Privacy Policy

Majistic Locs ("we," "us," or "our") operates the majisticlocs.com website and related services (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Platform.

This policy applies to all users of the Platform, including:

• Clients — individuals who browse, book, or purchase services and products
• Locticians / Professionals — service providers who list services, accept bookings, and sell products
• Visitors — anyone who visits the Platform without creating an account

By using the Platform, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please discontinue use of the Platform.

2a. Information You Provide Directly

• Account information: name, email address, phone number, password
• Profile information (Professionals): business name, bio, specialties, years of experience, portfolio photos, certifications, service menu, pricing
• Booking and appointment details (date, time, service, notes)
• Payment and billing information (processed securely via Stripe; we do not store full card numbers)
• Communications between clients and professionals
• Reviews, ratings, and feedback
• Support and customer service requests
• Product information (for sellers): product listings, descriptions, images, pricing, inventory

2b. Information Collected Automatically

• Device and browser information (type, operating system, version)
• IP address and approximate geolocation
• Usage data (pages visited, features used, booking patterns, search queries)
• Cookies and similar tracking technologies (see our Cookie Policy)
• Referral source (how you found us)

2c. Information from Third Parties

• Social media login providers (Google, Apple)
• Payment processors (Stripe) — transaction status and payout data
• Analytics providers

We use the information we collect to:

• Provide, maintain, and improve the Platform
• Process bookings, appointments, and scheduling
• Process payments, deposits, and payouts to professionals
• Facilitate communication between clients and professionals
• Send appointment reminders, confirmations, and transactional notifications via email and SMS
• Display professional profiles, service listings, and product listings
• Enable reviews, ratings, and feedback
• Personalize your experience and recommendations
• Send marketing and promotional communications (with your consent)
• Detect and prevent fraud, abuse, and security incidents
• Analyze usage trends to improve the Platform
• Comply with legal obligations
• Enforce our Terms of Service

We may share your information with:

• Professionals — When you book an appointment, your name, contact information, and booking details are shared with the professional to fulfill your appointment
• Clients — Professional profile information (business name, services, pricing, portfolio, reviews) is displayed publicly
• Payment processors — Stripe processes all payment transactions. Your payment information is handled according to Stripe's privacy policy and PCI-DSS standards
• Service providers — hosting (Vercel), database (Supabase), email delivery (Resend), analytics, and other infrastructure providers who assist in operating the Platform
• Legal compliance — when required by law, regulation, legal process, or government request
• Business transfers — in connection with a merger, acquisition, reorganization, or sale of assets
• With your consent — when you explicitly authorize sharing for a specific purpose

We do not sell your personal information.

We use cookies and similar technologies to enhance your experience. For detailed information about the types of cookies we use and how to manage them, please see our Cookie Policy.

We retain your personal information for as long as your account is active or as needed to provide services. Specific retention periods include:

• Account data — retained until you delete your account, plus a reasonable period for backup and legal compliance
• Booking and transaction records — retained for 7 years for tax and financial compliance
• Reviews and ratings — may be retained and displayed even after account deletion, in anonymized form, to maintain platform integrity
• Payment data — handled by Stripe according to their retention policies and PCI-DSS requirements

After account deletion, we may retain certain data in anonymized or aggregated form for analytics purposes.

We implement industry-standard security measures to protect your information, including:

• Encryption in transit (TLS/HTTPS) and at rest
• Strict access controls and authentication for internal systems
• PCI-DSS compliance for payment processing (handled by Stripe)
• Rate limiting, input validation, and security headers on all endpoints
• Regular security reviews and monitoring
• Row-level security on database queries

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the security of your account credentials.

You have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — update or correct inaccurate information via your account settings
• Deletion — request deletion of your account and personal information
• Opt out of marketing — unsubscribe from promotional emails via the link in any marketing email
• Opt out of SMS — reply STOP to any text message to unsubscribe from appointment reminders
• Data portability — request your data in a portable format

To exercise any of these rights, contact us at privacy@majisticlocs.com. We will respond within 30 days.

California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information is collected and how it is used
• Request deletion of your personal information
• Opt out of the sale or sharing of personal information (we do not sell your data)
• Non-discrimination for exercising your privacy rights

To submit a request, email privacy@majisticlocs.com with the subject line "California Privacy Request."

Virginia, Colorado, Connecticut, and Other States

Residents of states with comprehensive privacy laws (including Virginia VCDPA, Colorado CPA, Connecticut CTDPA, and others) may have similar rights to access, correct, delete, and opt out. To exercise these rights, contact us at privacy@majisticlocs.com.

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected information from a child under 18, we will promptly delete that information. If you believe a child has provided us with personal information, please contact us at privacy@majisticlocs.com.

Our Platform is operated in the United States. If you access the Platform from outside the US, your information may be transferred to, stored, and processed in the United States. By using the Platform, you consent to the transfer of your information to the US.

The Platform may contain links to third-party websites, services, or applications (including social media profiles, payment processors, and professional websites). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on this page with a new "Last Updated" date and, where appropriate, by sending an email notification. Your continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, please contact us: