Privacy Policy

Last updated: June 3, 2026

1. Introduction

Negar Beauty Box ("we," "our," or "us"), operated by Negar Ostad, is committed to protecting the privacy of our clients and website visitors. This Privacy Policy explains how we collect, use, disclose, and protect your personal information in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act respecting the protection of personal information in the private sector (Law 25).

2. Privacy Officer

If you have any questions about this policy or wish to exercise your privacy rights, please contact our Privacy Officer using the information above.

3. Information We Collect

3.1 Information you provide directly

• Contact form: name, email address, phone number (optional), service of interest, and your message
• Appointment booking: name, email address, and service preference via Cal.com
• Course purchases: name, email, and payment information via Thinkific (our course platform)

3.2 Information collected automatically

• Essential cookies: small text files that help our website function properly (e.g., remembering your cookie consent preference)
• Basic analytics: anonymized page visit data provided by our hosting platform (Netlify)

We do not use advertising cookies, tracking pixels, or any third-party marketing trackers.

4. How We Use Your Information

We use your personal information solely for the following purposes:

• Responding to your inquiries and messages
• Scheduling and managing appointments
• Providing requested beauty services
• Processing course enrollments and providing course access
• Sending service-related communications (appointment confirmations, follow-ups)

We will never sell, rent, or trade your personal information to third parties for marketing purposes.

5. Third-Party Services

We use the following third-party services that may process your data:

• Web3Forms — processes contact form submissions and delivers them to our email. Web3Forms Privacy Policy
• Cal.com — handles appointment scheduling. Cal.com Privacy Policy
• Thinkific — hosts our online courses and processes course payments. Thinkific Privacy Policy
• Netlify — hosts our website. Netlify Privacy Policy

Each third-party service has its own privacy policy governing their handling of your data. We encourage you to review their policies.

6. Cookies

Our website uses only essential cookies required for the website to function properly. These include:

• Cookie consent preference: remembers whether you accepted or declined cookies
• Session cookies: temporary cookies that expire when you close your browser

We do not use cookies for advertising, retargeting, or behavioral tracking. You can manage cookies through your browser settings at any time.

7. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected:

• Contact form submissions: retained for up to 12 months, then deleted
• Appointment records: retained for up to 24 months for follow-up and service history
• Course enrollment data: retained for the duration of your course access

8. Your Rights Under Quebec Law 25 and PIPEDA

You have the following rights regarding your personal information:

• Right of access: request a copy of the personal information we hold about you
• Right of rectification: request correction of inaccurate or incomplete information
• Right of deletion: request deletion of your personal information, subject to legal obligations
• Right to withdraw consent: withdraw your consent to the collection or use of your information at any time
• Right to data portability: request your data in a commonly used electronic format

To exercise any of these rights, contact our Privacy Officer at Ostad.nr@gmail.com. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our website uses HTTPS encryption for all data transmission.

10. Children's Privacy

Our services are not directed to individuals under the age of 14. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.

12. Complaints

If you are not satisfied with our response to a privacy concern, you have the right to file a complaint with:

• Commission d'accès à l'information du Québec (CAI)
  Website: www.cai.gouv.qc.ca
  Phone: 1-888-528-7741
• Office of the Privacy Commissioner of Canada (OPC)
  Website: www.priv.gc.ca
  Phone: 1-800-282-1376