.

We do not use your personal data for targeted advertising, automated profiling, or sale to third parties.

4. Legal basis for data processing (TDPSA)

We process your personal data based on the following legitimate grounds recognized by the Texas Data Privacy and Security Act:

  • Contract performance or service request: when you book an appointment or request our services, processing your data is necessary to fulfill your request.
  • Legitimate interest: to maintain Site security and improve our services, provided this interest does not override your fundamental rights.
  • Legal compliance: when processing is necessary to comply with applicable legal obligations.

We do not sell personal data or use it for targeted advertising or profiling for decisions that produce legal or similarly significant effects on users.

5. Cookies and tracking technologies

Our Site does not set first-party tracking, analytics, or advertising cookies. We do not use Google Analytics, Facebook Pixel, Google Tag Manager, or any similar behavioral tracking tool.

The only third-party technologies present on the Site are:

  • Calendly (iframe): the scheduling calendar embedded on the Contact page operates within a Calendly iframe. Calendly may set its own cookies necessary for the booking widget to function.
  • Google Maps (iframe): the map embedded on the Contact page operates within a Google iframe. Google may set cookies necessary for the map to function.

Since we do not use first-party tracking or advertising cookies, a cookie consent platform is not required on this Site.

6. Third-party services that process data

  • Calendly, Inc.
    Data processed: name, email, appointment date and time.
    Purpose: appointment scheduling management.
    Privacy policy: calendly.com/privacy
  • Google LLC (Google Maps)
    Data processed: visitor IP address, map interaction data.
    Purpose: display the studio location on an interactive map.
    Privacy policy: policies.google.com/privacy
  • Web hosting provider
    Data processed: server logs (IP address, browser, pages visited, date/time).
    Purpose: Site hosting, security, and server administration.

7. International data transfers

Alexa Torrellas operates and provides services in Dallas, Texas, United States. Your personal data may be processed on servers of our service providers (Calendly and Google) located in the United States.

8. Data retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Scheduling data (Calendly): retained according to Calendly's retention policy.
  • Communications (WhatsApp, email): [PENDING: Data retention period (e.g., 2 years after last interaction)].
  • Server logs: automatically deleted according to our hosting provider's retention policy.

9. Your privacy rights (TDPSA)

If you are a Texas resident, the Texas Data Privacy and Security Act grants you the following rights regarding your personal data:

  • Right to know: you have the right to know whether we are processing your personal data.
  • Right of access: you may request access to the personal data we have collected about you.
  • Right to correct: you may request correction of inaccurate personal data.
  • Right to delete: you may request deletion of your personal data.
  • Right to data portability: you may request a copy of your personal data in a portable, easily usable format.
  • Right to opt out: you have the right to opt out of processing your data for targeted advertising, sale of personal data, or profiling with legal or similarly significant effects. Note: Alexa Torrellas does not engage in any of these activities.

How to exercise your rights:

  • Send your request to [email protected] clearly stating the right you wish to exercise.
  • We will respond within 45 days of receiving your request.

Right of appeal: If your request is denied, you have the right to appeal. If the appeal is also denied, you may contact the Texas Attorney General — Consumer Protection Division: texasattorneygeneral.gov/consumer-protection

10. Sale of personal data and targeted advertising

Alexa Torrellas does NOT sell personal data. We have not sold personal data in the past and have no intention of doing so.

Alexa Torrellas does NOT use personal data for targeted advertising or share data with third parties for advertising purposes.

11. Do Not Track signals and universal opt-out mechanisms

Alexa Torrellas respects Do Not Track (DNT) signals sent by your browser and universal opt-out mechanisms, including the Global Privacy Control (GPC) signal, as required by the TDPSA.

Since our Site does not engage in behavioral tracking or sell personal data, these signals are honored automatically.

12. Data security

We implement technical and organizational measures to protect your personal data, including:

  • Encrypted connection via HTTPS (SSL/TLS) throughout the Site.
  • HTTP security headers and Content Security Policy (CSP).
  • Access to personal data restricted to authorized personnel only.
  • Selection of service providers that maintain adequate security standards.

13. Children's privacy

Our Site and services are not directed to children under 13. We do not intentionally collect personal data from children under 13, in compliance with the Children's Online Privacy Protection Act (COPPA). If you believe your child has provided us with personal data, please contact us at [email protected].

14. Changes to this policy

We may update this Privacy Policy periodically. When we make significant changes, we will update the “last updated” date. Continued use of the Site after changes are published constitutes acceptance of the modified policy.

15. Contact and complaints

Data controller:
[PENDING: Full legal business name]
17430 Campbell Rd, Dallas, TX 75252
Registration: [PENDING: Registration number / EIN]
Jurisdiction: State of Texas, United States

16. Effective date

This Privacy Policy is effective as of March 19, 2026.