Privacy Policy (California – CCPA/CPRA)

Effective Date: 03-17-2026
Website: www.keratinlaboc.com

​

This Privacy Policy describes how JTO Enterprise, Inc. doing business as Keratin Lab (“Company,” “we,” “us,” or “our”) collects, uses, and discloses personal information of California residents in compliance with the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

​

1. Personal Information We Collect

​

We may collect the following categories of personal information:

A. Identifiers

• Name

• Email address

• Phone number

• IP address

B. Customer Records

• Appointment details and booking history

• Service history

• Customer communications

C. Commercial Information

• Services purchased

• Transaction history

D. Internet Activity

• Website usage data (pages viewed, time spent, browser type)

E. Geolocation Data

• Approximate location based on IP address

F. Sensitive Personal Information (Limited Use)

• Payment-related information is processed securely through third-party providers (e.g., Square). We do not store full payment details.

​

2. How We Use Personal Information

​

We use personal information for the following business purposes:

• Scheduling and managing appointments through Square

• Sending appointment confirmations and reminders

• Processing payments

• Sending marketing communications via SMS and email (with opt-in consent)

• Improving website functionality and customer experience

• Running advertising and marketing campaigns (including Google and Instagram)

• Fraud prevention, security, and legal compliance

We only use sensitive personal information as necessary to provide services.

​

3. How We Share Personal Information

​

We do not sell personal information for monetary value. However, we may “share” personal information as defined under California law for advertising purposes.

We may disclose personal information to:

• Service Providers: Including Square (appointments, payments, and marketing), email/SMS communication platforms

• Advertising Partners: Including Google and Meta (Instagram/Facebook) for marketing and retargeting

• Analytics Providers: To understand website performance and usage

• Legal Authorities: When required by law or to protect our rights

• Business Transfers: In connection with a merger, sale, or acquisition

​

4. Cookies and Tracking Technologies

​

We use cookies, pixels, and similar tracking technologies (including Google and Meta tracking tools) to:

• Analyze website traffic and performance

• Improve user experience

• Deliver targeted advertisements

You can manage your cookie preferences through our consent banner or your browser settings.

​

5. Your California Privacy Rights

​

If you are a California resident, you have the following rights:

Right to Know

Request details about the personal information we collect, use, and share.

Right to Delete

Request deletion of your personal information, subject to legal exceptions.

Right to Correct

Request correction of inaccurate personal information.

Right to Opt-Out of Sale/Sharing

Request to opt out of the sharing of your personal information for cross-context behavioral advertising.

Right to Limit Use of Sensitive Personal Information

Request limits on how sensitive personal data is used.

Right to Non-Discrimination

We will not discriminate against you for exercising your rights.

​

6. How to Exercise Your Rights

​

To submit a request, contact us at:

Email: JoleneLe@keratinlaboc.com
Phone: 949-877-0036

We may need to verify your identity before processing your request. You may also designate an authorized agent to act on your behalf.

​

7. SMS & Marketing Communications

​

By providing your phone number and opting in, you consent to receive text messages related to:

• Appointment confirmations and reminders

• Promotions and special offers

Message and data rates may apply. Message frequency may vary.
You can opt out at any time by replying STOP to any message.

​

8. Email Marketing

​

Customers may opt in to receive marketing emails through Square Marketing. You may unsubscribe at any time by clicking the “unsubscribe” link in any email.

​

9. Data Retention

​

We retain personal information only as long as necessary to:

• Provide services and manage appointments

• Comply with legal and tax obligations

• Resolve disputes and enforce agreements

​

10. Third-Party Links

​

Our website may contain links to third-party websites. We are not responsible for their privacy practices.

​

11. Children’s Privacy

Our services are not directed to individuals under 13. We do not knowingly collect personal information from children.

​

12. Changes to This Privacy Policy

​

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.

 

13. Contact Information

​

JTO Enterprise, Inc. (DBA Keratin Lab)
333 E. 17th St. #9B
Costa Mesa, CA 92627
Email: JoleneLe@keratinlaboc.com
Phone: 949-877-0036
Website: www.keratinlaboc.com

​

14. Notice of Right to Opt-Out of Sharing

California residents have the right to opt out of the sharing of personal information for advertising purposes.

To exercise this right, please contact us at JoleneLe@keratinlaboc.com.

​

15. “Shine the Light” Law

California residents may request information regarding disclosure of personal data to third parties for direct marketing purposes.