Privacy policy

1. Introduction

KRASKII ("we," "us," "our") respects your privacy. This Privacy Policy explains what personal information we collect through our website, online booking, and in-studio services, how we use and share it, and the choices you have. It applies to visitors to our website and to clients who book or receive services from us.

By using our website or booking a service, you acknowledge this Privacy Policy. If you do not agree, please do not use our website or Services.

2. Information We Collect

Information you give us directly:

  • Name, email address, phone number, and mailing address (when you book an appointment, contact us, or sign up for updates)
  • Payment information — processed directly by our payment/booking partner, Stripe; we do not store your full card number on our own systems
  • Health and medical intake information collected in person before a procedure, as required by California's Safe Body Art Act (Health & Safety Code § 119303) — including relevant medical history, allergies, medications, pregnancy status, and other risk-factor disclosures
  • Photos or videos of your treatment area, where you've consented (see our Terms of Service, Section 7)
  • Any information you provide when messaging us, leaving a review, or communicating with us on social media

Information collected automatically:

  • Standard website usage data (pages visited, browser type, approximate location from IP address, referring site) via our website platform (Shopify) and any analytics or advertising tools we use (e.g., Google Analytics, Meta/Facebook Pixel, if enabled)
  • Cookies and similar tracking technologies — see Section 5

Information from third parties:

  • Booking, scheduling, and payment data from Stripe
  • Website hosting and store data from Shopify

3. How We Use Your Information

We use your information to:

  • Schedule, confirm, and manage your appointments
  • Process payments and deposits
  • Evaluate your candidacy for a service and obtain legally required informed consent
  • Provide pre-care and aftercare instructions and follow up regarding your healing/results
  • Communicate with you about your appointment (confirmations, reminders, rescheduling)
  • Send marketing communications, promotions, or updates — only if you've opted in, and you can opt out at any time (see Section 7)
  • Improve our website and services
  • Comply with legal, health, and safety recordkeeping obligations under the Safe Body Art Act and other applicable law
  • Protect against fraud, abuse, or unsafe use of our booking system

4. How We Share Your Information

We do not sell your personal information.

We share information only with:

  • Service providers who help us operate our business under contract, including Square (payments/booking) and Shopify (website/e-commerce platform), and any email/SMS reminder or marketing tools we use
  • Legal or safety authorities, if required by law, subpoena, or to protect the health/safety of a client or the public (e.g., local health department reporting requirements under the Safe Body Art Act)
  • A successor business, if KRASKII is sold or transferred, subject to the same privacy commitments described here
  • With your consent, such as marketing photos/videos you've agreed to (Terms of Service, Section 7)

5. Cookies & Tracking Technologies

Our website may use cookies and similar technologies (e.g., through Shopify, Google Analytics, or Meta/Facebook Pixel, if enabled) to remember your preferences, understand site traffic, and — if applicable — show you relevant ads. You can control cookies through your browser settings. If we use any tool that shares data for cross-context behavioral advertising, we will provide a "Your Privacy Choices" or opt-out mechanism as required by California law.

6. Data Retention

We retain:

  • Booking, payment, and appointment history for as long as needed for business, tax, and legal recordkeeping purposes
  • Health/medical intake and consent records for the period required under the Safe Body Art Act and our professional liability insurance requirements (typically several years — confirm the exact period with your insurer/attorney)
  • Marketing contact information until you unsubscribe or request deletion

When information is no longer needed, we take reasonable steps to securely delete or de-identify it.

7. Your Privacy Choices & Rights

  • Marketing opt-out: You can unsubscribe from marketing emails/texts at any time using the link in those messages, or by contacting us directly.
  • Photo/video consent: You may opt out of future marketing use of your images at any time by contacting us (see Terms of Service, Section 7).
  • Access, correction, and deletion: You may request to know what personal information we hold about you, request a correction, or request deletion, subject to our legal obligation to retain certain records (e.g., required health/consent documentation) for the periods described in Section 6.

To exercise any of these choices, contact us using the information in Section 10. We will respond within a reasonable time and may need to verify your identity before fulfilling certain requests.

8. California Privacy Rights (CCPA/CPRA)

The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives California residents specific rights over their personal information — but it generally only legally applies to businesses that meet at least one of these thresholds: (a) annual gross revenue above approximately $26.6 million, (b) buying, selling, or sharing the personal information of 100,000 or more California consumers/households per year, or (c) deriving 50% or more of annual revenue from selling or sharing personal information.

Most independently owned local studios do not meet these thresholds and are not strictly required to comply with the full CCPA/CPRA. [Confirm your specific status with your attorney, especially if you run significant paid advertising with broad tracking pixels.] Regardless of whether the CCPA strictly applies to our business, we voluntarily extend the following practices to California residents as a matter of good faith:

  • We do not sell your personal information.
  • You may request to know, correct, or delete the personal information we hold about you, as described in Section 7.
  • We will not discriminate against you for exercising any privacy right.

If our business does become subject to the full CCPA/CPRA in the future (for example, due to growth or expanded advertising use), we will update this policy to reflect additional required disclosures and mechanisms (such as a "Do Not Sell or Share My Personal Information" link and Global Privacy Control support).

9. Other Notes

Health information: Medical and health-related information collected as part of your required informed consent and candidacy screening is treated as confidential and is handled and disposed of consistent with the protections described in the Safe Body Art Act (Health & Safety Code § 119303(c)), which references federal HIPAA-equivalent handling for this specific category of information. This does not mean KRASKII is a HIPAA-covered entity in the formal sense (we do not bill insurance or engage in HIPAA-covered electronic health transactions) — it means we apply a comparable standard of confidentiality to this information.

Children's privacy: Our website and Services are not directed to, and we do not knowingly collect personal information from, anyone under 18. We do not perform services on clients under 18 under any circumstances (see Terms of Service, Section 1).

Data security: We use reasonable administrative, technical, and physical safeguards to protect your information, consistent with our obligations under California Civil Code § 1798.150 and the Safe Body Art Act's confidentiality requirements. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Third-party links: Our website may link to third-party sites (e.g., Instagram, Stripe's booking pages). We are not responsible for the privacy practices of those third parties — please review their own privacy policies.

10. Contact Us

To ask questions about this policy or exercise any privacy right described above, contact:

KRASKII

Business Address: 1917 Douglas Blvd. Suite 89 Roseville, CA 95661

Email Address: browsbykraskii@gmail.com

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Effective Date" at the top reflects the most recent revision. Material changes will be reflected here, and continued use of our website or Services after changes are posted constitutes acceptance of the updated policy.