Privacy Policy


Privacy Policy


Last modified: May 17, 2021


HC Salon Holdings, Inc. d/b/a Hair Cuttery Family of Brands (“Company,” “we” or “us”) respects your privacy and is committed to protecting it through our compliance with this policy.

This policy describes the types of information we may collect from you or that you may provide to us or to our affiliates when you use the “Digital Platforms” (as defined below) owned by us as well as those associated with or utilized by the brands we manage which include: Hair Cuttery and Bubbles Salons (collectively “Our Brands”).  This policy describes our practices for collecting, using, maintaining, protecting, and disclosing that information.

Digital Platforms include the following:

  • Our websites and those owned or operated by Our Brands.
  • Mobile and desktop applications offered by us or Our Brands.


  • Email and text messaging services between us or Our Brands and you.
  • Our advertising and applications on third-party websites and services, including our social media properties.
  • Information at collection points at retail stores operated by Our Brands (e.g. information you disclose face to face or through a kiosk to schedule a service at a salon, information you supply to access our wireless internet).

This policy does not apply to information collected by any third party other than Our Brands.

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Digital Platforms. By accessing or using our Digital Platforms, you agree to this privacy policy. This policy may change from time to time.  Our Digital Platforms may contain links non-affiliated websites. Any access to and use of such linked websites is not governed by this Policy, but instead is governed by the privacy policies of those websites. We are not responsible for the information practices of such un-affiliated websites.

Changes to Our Privacy Policy. Your continued use of our Digital Platforms after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

Privacy of Children

Our website is and the services offered are not intended for children.  Children under the age of 18 are not allowed to use our services, and we do not knowingly collect information from children under the age of 18.  If we learn or have reason to suspect that a user is under age 18, we will promptly delete any personal information in that user’s account. Please contact us at or (703) 269-5336 if you have concerns regarding the potential collection of your child’s information.


Information We Collect About You and How We Collect It

We collect several types of information from and about users of our Digital Platforms, including information:

  • By which you may be personally identified, such as name, postal address, e-mail address, telephone number, date of birth or any other identifier by which you may be contacted online or offline;
  • that is about you but individually does not identify you, such as your personal preferences for salon services or products, your age, gender, interests or your location when you access and use certain Digital Platforms (when you enable those features on your device) and information about the websites you visit; and/or
  • About your internet connection, the equipment you use to access our Digital Platforms and usage details.

We collect this information:

  • Directly from you when you provide it to us.
  • Automatically as you navigate through the site. Information collected automatically may include usage details, IP addresses, and information collected through cookies, web beacons, pixel tags and other tracking technologies.
  • From other sources, for example, our business partners, service providers and social media platform operators.

Information You Provide to Us.  The information we collect on or through our Digital Platforms may include:

  • Information that you provide by filling in forms on Digital Platforms. This includes information provided at the time of registering to use our Digital Platforms, subscribing to our services or our social media feeds, entering into promotions/sweepstakes/contests/rewards programs, posting material on our Digital Platforms, providing us with feedback, checking-in to an appointment, obtaining products or services through Digital Platforms at Our Brands’ retail outlets. We may also ask you for information when you report a problem with our Digital Platforms.
  • Records and copies of your correspondence (including e-mail addresses), if you contact us.
  • Your responses to surveys that we might ask you to complete for research purposes, such as for customer satisfaction and market research.
  • Details of transactions you carry out through our Digital Platforms and of the fulfillment of your orders. You may be required to provide financial information before placing an order through our Digital Platforms.
  • You also may provide information to be published or displayed (hereinafter, “posted”) on public areas of the Digital Platforms, or transmitted to other users of the Digital Platforms or other parties (collectively, “User Contributions”). Your User Contributions are posted on and transmitted to others at your own risk. Although we limit access to certain pages, please be aware that no security measures are perfect or impenetrable. Additionally, we cannot control the actions of other users of the Digital Platforms with whom your User Contributions may be shared with. Therefore, we cannot and do not guarantee that your User Contributions will not be viewed by unauthorized persons.

Information We Collect Through Automatic Data Collection Technologies.  As you navigate through and interact with our Digital Platforms, we may use automatic data collection technologies to collect certain information about your equipment, mobile device, browsing and use actions, and patterns, including:

  • Details of your visits to our Digital Platforms, including traffic data, location data, pages you view and links you access, logs, and other communication data and the resources that you access and use on the Digital Platforms.
  • Information about your computer, mobile device and internet connection, including your IP address, device identifiers, operating system, geolocation, and browser type.

We also may use these technologies to collect information about your online activities over time but we do not collect information across third-party websites or other online services (behavioral tracking).

We may maintain the information we automatically collect or associate it with other personal information we collect about you or receive from third parties. It helps us to improve our Digital Platforms to deliver a better and more personalized service, and to better market our services, including by enabling us to:

  • Estimate our audience size and usage patterns.


  • Store information about your preferences, allowing us to customize our Digital Platforms according to your individual interests.
  • Speed up your searches.
  • Recognize you when you return to our Digital Platforms.


  • Recommend retail locations that are near your location and to help us market our services (if you have permitted us to collect information about your device’s location).

The technologies we use for this automatic data collection may include:

  • Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer or mobile device. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of our Digital Platforms. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Digital Platforms.
  • Flash Cookies. Certain features of our Digital Platforms may use local stored objects (or Flash cookies) to collect and store information about your preferences and navigation to, from, and on our Digital Platforms. Flash cookies are not managed by the same browser settings as are used for browser cookies. For information about managing your privacy and security settings for Flash cookies, see Choices About How We Use and Disclose Your Information.
  • Web Beacons. Pages of our the Digital Platforms may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count users who have visited those pages and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity). We and our service providers also use web beacons in HTML emails to help us track email response rates, identify when our emails are viewed, and track whether our emails are forwarded.

Third-Party Use of Cookies and Other Tracking Technologies

Some content or applications, including advertisements, on the Digital Platforms are served by parties not affiliated with us, including advertisers, ad networks and servers, content providers, and application providers. These parties may use cookies alone or in conjunction with web beacons or other tracking technologies to collect information about you when you use our Digital Platforms. The information they collect may be associated with your personal information or they may collect information, including personal information, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.

We do not control these parties’ tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly. For information about how you can opt out of receiving targeted advertising from many providers, see the Choices About How We Use and Disclose Your Information section below.


How We Use Your Information

We use information that we collect about you or that you provide to us, including any personal information:

  • To present our Digital Platforms and its contents to you.
  • To provide you with information, products, or services that you request from us and to otherwise respond to your inquiries.
  • To fulfill any other purpose for which you provide it.
  • To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
  • To notify you about changes to our Digital Platforms or any products or services we offer or provide.


  • Once you opt-in, to send you SMS regarding transactional or other marketing information about our products and services.
  • To allow you to participate in interactive features on our Digital Platforms.
  • To better understand how users access and use our Digital Platforms, both on an aggregated and individualized basis for product improvement, research, and analytics purposes. For example, we will evaluate which features of our Digital Platforms are more (or least) used by users, and we will use this information to improve our offerings.


  • In any other way we may describe when you provide the information.
  • For any other purpose with your consent.


  • To comply with legal obligations, as part of our general business operations, and for other business administration purposes.


  • Where necessary to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person or property or violations of our Terms of Use or this Policy.


  • To provide appointment confirmations, reminders and notes of thanks.

We may also use your information to contact you and serve advertisements to you about: 1) our own (and Our Brands’) goods and services; 2) our affiliates goods and services; and 3) about the goods and services of other entities that we think may be of interest to you. 


Disclosure of Your Information

We may disclose aggregated and anonymized information about our users, and information that does not identify any individual, without restriction.

We may disclose personally identifiable information that we collect as described in this privacy policy:


  • To our subsidiaries and affiliates for their use subject to the terms of this privacy policy.
  • To contractors, service providers, and other third parties we use to support our business so that they can provide services to us and Our Brands.


  • If (i) we or our affiliates are, or may be, acquired by, merged with, or invested in by another company, or (ii) if any of our assets are, or may be, sold or transferred to another company, whether as part of a bankruptcy, restructuring, reorganization, or insolvency proceeding or otherwise, we may transfer the information we have collected about you to the other company. As part of the business transfer process, we may share certain of your personal information with lenders, auditors, and advisors, including attorneys and consultants.
  • To fulfill the purpose for which you provide it. For example, if you share or submit your photo to our Lookbook, you photo may be shared publicly on our Digital Platforms.
  • For any other purpose disclosed by us when you provide the information.
  • With your consent.

We may also disclose your personal information:

  • To comply with any court order, law, or legal process, including to respond to any government, regulatory, or law enforcement request.
  • To enforce or apply our terms of use, any terms of sale and product return policies, and other agreements between you and us, including for billing and collection purposes.
  • If we believe disclosure is necessary or appropriate to protect our or Our Brands rights, property, or the safety our customers, employees, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

Choices About How We Use and Disclose Your Information

We strive to provide you with choices regarding the personal information you provide to us. We have created mechanisms to provide you with the following control over your information:


  • Tracking Technologies and Advertising. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. To learn how you can manage your Flash cookie settings, visit the Adobe Flash Player Help Page, choose “Global Storage Settings Panel” and follow the instructions. If you disable or refuse cookies, please note that some parts of the Digital Platforms may then be inaccessible or not function properly.


We may disclose certain information (such as your email address) to Facebook Custom Audiences (for more information on Facebook Custom Audience go here or to opt-out, go to the Facebook ad preferences page)—so that we can better target ads and content to you and others with similar interests on other websites or media (“Custom Audiences”). We may also work with other ad networks and marketing platforms that enable us and other participants to target ads to Custom Audiences submitted by us and others. You may also control how Facebook and other ad networks display certain ads to you, as explained further in their respective privacy policies or by using the opt-outs described below.


Users may opt out of many ad networks. For example, you may go to the Digital Advertising Alliance ("DAA") Consumer Choice Page for information about opting out of interest-based advertising and their choices regarding having information used by DAA companies. You may also go to the Network Advertising Initiative ("NAI") Consumer Opt-Out Page for information about opting out of interest-based advertising and their choices regarding having information used by NAI members.


Opting out from one or more companies listed on the DAA Consumer Choice Page or the NAI Consumer Opt-Out Page will opt you out from those companies' delivery of interest-based content or ads to you, but it does not mean you will no longer receive any advertising through our site, services, or on other websites. You may continue to receive advertisements, for example, based on the particular website that you are viewing (i.e., contextually based ads). Also, if your browsers are configured to reject cookies when you opt out on the DAA or NAI websites, your opt out may not be effective. Additional information is available on the DAA's website at or the NAI's website at


We also utilize Google Analytics evaluate usage of our Digital Platforms, including to help us improve our Digital Platforms’ performance and user experiences. To learn more about Google’s privacy practices, please review the Google Privacy Policy at You can also download the Google Analytics Opt-out Browser Add-on to prevent their data from being used by Google Analytics at


  • Do Not Track. Currently, our systems do not recognize browser “do-not-track” requests. You may, however, disable certain tracking as discussed above.


  • Promotional Offers from the Company. If you do not wish to receive text communications or promotional emails from us or Our Brands you can opt out of receiving those communications by following the “unsubscribe” links provided in messages you receive. If no such links are provided you can opt out of receiving further messages by contacting us at via the methods provided in the contact information section below.


Data Security

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Digital Platforms, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. We urge you to be careful about giving out information in public areas of the Digital Platforms like message boards or blogs. The information you share in public areas may be viewed by any user of the Digital Platforms.

Unfortunately, the transmission of information via the internet is not completely secure. Although we use commercially reasonable efforts to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Digital Platforms. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Digital Platforms.


When personal information (such as a credit card number) is transmitted to other websites, it is protected through the use of encryption, such as the Secure Sockets Layer (SSL) protocol.

SMS Marketing


We may offer a subscription to a short message service program to be sent to your mobile phone.

You may voluntarily opt-in yourself in our text message alert program.  Once you subscribe to it, you will be enrolled in a “mailing list” and may receive text messages sent to your mobile phone. Message frequency varies.  By your subscription to the text message program you give your consent to us to deliver text messages to the cell phone number to which you have provided to us.  We do not charge for this service. The message and data rates will apply as per terms and conditions of your mobile carrier. If you are providing your consent to participate in this program, you approve any such charges from your mobile carrier.  Consent is not a condition of purchase.  Once activated, you may reply “HELP” to receive a help message with description of commands.  Once activated, if you want to cancel your subscription to the program please reply “STOP” to any SMS you receive from us. Once you decide to opt-out, you will receive a final message confirming that you are unsubscribed and no additional SMS will be sent unless you decide to reactivate your subscription.  Once activated, we reserve the right to terminate our SMS service program, in whole or in part, at any time without notice.




Our Digital Platforms may contain links non-affiliated websites. Any access to and use of such linked websites is not governed by this Policy, but instead is governed by the privacy policies of those websites. We are not responsible for the information practices of such un-affiliated websites.


Changes to Our Privacy Policy

It is our policy to post any changes we make to our privacy policy on this page.  The date the privacy policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our Digital Platforms and this privacy policy to check for any changes.



Under the California Consumer Privacy Act (“CCPA”), we are required to notify California consumers about our collection, use, and disclosure of their personal information (whether collected through this website or offline). In this section of our Policy, and in accordance with the CCPA, “personal information” includes any information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household, including the categories identified in the table below to the extent they identify, relate to, describe, are capable of being associated with, or could be reasonably linked, directly or indirectly, with a particular consumer or household.


Categories of Personal Information that We Collect, Disclose, and Sell


Below please find the categories of personal information about California residents that we collect, sell, and/or disclose to third parties or service providers for a business purpose.


Categories of personal information
Last Updated: [March 16, 2021]

Do we collect?

Do we disclose for business purpose?

Do we sell?

NAME, CONTACT INFORMATION AND IDENTIFIERS: Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.




CUSTOMER RECORDS: Paper and electronic customer records containing personal information, such as name, signature, social security number, Signature, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, , employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.




PROTECTED CLASSIFICATIONS: Characteristics of protected classifications under California or federal law such as race, color, sex, age, religion, national origin, disability, citizenship status, and genetic information.




PURCHASE HISTORY AND TENDENCIES: Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.




BIOMETRIC INFORMATION: physiological, biological or behavioral characteristics that can be used alone or in combination with each other to establish individual identity, including DNA, imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information.




USAGE DATA: Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a resident’s interaction with an internet website, application, or advertisement.




GEOLOCATION DATA: Precise geographic location information about a particular individual or device




AUDIO/VISUAL: Audio, electronic, visual, thermal, olfactory, or similar information.




EMPLOYMENT HISTORY: Professional or employment-related information.




EDUCATION INFORMATION: Information that is not publicly available personally identifiable information as defined in the federal Family Educational Rights and Privacy Act (20 U.S.C. section 1232g, 34 C.F.R. Part 99).




PROFILES AND INFERENCES: Inferences drawn from any of the information identified above to create a profile about a resident reflecting the resident’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.





Purposes for Collecting and Using Personal Information


Generally, we may use the above categories of personal information for the following purposes:


  • To provide our services to you and to fulfill your orders.
  • To communicate with you about your use of our services, to respond to your inquiries, and for other customer service purposes.
  • To tailor the content and information that we may send or display to you, to offer location customization, and personalized help and instructions, and to otherwise personalize your experiences while using the services.
  • To send you email marketing about our products and services.
  • To send you news and newsletters.
  • To send you email marketing about products and services of our affiliated entities.
  • To assist us in advertising on third-party websites, mobile apps, and other online services, and to evaluate the success of our advertising campaigns through third-party channels (including our online targeted advertising and offline promotional campaigns).
  • To better understand how users access and use our services, both on an aggregated and individualized basis. For example, we will evaluate which features of our site are more (or least) used by users, and we will use this information.
  • To conduct internal analysis of outreach and marketing efforts, as well as for market research or member satisfaction purposes.
  • To comply with legal obligations, as part of our general business operations, and for other business administration purposes.
  • Where we believe necessary to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person or violations of our Terms of Service or this Privacy Policy.


We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:


  • Where we need to perform the contract we are about to enter into or have entered into with you.
  • Where we need to comply with a legal or regulatory obligation.
  • Where it is in our legitimate interests, including our commercial interests in operating our customer facing Digital Platforms. We make sure that we consider and balance any potential negative impact on you and your rights before we process your personal data.


California Residents’ Rights

California law grants California residents certain rights and imposes restrictions on particular business practices as set forth below. California consumers have the right to request that we disclose what personal information we collect, use, disclose, and sell about you.


  • Do-Not-Sell.  California residents have the right to opt-out of our sale of their personal information.  We do not sell personal information about residents who we know are younger than 16 years old without opt-in consent.
  • Verifiable Requests for Copy, Deletion and Right to Know. Subject to certain exceptions, California consumers have the right to make the following requests, at no charge, up to twice every 12 months.


Please see ‘Submitting Requests’ below for instructions about how to exercise your rights:


Deletion: The right to request deletion of their personal information that we have collected about them, subject to certain exemptions, and to have such personal information deleted, except where necessary that we maintain such personal information in order to:


  • Complete the transaction for which the personal information was collected, provide a good or service requested by the consumer, or reasonably anticipated within the context of a business’s ongoing business relationship with the consumer, or otherwise perform a contract between the business and the consumer.
  • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity.
  • Debug to identify and repair errors that impair existing intended functionality.
  • Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law.
  • Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code.
  • Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the businesses’ deletion of the information is likely to render impossible or seriously impair the achievement of such research, if the consumer has provided informed consent.
  • Enable solely internal uses that are reasonably aligned with the expectations of the consumer based on the consumer’s relationship with the business.
  • Comply with a legal obligation.
  • Otherwise use the consumer’s personal information, internally, in a lawful manner that is compatible with the context in which the consumer provided the information.


Copy: The right to request a copy of the specific pieces of personal information that we have collected about them in the prior 12 months.


Right to Know (Collection): Where we have collected their personal information, the right to request that we disclose certain information about how we have handled their personal information in the prior 12 months, including: the categories of personal information collected; categories of sources of personal information; business and/or commercial purposes for collecting and selling their personal information; and the categories of third parties/with whom we have disclosed or shared their personal information.


Right to Know (Disclosure and Sale): Where we have sold or disclosed for a business purpose their personal information, the right to request that we disclose certain information about how we have handled their personal information in the prior 12 months, including: the categories of personal information collected; categories of third parties to whom the consumer’s personal information has been sold and the specific categories of personal information sold to each category of third party; categories of third parties to whom personal information has been disclosed; and the categories personal information that we have disclosed or shared with a third party for a business purpose.


Submitting Requests. You may exercise your rights by doing one of the:



We will respond to your Copy and Right to Know requests within 45 days, unless additional time (up to 45 more days) is needed, in which case we will let you know.


When you submit your request, we will take steps to attempt to verify your identity. We will seek to match the information in your request to the personal information we maintain about you. As part of our verification process, we may ask you to submit additional information, use identity verification services to assist us, or if you have set up an account on our website, we may ask you to sign in to your account as part of our identity verification process. Please understand that, depending on the type of request you submit, to protect the privacy and security of your personal information, we will only complete your request when we are satisfied that we have verified your identity to a reasonable degree of certainty.


Authorized Agents. The CCPA allows California consumers to designate an authorized agent to exercise their rights under CCPA. 


Incentives and DiscriminationThe CCPA prohibits discrimination against California residents for exercising their rights under the CCPA and imposes requirements on any financial incentives offered to California residents related to their personal information. 


Discrimination: If consumers exercise their rights under CCPA, businesses may not discriminate against them including by denying or providing a different level or quality of goods or services or charging or suggesting that a business will charge different prices or rates or impose penalties, unless doing so is reasonably related to the value provided to the consumer by the consumer’s data.


Disclosure of Incentives: If businesses offer any financial incentives for the collection, sale or deletion of their personal information, residents have the right to be notified of any financial incentives offers and their material terms, the right not be included in such offers without prior informed opt-in consent, and the right to be able to opt-out of such offers at any time. Businesses may not offer unjust, unreasonable, coercive or usurious financial incentives. We do not offer any incentives at this time.


California Privacy Rights under California’s Shine-the-Light Law

Under California’s “Shine the Light” law (Cal. Civ. Code § 1798.83), California residents who provide us certain personal information are entitled to request and obtain from us, free of charge, information about the personal information (if any) we have shared with third parties for their own direct marketing use.  Such requests may be made once per calendar year for information about any relevant third party sharing in the prior calendar year. California residents who would like to make such a request may submit a request in writing to The request should attest to the fact that the requester is a California resident, and provide a current California address.  


California Privacy Rights Statistics

Businesses subject to CCPA who process the personal information of 4 million California consumers are required to make available certain statistical information about the number of privacy rights requests they receive.


Contact Information


To ask questions or comment about this privacy policy and our privacy practices, contact us at:

HC Salon Holdings, Inc.

8281 Greensboro Drive, Suite 320

McLean, Virginia  22102

Attn: Legal - Privacy

In addition, you can call the Guest and People Care Center at (703) 269-5336 or contact us using the “Contact Us” methods available on our Digital Platforms.