Privacy policy
This page describes what this website does with the information you give it. It is written to match how the site actually works, so if you are ever unsure whether something here is true, ask.
What we collect
If you book an appointment, we collect the name, email address and phone number you type into the booking form, along with the appointment itself: the service you chose, the technician you chose, and the date and time you picked.
If a deposit is required, we also pass the appointment details and the deposit amount to our payment provider, Stripe, so that the payment can be taken. See “Payments” below.
If you simply read the site, nothing is collected about you. There is no sign-up, no newsletter, and no account to create.
Why we collect it
Only to confirm and manage your appointment — to let you know it went through, to reach you if something needs to change, and to keep track of who is booked at which time.
The deposit, where one is taken, exists to hold the appointment you asked for. The remaining balance is paid in the salon.
Payments
If your booking requires a deposit, you are taken to a payment page run by Stripe. Your card details are entered on Stripe's own page — they never reach this website, and we do not see or store your card number.
When you start a payment we send Stripe the appointment details you entered (service, technician, date, time, name, email and phone number) along with the deposit amount, so Stripe can take the payment and confirm which booking it belongs to. That is the same information described above; no card number is included.
Stripe keeps its own record of the payment, which includes your card details and billing information, under its own privacy policy.
We keep a record of the appointment and the fact that a deposit was taken, and the amount, so the salon can reconcile it against what Stripe pays out.
If your chosen time is taken by somebody else while you are paying, we refund the deposit in full automatically and ask you to pick another time.
Deposits and cancellations
A deposit is required to confirm your appointment and is applied toward the cost of your service. Deposits are non-refundable for cancellations made less than 24 hours before your appointment, or for no-shows. If you need to reschedule, please contact us at least 24 hours in advance and your deposit will be transferred to your new appointment. Deposits will be fully refunded if the salon needs to cancel or reschedule your appointment.
Who it is shared with
Our email provider, Resend, delivers the booking notification to us. When you submit a booking, your name, email address, phone number and appointment details are passed to Resend so the notification can be sent.
Our payment provider, Stripe, takes the deposit if one is required. As described above, the appointment details you entered are sent to Stripe to take that payment, and your card details are entered on Stripe's own page and stay there.
It is not shared with anyone else, and it is not sold.
Where it is stored
Booking details are stored in this website's own database, which is part of the site. They are not held in any other system we operate.
If a deposit is taken, Stripe also holds a record of the payment, which includes your card and billing details. That record is held by Stripe, not by this site.
Cookies and tracking
The site sets no tracking cookies, runs no analytics, and contains no advertising or social-media trackers. Nothing about your visit is measured or profiled.
The only cookie the site sets is on the private staff page, and it simply remembers that you have entered the correct password. It holds a one-way hash of the password rather than the password itself, and it is never readable by scripts on the page.
If you start a booking deposit, the site sets one more cookie so that what you have typed is still there if you are sent back — for example if your card is declined. It holds the appointment details you entered, is cleared once the booking form reads it, and is not readable by scripts on the page.
How long we keep it
Booking and payment records are kept for 3 years for accounting and tax purposes, then deleted.
Your rights
This page has not been reviewed by a lawyer. The explanation below is research, prepared September 2026, and published here so you can see the sources and check the reasoning yourself. It is not legal advice. If you need an answer you can rely on, please have a lawyer review this page before treating it as settled.
You can ask us what information we hold about you, ask us to correct it, or ask us to delete it. Contact us using the details in the Contact section below. We do not charge for this and we do not require a reason. We will always answer a request we receive.
No US federal or New Mexico law that we found gives you a specific set of privacy rights over the information this site holds, because the salon is below the thresholds those laws set and is not in a state that has a general privacy law. That is what the research says, and it is worth reading rather than taking on trust:
- New Mexico has no general privacy law as of September 2026. Bills were introduced in the 2026 session and none passed.
- The state privacy laws that do exist are all far above this size. Most of them apply only to businesses handling 100,000 or more consumers a year; the lowest threshold found was Rhode Island's 35,000. A single salon does not come near any of them.
- California's CCPA does not apply — it covers for-profit businesses doing business in California that also clear a threshold. We are in New Mexico, and we are far below it.
- The EU GDPR does not apply.It reaches businesses in the EU, and businesses deliberately targeting people in the EU. Our website being reachable from Europe is not enough on its own, and we do not advertise in or target anyone in the EU.
- New Mexico's breach-notification law is aimed at a different kind of data. It covers combinations like a name with a Social Security number, a driver's licence number, or a card number with its security code. The name, email, phone and appointment details we hold are not in that list, and card details never reach us — they are entered on Stripe's own page.
- What does apply still matters.Federal law makes it unlawful for a business to say something about your data that is not true. Everything on this page is written to match what the site actually does, and that is the obligation we take seriously.
Where this came from. No state comprehensive privacy law: IAPP DataGuidance, New Mexico, MultiState, 2026 tracker. California thresholds: California Attorney General, CCPA FAQ and Cal. Civ. Code § 1798.140(d). EU scope: GDPR Article 3 and the EDPB Guidelines 3/2018 on territorial scope. New Mexico breach law: N.M. Stat. §§ 57-12C-1 to 57-12C-12, in particular § 57-12C-2(C) for what counts as personal identifying information. Federal advertising and privacy obligations: 15 U.S.C. § 45 and the FTC's small-business guidance. Research date 27 September 2026.
Contact
For any question about your details, or to ask for them to be corrected or removed, contact Envy Spa & Nails, 13140 Central Ave SE, Ste D, Albuquerque, NM 87123.
The phone number is (505) 833-3866.
Not yet stated. The business has not yet published an email address, so a privacy request has to go by phone or post for now. Adding one to `business.privacy.controllerEmail` puts it here.
Last updated: 2026-09-27.