Privacy Policy
Hairloss Rescue Inc. runs the studio at 5441 S Macadam Ave, Ste N, Portland, Oregon, and the shop at hairlossrescue.com. This page says what we collect, why we collect it, who else sees it, and what you can tell us to do about it. It is written to be read, not to be survived.
Last updated 1 September 2026.
1. What we collect
When you request an appointment. Your name, telephone number and email address; the service you asked for; the chair level you would prefer; your preferred date and time of day; whether you have been in before; and anything you choose to tell us about your hair or scalp in the notes field or the checkboxes above it.
When you buy something. Your name, billing address, delivery address, telephone number, email address and what you ordered. Card details go straight from your browser to our payment processor. They do not reach our servers, we cannot see them, and we could not store them if we wanted to.
When you open an account. Your email address, a password we store only as a hash, your order history and any addresses you save.
When you simply visit. Your IP address, browser and device type, the pages you looked at and the site that sent you. This is ordinary web-server logging.
2. About the hair and scalp information
The booking form invites you to flag thinning, shedding, a widening parting, scalp irritation and similar. None of it is required. Leave every box empty and we will still take the booking; it only changes how much time we set aside.
We are a hair and scalp studio, not a healthcare provider. What you tell us is not a medical record and is not protected health information under HIPAA. We treat it as confidential anyway. It is seen by the stylist and the trichologist working with you and by whoever answers the studio inbox — nobody else. We do not use it for advertising, we do not sell it, and we will not hand it to an insurer or an employer.
3. Why we use it
- To answer your booking request and to run the appointment.
- To take payment, pick, pack and ship an order, and to deal with anything that goes wrong afterwards.
- To keep the accounting and tax records the law requires us to keep.
- To answer you when you write to us.
- To keep the site working and to see, in aggregate, which pages people actually use.
- To send you email about offers and openings — only if you have asked for it, and every message carries an unsubscribe link.
4. Who else sees it
- Our payment processor, which handles card data under its own privacy policy. [Name the processor here once the merchant account is open.]
- The carrier delivering your parcel, which needs your name, address and telephone number.
- Our hosting, email and IT suppliers, who process data on our instructions and are contractually barred from using it for anything else.
- Our accountant and, if it ever came to it, our lawyers.
- A public authority, where a subpoena, a court order or a statute obliges us.
We do not sell personal information, and we do not share it for cross-context behavioural advertising.
5. How long we keep it
- Booking requests that do not become appointments: 24 months.
- Client records and treatment notes: 7 years after your last visit.
- Orders, invoices and tax records: 7 years, because we are required to.
- Account data: until you close the account, then 30 days.
- Server logs: 90 days.
- Marketing consent: until you withdraw it.
6. Cookies
Essential cookies keep your basket, carry you through checkout, keep you signed in and protect the forms from abuse. The shop cannot work without them.
Preference cookies remember small choices, such as a filter you picked in the shop.
Analytics cookies, if and when we switch analytics on, count visits and pages. We will name the provider here before that happens.
Your browser can block or delete any of them. Block the essential ones and the basket will stop working — that is the trade, and it is not something we can engineer around.
7. What you can ask us to do
Whoever you are and wherever you live, you can ask us to:
- tell you what we hold about you, and give you a copy;
- correct anything that is wrong;
- delete what we are not legally obliged to keep;
- stop sending you marketing;
- stop processing your data while we look into a complaint.
Write to support@hairlossrescue.com. We answer within thirty days, we do not charge, and we will not make the site worse for you because you asked. If you live in a state with its own privacy statute — California, Colorado, Connecticut, Virginia, Utah and a growing list of others — you may have additional statutory rights, including the right to appeal a refusal. We apply the same process to everyone regardless.
8. Security
The site runs over TLS. Access to client records is limited to staff who need it. Card data never touches our systems. No arrangement is perfect, and if a breach affects you we will tell you and tell you what to do about it.
9. Children
The site is not intended for anyone under sixteen and we do not knowingly collect their information. Under-sixteens are welcome in the chair with a parent or guardian, who makes the booking.
10. Other people’s sites
Where we link out — to a manufacturer’s ingredient list, say — that site has its own policy and we are not responsible for it.
11. Changes
If this policy changes we will post the new version here with a new date at the top. If the change is significant and we hold your email address, we will tell you.
12. Contact
Hairloss Rescue Inc.
5441 S Macadam Ave, Ste N
Portland, OR 97239
support@hairlossrescue.com
(503) 555–0142