Cuts by Amber Data Policy

This Data Policy explains how Cuts by Amber uses, processes, stores, and protects data when using Square APIs, Apple platform tools, and related internal systems.

1. Scope

This policy applies to data processed through:

• Cuts by Amber application and backend services.
• Cuts by Amber website pages and booking forms at cutsbyamber.com.
• Square APIs (booking, availability, customer records, and related transaction workflows).
• Apple platform tools and services used by the app.
• Internal business tools used for operations and customer support.

2. Data Categories Processed

Data categories may include:

• Customer identifiers: name, phone number, email address, birthdate (if provided).
• Appointment data: selected services, schedule, booking notes, history.
• Operational metadata: request timestamps, service IDs, location IDs, and basic diagnostics.
• Website request metadata: page requests, browser/device context, and referral context where available.
• Consent and communication preferences selected during booking flows.
• Marketing/communication preferences where provided.

We do not intentionally store full payment card numbers in app-managed storage.

3. Square API Data Use

Square API usage is limited to legitimate business operations, including:

• Availability lookups.
• Booking creation and management.
• Customer profile creation/association for bookings.
• Operational reconciliation and support.

Booking and customer personal data used by the scheduling workflow is stored and managed in Square systems. Our PHP API endpoints act as an integration layer to push and pull required booking and customer data to and from Square.

Data sent to Square is limited to the minimum required fields for those functions.

4. Apple Tools and Platform Data

Apple tools and services may process limited diagnostics, platform telemetry, and app operation data according to Apple policies and user device settings.

Cuts by Amber uses Apple platform features to support:

• App functionality and reliability.
• User experience and accessibility.
• Security and fraud-prevention controls.

5. Purpose Limitation

Collected and processed data is used only for:

• Service delivery and booking operations.
• Customer communications and support.
• Promotions/marketing where allowed by law and user choices.
• Internal operations and app administration.
• Legal and compliance obligations.

6. Data Minimization and Retention

We limit data collection and API payloads to what is reasonably necessary. Retention follows business and legal requirements and may vary by record type.

• Only fields needed for booking, communication, and support are collected in normal workflows.
• Security and operational logs are retained for a limited period for diagnostics and threat monitoring.
• Records are deleted or de-identified when no longer required, where reasonably feasible.

7. Security Controls

Reasonable safeguards are applied, including:

• Controlled access to systems and records.
• Network and infrastructure protections where available.
• Separation of payment credential handling via Square.
• Administrative controls for staff access and workflow boundaries.
• Encryption in transit where supported (for example, HTTPS/TLS for website and API communication).
• Monitoring and review processes to identify misuse, abnormal traffic, and unauthorized access attempts.

8. Sharing and Disclosure

We do not sell personal information.

Data may be shared with:

• Square and required service providers.
• Apple platform services where relevant to app operation.
• Business marketing channels, including website placements, social media, other online media, and print media, for pictures, videos, testimonials, comments, reviews, and similar content where permitted by law.
• Authorities where legally required.

9. User Rights and Requests

Users may request access, correction, deletion, or applicable opt-out choices by contacting Cuts by Amber. Deletion requests may be submitted through the app's Help and Policies section.

When a user books an appointment and provides a phone number, appointment-related communications, including confirmations, scheduling updates, and reminders, may be sent by email and/or SMS to the provided contact details.

Cuts by Amber may also place service-related calls to confirm, update, or discuss appointments using the provided phone number. Cuts by Amber does not place marketing or telemarketing phone calls.

Marketing messages are processed separately and are sent only when a user affirmatively opts in. Marketing texts may include loyalty messages, coupons, discounts, promotions, and service announcements. Where supported by our Square integration, this opt-in may also trigger enrollment or phone-number mapping in our Square Loyalty program.

Users can opt out of SMS messages by replying STOP (or HELP for help) and can opt out of marketing emails through unsubscribe instructions or by contacting Cuts by Amber. Message and data rates may apply. Joining a marketing text program is not a condition of purchase.

10. Minors

Cuts by Amber does not knowingly collect personal information from minors in violation of applicable law. If discovered, appropriate deletion or remediation steps are taken.

11. Compliance Alignment

This Data Policy is intended to align with:

• Square developer and platform data handling expectations.
• Apple App Store and Apple platform privacy expectations.
• Applicable Texas and U.S. legal requirements.

12. Security Incident Response

If a security event affects customer information, we will investigate, contain, and remediate the issue according to applicable requirements.

• We coordinate incident response with relevant providers when third-party systems are involved.
• Where required by law, notifications are provided to affected users and authorities.

13. Contact

Cuts by Amber
Email: amberlirette@cutsbyamber.com
Phone: (806) 640-7702
Address: 350 NW Parkway St Suite 500, Azle, TX 76020