This policy explains how Xpress Salon, 12 Garth Road, Scarsdale, NY 10583 (“Xpress Salon,” “we,” “us”) collects, uses, shares and protects personal information when you visit xpresssalon.com, book online, use My Xpress, join the Xpress Circle, call or text the salon, or buy from us in the salon. By using our website or services you agree to this policy.

1. Information we collect

Information you give us.

Booking: your name, mobile number, email, the service, artist, date and time you choose, notes for your artist, and whether you agreed to texts.
My Xpress (client portal): anything you add to your profile, such as birthday, preferred artist, address, special events, consultation answers, photos you upload, quotes you accept and survey answers.
Service records: what we need to look after your hair, such as color formulas, technique and product notes, extension details, patch and strand test results, and before and after photos taken with your permission.
Health-related information you choose to share: allergies, sensitivities, scalp conditions, medical hair loss or treatments that affect your hair (for example, chemotherapy or alopecia). We use it only to provide a safe service, keep it confidential and share it only with the artist caring for you.
Purchases: what you bought, the amount, tips, gift cards, credits and refunds. Card payments are handled by our card processor or card terminal; we keep only the card type and last four digits, never the full card number.
Xpress Circle: your level, credits and the first names and email addresses of friends you invite.
Messages and calls: emails, contact forms, texts and calls with the salon, including our AI phone receptionist (see section 5).
Job and model applications: the details and files you send us.

Information collected automatically. When you use the website we receive standard technical information such as browser type, device, pages viewed and the referring page. For security we store a keyed, one-way hash of your IP address rather than the address itself. If you accept analytics cookies, Google Analytics and the Vibe pixel also measure visits (see section 4).

Information from other sources. We combine records from our scheduling provider (Acuity Scheduling) and our past point-of-sale system (KORONA) so your appointment and purchase history appears in one client record.

2. How we use information

To book, confirm, move, remind you of and provide your appointments and services.
To keep accurate service records (formulas, notes, photos) so every visit matches the last one.
To process payments, refunds, gift cards, credits and Circle perks.
To answer your calls, texts, emails and forms.
To send service messages, such as confirmations, reminders, receipts, surveys and rebooking reminders.
To send offers and news by email, and by text only if you opted in. You can opt out at any time.
To keep the website and our records secure, prevent fraud and abuse, and fix problems.
To understand which pages and offers help people book, and to improve our services.
To meet legal, tax and accounting obligations and to enforce our terms.

3. How we share information

We do not sell your personal information and we do not share it for cross-context behavioral advertising, except as described for the analytics cookies you accept. We share information only with:

Service providers who run parts of our business for us and may use it only for that purpose: scheduling (Acuity Scheduling), website hosting, email and text delivery, card processing, our AI phone receptionist, analytics (Google Analytics, Vibe) and spam protection (Google reCAPTCHA).
Your artist and salon staff, who need it to look after you.
Friends you invite to the Xpress Circle: they see your first name in the invitation.
Legal and safety reasons: when required by law, subpoena or court order, or to protect the rights, property or safety of our clients, staff or the public.
Business transfer: if the salon is sold or merged, client records may transfer to the new owner under this policy.

4. Cookies and analytics

We use a small number of cookies:

Essential cookies keep you signed in to My Xpress, protect forms from misuse, remember your cookie choice, and make sure a holiday pop-up shows only once. The site does not work properly without them.
Analytics and advertising cookies (Google Analytics and the Vibe pixel) load only if you click Accept on the cookie notice. They help us count visits and see which pages and offers lead to bookings.

If you click Decline, analytics and advertising cookies never load. You can change your choice by clearing this site's cookies in your browser; the notice will appear again. Our site does not respond to browser “Do Not Track” signals, but declining cookies has the same effect for our analytics. You can also opt out of Google Analytics at tools.google.com/dlpage/gaoptout.

5. Phone calls and our AI receptionist

Calls to the salon may be answered by an AI receptionist that can book, move or cancel appointments and answer questions. Calls may be recorded and transcribed, and a summary may be texted or emailed to salon staff, so we can follow up and improve our service. If you prefer, ask to leave a message for a staff member.

6. Text messages and email

We send texts only if you opted in (see our SMS terms). Reply STOP to any text to stop, or HELP for help. Every marketing email includes an unsubscribe link. Even if you opt out of marketing, we may still send messages about your appointments and purchases.

7. Photos

We take before and after photos only with your permission. We use them in your private service record. We post them on our website or social media only with your separate, written consent, and you can withdraw it at any time for future use.

8. Links and Amazon

Our Shop page links to products on Amazon. As an Amazon Associate, Xpress Salon earns from qualifying purchases. When you follow a link, Amazon's own privacy notice applies. We are not responsible for the privacy practices of other websites we link to.

9. How long we keep information

We keep client and service records while you are a client and for up to seven years after your last visit, so we can honor credits and gift cards, answer questions about past services and meet tax and accounting rules. Security logs are kept for a shorter time. When information is no longer needed we delete or de-identify it. Sales records needed for tax purposes are kept with your name removed.

10. How we protect information

We use encrypted connections (HTTPS), hashed passwords, two-step login for staff, role-based access, encryption of stored secrets, an audit log of staff actions, and regular backups. No system is perfectly secure; if a breach affects your information we will notify you as required by New York law, including the SHIELD Act.

11. Your choices and rights

See and download your information in My Xpress → Privacy.
Correct your details in My Xpress or by asking us.
Delete your account and personal information in My Xpress → Privacy, or by asking us. We may keep what the law requires (for example, sales records for tax), with your name removed.
Opt out of marketing emails and texts at any time.

We will not treat you differently for using these rights. We may need to confirm your identity before acting on a request.

12. Children

Our website is not directed to children under 13 and we do not knowingly collect their information online. Services for minors are booked by a parent or guardian, who provides the information needed.

13. Changes to this policy

We may update this policy. The effective date at the top shows when it last changed. If the changes are significant, we will tell you by email or with a notice on the website.

14. Contact us

Xpress Salon, 12 Garth Road, Scarsdale, NY 10583 · support@xpresssalon.com · (914) 472-1800.

Privacy policy