Privacy Policy

1. Introduction

This Privacy Policy explains how HennaArt by Tasz LLC, a company based at 6496 W Ipswitch Way, Herriman - 84096-3008, United States (US), handles personal information. The bench is run by the developer HennaArt Tasz and the small team that supports the studio, and this policy describes the practices of that bench in plain language.

The studio operates two connected kinds of work. One side is a henna bench, where cones are rolled, patterns are cut into stencil cards and client sessions are logged. The other side is a computer systems design and related professional services practice, where small documentation and process projects are delivered for clients. Both sides of the practice depend on careful records, and this policy applies to both.

We believe that a client should be able to see, understand and correct the record that a business keeps about them. That belief shapes every section below. If any part of this policy is unclear, the bench welcomes a direct question by email or phone, and a member of the team will walk through the relevant section in ordinary words.

2. Scope of This Policy

This policy applies to information collected through the website, through email, through phone calls, through the contact form and through in-person sessions at the bench or at an arranged event station. It applies to visitors who only read the site, to clients who book a session and to business clients who engage the design side of the practice.

The policy does not apply to information that a third party collects independently. If a client reaches the studio through a social platform, that platform keeps its own record under its own policy, and the studio cannot control or delete that record. We encourage clients to review the privacy settings of any platform they use before sharing details there.

Where a separate contract exists for a project, that contract may set additional terms about confidentiality and data handling. If a contract conflicts with this policy, the contract takes priority for that specific project, and this policy continues to apply to everything else.

3. Information We Collect

We collect only the information that is needed to answer a question, plan a session, deliver a service and keep an accurate record afterwards. The categories below describe what is normally collected, though not every category applies to every person.

• Contact details such as name, email address, phone number and, where a client provides it, a mailing address.
• Booking details such as the requested date, placement area, pattern direction and any notes about the occasion.
• Session notes such as the batch card number, wash timing guidance and any care instruction given at the bench.
• Message content that a client sends through the contact form, by email or by phone.
• Business client details such as the organization name, role, project brief and meeting notes.
• Photographs that a client chooses to share after a session, only with that client giving permission.
• Limited technical data such as the browser type and the pages visited, gathered by the hosting provider in standard server logs.

We do not collect payment card numbers directly. Where payment is required, it is handled through a payment provider that processes the transaction on its own secure system, and the bench receives only a confirmation and the amount paid.

4. Booking and Session Information

When a client requests a session, the bench records the date, the type of service, the placement and a short description of the pattern. This information is used to assign the right row on the bench, to plan the batch that will be rolled and to avoid scheduling conflicts. It is also used to send a confirmation and any preparation guidance.

After the session, the booking record receives a short completion note. The note says which service was delivered, which batch card was used and whether a follow-up is needed. It does not include a detailed narrative about the client beyond what is useful for a future session.

A client can ask for a booking record to be corrected at any time. If a date or a contact detail is wrong, the bench will update the record and confirm the change in writing. If a client asks for a booking record to be deleted, the bench will remove the parts that are not needed for tax, safety or dispute purposes, and will explain which parts must be kept.

5. Stain Notes and Practice Records

The stain log is central to the way the bench works. Each cured stain is compared against the batch card, and the result is written in plain language. The log records the colour depth, the edge sharpness and the pace of the fade. It is kept so that the next session can begin from a known result rather than a rough memory.

Stain notes are stored in two forms. A paper note stays in a locked drawer at the bench, and a short digital summary holds only the technical details. The digital summary does not contain a face photograph, a full address or any narrative that would identify a person if the file were seen alone. A client name is attached only where it is needed to match the note to a future booking.

Practice hand sessions also generate records. These records concern the learner and the batch, and they are kept to show progress and to test new stencils. A learner can ask to have a practice record removed when the sessions end, and the bench will remove everything except the batch test result that the studio needs for its own quality record.

6. Photographs and Client Images

The bench takes photographs only for a clear purpose. A photograph may be taken to document the healed result for the stain log, to show a client the finished pattern before it is wrapped, or to document a new stencil card for the pattern library. No photograph is used for advertising or published on the website without a separate written permission from the client.

Where permission is given, it is specific. A client may agree to a hand photograph being used as a stain reference while declining any use on a social platform. The bench respects that distinction and keeps a note of exactly what was agreed.

A client can withdraw permission at any time. When permission is withdrawn, the bench removes the image from any place it controls within a reasonable period and confirms the removal in writing. Images that were already printed for a paper record are destroyed, and the digital copy is deleted from the working folder.

Photographs are stored in a folder that only the bench team can reach. Files are named by batch card rather than by person, so a file found on its own does not reveal whose hand is shown. Backups follow the same naming rule.

7. Payment and Billing Information

Payments for sessions and projects are handled through a payment provider. The bench does not see or store a full card number, a security code or a bank password. What the bench receives is a transaction reference, the amount paid and the date of the payment.

The transaction reference is kept with the booking record for accounting and dispute purposes. If a refund is needed, the bench uses the reference to locate the original transaction rather than asking the client to repeat payment details.

Business clients who are invoiced will have an invoice record that includes the organization name, the project reference and the amount due. Invoice records are kept for the period required by tax rules, and they are stored separately from the stain log so the two kinds of record do not become mixed.

8. Technical and Device Data

The website is a set of static pages, and it does not run an analytics script that builds a profile of a visitor. The hosting provider keeps standard server logs that record an internet address, a browser type, the page requested and the time of the request. These logs are used to keep the site available and to investigate errors.

We do not use the server logs to identify an individual visitor, and we do not combine them with booking records. The logs are rotated on the schedule of the hosting provider, and older entries are deleted as part of that rotation.

The contact form does not transmit the message to a server. It prepares a message in the mail application on the visitor device, and the visitor decides whether to send it. That design means the site does not store form content, because the form never reaches a site database.

9. Cookies and Similar Technologies

The website does not set advertising cookies and does not run a tracking pixel. The site may rely on a small number of essential cookies set by the hosting provider for security and load balancing, and those cookies do not identify a visitor to the bench.

If a visitor arrives from a link that carries campaign parameters, the parameters appear in the server log as part of the requested address. They are not used to build a profile, and they are deleted with the rest of the log entries on the normal rotation.

A visitor can block or delete cookies in the browser settings. Blocking essential cookies may affect how the hosting provider serves the page, but it will not prevent a visitor from reading the content or from finding the contact details on the site.

10. How We Use Information

We use personal information to answer enquiries, arrange and deliver sessions, keep accurate records and meet legal obligations. Every use is connected to one of those purposes, and we do not sell personal information to any third party.

• To reply to a question sent by email, phone or the contact form.
• To plan a session, reserve a row on the bench and send preparation guidance.
• To keep stain notes, batch cards and pattern test sheets for quality purposes.
• To issue a care sheet and to follow up after a session when the client agrees.
• To prepare an invoice and keep accounting records for a business project.
• To investigate a complaint and to protect the safety of the bench and its clients.
• To improve the way the bench works, using aggregated notes that do not identify a person.

We do not use personal information for automated decision making. A booking is accepted or declined by a member of the team after reading the request, and there is no scoring system that decides the outcome.

11. Lawful Bases for Processing

Where a legal framework asks for a lawful basis, the bench relies on one of the following. Consent applies when a client agrees to receive a follow-up, to share a photograph or to join a small update list. Contract applies when a client books a session or engages the practice for a project. A legitimate interest applies when the bench keeps quality records, answers an enquiry or protects the studio from misuse.

A legal obligation applies when the bench must keep an invoice or respond to a lawful request from an authority. Where a client is a child and a parent or guardian is involved, consent is obtained from the parent or guardian for any use that goes beyond delivering the session.

When a client withdraws consent, the bench stops the related use. Records that were created before the withdrawal stay in place where a contract or a legal obligation requires them, and the client is told which records remain and why.

12. How We Share Information

We do not sell, rent or trade personal information. Sharing is limited to the situations described below, and each situation is connected to a clear purpose.

• With a payment provider to process a transaction and to issue a refund.
• With a hosting provider that stores the website files and keeps server logs.
• With an accountant or tax adviser who needs invoice records for the business.
• With a legal authority where the law requires disclosure or where a valid order is presented.
• With a client, when the client is the person who supplied the information.
• With a professional adviser where a dispute requires legal review.

Where information is shared with a service provider, the provider is asked to use it only for the stated purpose. The bench does not permit a provider to use client information for its own marketing, and the bench reviews the arrangement when a provider changes its terms.

If the practice is ever reorganised, sold or merged, client records may be transferred as part of that transaction. In that case, the receiving party must accept the commitments in this policy before the records are moved, and clients will be notified by email where an address is available.

13. Service Providers and Vendors

The bench works with a small number of vendors. A payment provider handles card transactions, a hosting provider serves the website, and an email provider carries ordinary correspondence. Each vendor is chosen for reliability and for a security record that matches the size of the studio.

Vendors receive the minimum information needed for their task. The payment provider receives the amount and the transaction reference, not the stain log. The hosting provider receives the site files and the standard server logs, not the session notes. The email provider carries the messages that a client chooses to send, and old messages are deleted on a regular schedule.

The bench does not use a vendor that requires client information to be used for advertising. Where a vendor processes information outside the United States, the transfer is covered by the vendor standard terms, and the client is told about the arrangement if the client asks.

14. Retention of Records

Records are kept only as long as they are useful or required. A general enquiry is deleted about eighteen months after the last reply, unless the enquiry leads to a booking. A booking record is kept for three years so that a returning client can be matched to an earlier session and so that a dispute can be reviewed.

A stain note is kept for the same three year period, because the value of the log comes from comparing seasons. A photograph shared with permission is kept until the permission is withdrawn or until the client asks for removal. An invoice record is kept for the period required by tax rules, which is normally seven years in the United States.

Practice records are kept for two years after the last session. A pattern stencil card and its test sheet are kept for as long as the pattern remains in the library, because a retired pattern is useful as a reference for the next design. When a record reaches the end of its period, it is deleted or destroyed in a way that prevents reconstruction.

15. How We Protect Information

The bench uses a combination of physical and digital safeguards. Paper notes are kept in a locked drawer, and the bench room is locked when it is unattended. Digital files are kept in a folder that requires a password and a second verification step, and the password is not written on a note near the bench.

Access to records is limited to the people who need it for their work. A member of the bench team who leaves the practice has access removed on the same day. A backup copy is kept so that a loss can be recovered, and the backup follows the same naming rule so that a stolen backup would not identify a client by itself.

No system is perfectly secure. If a breach affects personal information, the bench will investigate promptly, notify the affected clients without undue delay and report the matter to the appropriate authority where the law requires it. The notice will describe what happened, what information was involved and what steps the bench has taken.

16. Your Privacy Rights

A client has the right to know what information the bench holds, to receive a copy, to correct an error and to request deletion where the law allows. A client also has the right to object to a use that relies on a legitimate interest and to withdraw consent for a use that relies on consent.

To make a request, write to bookings@hennaarttasz.lat or call +16089053161. The bench will confirm the request, ask for enough detail to locate the record and reply within thirty days. If a request is complex, the bench will explain why more time is needed and will give a date for the reply.

There is no charge for a reasonable request, and the bench will not treat a client differently because a privacy request was made. If a request is refused, the bench will explain the reason and will point to the authority that can review the decision.

17. Requests to Access or Correct Records

An access request should identify the name used for the booking, the approximate date and the service involved. This helps the bench find the right drawer and the right digital folder without reading records that belong to someone else. The bench will not ask for a password or a payment card number as part of a privacy request.

A correction request should describe the error and the correct value. If the error is in a contact detail, the bench will update the booking record and confirm the change. If the error is in a stain note, the bench will add a correction note rather than overwrite the original, because the original is part of the technical record.

A deletion request is handled in two steps. First the bench identifies the records that can be removed, then it explains which records must stay because of tax, safety or dispute rules. The client receives a written summary of what was removed and what remains, and the remaining records are marked so that they are not used for any other purpose.

18. Privacy for Children

The bench does not knowingly collect information from a child under thirteen without a parent or guardian. A session for a child is arranged through the parent or guardian, and the booking record uses the adult contact details. The child name is kept only where it is needed to match the session to the correct care sheet.

If a parent discovers that a child has sent information through the site or by email without permission, the parent can ask the bench to delete it. The bench will remove the information promptly and will confirm the deletion. A photograph of a child is never used for any purpose beyond the session record, even with a general permission, unless the parent gives a separate and specific written agreement.

Practice hand sessions for learners under sixteen are supervised by a parent or guardian and are booked under the adult contact details. The practice record for a young learner is kept for one year only, unless the parent asks for a different period.

19. Sensitive Information and Health Notes

Henna work touches skin, so a session may involve a health related conversation. A client may mention an allergy, a skin condition or a recent sensitivity. The bench records only what is needed to apply the paste safely and to decide whether a test patch is required.

Health notes are kept in the booking record and are marked as limited access. They are not used for any other purpose, and they are not shared with a vendor. A client can ask to have the health note removed once the session is complete, and the bench will remove it where no safety reason requires it to stay.

The bench does not provide medical advice and does not diagnose a condition. If a client has a concern about skin, the bench will suggest that the client speak to a qualified health professional before the session. That suggestion is not a substitute for a medical opinion.

20. International Processing

The bench is based in Herriman, Utah, and most records stay in the United States. Some vendors operate servers in other countries, and an email that passes through a provider may be stored in more than one location. Where that happens, the vendor terms are reviewed to confirm that the information is protected.

A client who is outside the United States should understand that a message sent to the bench will be processed in the United States. The bench will answer questions about the location of a record and will use a vendor with a strong security record where the location matters to the client.

Where a legal framework requires a specific transfer mechanism, the bench relies on the standard terms offered by the vendor. A client can request a summary of the arrangement, and the bench will provide what it can without disclosing a confidential contract term.

21. Links to Other Sites

The website may link to another site for a reference or a convenience. The bench does not control that site and is not responsible for the way it handles information. A visitor who follows a link should read the privacy notice of the new site before sharing any detail.

A link does not mean that the bench endorses every practice of the linked site. If a link becomes outdated or points to a site that no longer suits the bench, the link is removed during the next review of the site content.

If a client reaches the bench through a third party platform, that platform keeps its own record. The bench cannot delete a record held by a platform, and a request to do so should be sent to the platform directly under its own notice.

22. Changes to This Policy

This policy is reviewed at least once a year and whenever the bench changes the way it handles records. When a change is material, the date at the top of the page is updated and a short note is added to the change record kept by the practice.

A client who has an active booking will be told about a material change by email where an address is available. A visitor who returns to the site can always read the current version on this page, and the version date makes it clear which text applies.

If a change reduces a protection that a client relied on, the bench will give notice before the change takes effect and will explain how the client can object. A client who does not agree with a change can ask to have the records handled under the earlier version where the law allows it.

23. How to Contact Us

Questions about this policy can be sent to the bench in any of the usual ways. The email address is bookings@hennaarttasz.lat and the phone number is +16089053161. Written messages can be sent to HennaArt by Tasz LLC, 6496 W Ipswitch Way, Herriman - 84096-3008, United States (US).

A message about privacy should include enough detail to identify the record and the relief that is wanted. The bench will acknowledge the message within two working days and will give a clear timeline for the reply. If a request concerns another person, the bench will not disclose that record.

If a client is not satisfied with the response, the bench will explain how to raise the matter with the appropriate authority in the state where the client lives. The bench would rather resolve a concern directly, and a short conversation often settles a question that a long email cannot.