Privacy Policy

At ELISIA ("Beauty, Refined", "we", "our", or "the atelier"), we believe personal attention and luxury craftsmanship must be accompanied by absolute discretion and transparent data practices. This Privacy Policy describes how we collect, use, retain, and protect personal information when you visit our website (elisia-liard.vercel.app), submit appointment requests, or communicate with our atelier concierge.

1. Atelier Identity & Data Controller

ELISIA operates as a private beauty atelier and mobile concierge styling brand offering bespoke bridal makeup, couture hair artistry, and restorative skincare therapies.

• Brand Identity: ELISIA — "Beauty, Refined"
• Legal Operating Entity: [ELISIA Atelier / Registered Legal Entity Name]*
• Primary Concierge Inquiries: info@elisia.in
• Concierge Telephone / WhatsApp: +91 81606 73127
• Operating Studio Location: [Studio Physical Address / Registered Office Location, India]*

* Note: Placeholders marked with brackets reflect operating information pending formal confirmation by the business owner.

2. Information We Collect

We collect only the information strictly necessary to coordinate, prepare, and deliver individualized atelier beauty services. The data collected consists of:

• Client Contact Information: Your full name, telephone number (for appointment coordination and WhatsApp concierge messaging), and email address.
• Appointment Specifications: Selected beauty or skincare service, requested date, preferred start time slot, calculated service duration, and appointment status (Pending, Confirmed, Cancelled).
• Consultation & Aesthetic Notes: Optional notes you provide regarding skin sensitivities, cosmetic allergies, occasion details, or tailored aesthetic preferences.
• Location / Address (Where Applicable): Physical venue or home address provided specifically for mobile doorstep or on-location bridal appointments.
• Inquiry Messages: Details submitted through our "Send an Inquiry" form on the Contact page.

3. Purpose and Legal Basis for Processing

We process client data solely for the following legitimate business purposes:

• Booking Management: Recording appointment requests in our database and facilitating concierge review.
• Studio Scheduling: Checking studio calendar availability and reserving dedicated session time to prevent double-booking.
• Client Communication: Sending transactional booking status updates, confirmation emails, and concierge inquiries.
• Treatment Customization: Preparing customized cosmetic formulations, shade matching, and hygiene protocols suited to your disclosed skin profile.
• Customer Support: Responding to client inquiries submitted via our contact channels.

4. Google Calendar Integration & Google API Services Disclosure

ELISIA integrates with the Google Calendar API to maintain real-time schedule accuracy and prevent appointment conflicts. Because Google OAuth2 is utilized in this integration, we provide the following explicit disclosures:

• Whose Google Account is Connected: The integration connects exclusively to the studio owner’s internal Google Workspace / Google Calendar account. Website visitors and clients are never required to log into Google, and ELISIA does not access, view, or request access to clients' personal Google accounts or data.
• Studio Schedule Verification (FreeBusy Query): To calculate available appointment slots on our booking wizard, our backend server queries the atelier’s Google Calendar FreeBusy API for busy intervals in the Asia/Kolkata timezone. If the calendar cannot be verified, our system operates on a strict fail-closed policy and does not confirm online appointments until schedule integrity is ensured.
• Calendar Event Creation: When our atelier concierge clicks the single-use confirmation link for a pending appointment, our application creates a calendar event directly on the studio’s Google Calendar. The event contains the service title, client name, contact phone number, email address, and optional consultation notes to enable our team to prepare for the session.
• Limited Use & Non-Sharing Compliance: ELISIA's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• No Commercial Sale or Advertising: Google Calendar data and appointment entries are never transferred, sold, rented, or licensed to third-party data brokers, advertising platforms, or external analytics services.

5. Data Storage, Security & Retention

We implement technical, organizational, and architectural safeguards to protect client data:

• Database Storage: Client customer records and booking rows are stored in a Microsoft SQL Server database.
• Cryptographic Token Protection: Single-use booking approval and rejection tokens are cryptographically hashed using SHA-256 before persistence. Raw tokens are held solely in temporary server memory and expire automatically.
• Encrypted Transport: All website traffic, API requests, and calendar communications are encrypted in transit using industry-standard TLS/HTTPS protocols.
• Retention Period: Customer and booking records are retained as business records to maintain service continuity and appointment history for recurring clients. Records are maintained until a verified deletion request is received or until no longer required for legitimate business purposes.

6. Third-Party Infrastructure Providers

We share client information only with trusted infrastructure providers strictly necessary to execute our website and appointment workflows:

• Hosting Infrastructure: Vercel Inc. (cloud application hosting).
• Database Hosting: Microsoft SQL Server database hosting provider.
• Calendar Synchronization: Google LLC (Google Calendar API for studio appointment scheduling).
• Email Dispatch: SMTP mail server for transactional booking approvals and customer confirmation emails.
• Direct Messaging: WhatsApp (Meta Platforms, Inc.) for studio concierge messaging where requested.

7. Your Privacy Rights & Choices

You have full control over the personal information you entrust to ELISIA:

• Access & Review: You may request a summary of the contact details and appointment history associated with your phone number or email address.
• Correction & Updates: You may request corrections to any inaccurate contact information or details in our records.
• Erasure & Deletion: You may request that we delete or anonymize your customer profile and past booking records from our database, subject to any statutory recordkeeping obligations.
• Communication Preferences: You may notify our concierge at any time if you prefer email over WhatsApp or telephone communications.

8. Contact Us Regarding Your Privacy

If you have questions about this Privacy Policy, wish to exercise any of your privacy rights, or have concerns regarding our Google Calendar scheduling integration, please reach out directly to our concierge team: