Privacy Policy
This Privacy Policy describes how Kija Hair Salon ("we," "us," or "our") collects, uses, and shares your personal information when you visit or make a purchase from KijaHairSalon.com (the "Site") or shop with us in person. This policy is effective as of November 1, 2026 and follows the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).
Personal Information We Collect
We collect personal information in the following ways:
Online Store (Shopify): When you place an order on our Site, we collect your name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number ("Order Information").
Customer Accounts: If you sign in to your account to view orders, track shipments, reorder, or request a return, we use your email address to verify your identity with a one-time code. If you choose to sign in with Shop or Google instead, that service confirms your identity to us.
In-Person (Shopify Point of Sale): When you make a purchase in our salon, we collect your name, payment information, and transaction details through Shopify Point of Sale.
Device Information: When you browse our Site, we automatically collect information about your device including your IP address, web browser, time zone, referring/exit pages, and cookies or similar tracking technologies.
Communications: If you contact us or sign up for email or SMS marketing, we collect your email address or phone number and any information you provide.
Kija Assistant (website chat): Kija Assistant is an automated assistant, not a person. When you use it, we keep the messages you type, the buttons you tap, the page you were on, the site that referred you, and a random chat ID. For security and to understand how the chat is used, we also record your IP address, your approximate location (country and nearest large city, based on your network), your time zone and language setting, your device and browser type, your screen size, whether you have used the chat before on this device, and, if you are signed in to your account, your account email address. Email addresses, phone numbers, and order numbers you type in messages are removed from the chat log automatically. If you ask the salon to contact you, the details you enter (such as your name, email address, phone number, order number, and message) are sent to the salon by email and text message and kept in our request list so we can reply. The chat keeps your conversation in your browser for 30 minutes after your last message; tap Start a new chat to clear it sooner. We use this information only to answer your requests, keep the chat secure, and improve the assistant. The questions you type (with emails and phone numbers removed) are sent to an AI service, Anthropic’s Claude through Cloudflare, which writes the reply using only Kija’s own information; if the AI service is unavailable, the assistant’s built-in answers reply instead. These providers process it only to answer, and Anthropic does not use it to train its models. AI answers are labeled in the chat. The assistant also notices technical problems on our pages, such as a broken link, a missing image, or a page error, and records the problem, the page, and your browser and device type so we can fix it. These reports do not include anything you type. Back-in-stock requests: we keep your email and the product you asked about until we send the one-time notice, or for up to 6 months. The email is sent through Resend. Please do not enter payment card numbers or passwords in the chat.
We collect Device Information using the following technologies:
- Cookies — data files placed on your device that often include a unique anonymous identifier. You can disable cookies at https://www.allaboutcookies.org.
- Log files — track actions on the Site including your IP address, browser type, internet service provider, referring/exit pages, and date/time stamps.
- Web beacons, tags, and pixels — electronic files used to record how you browse the Site.
How We Use Your Information
We use your Order Information to fulfill purchases (process payments, arrange shipping, send invoices and order confirmations), communicate with you, screen for potential risk or fraud, and — where you have given consent — send you marketing communications about our products and services.
We use Device Information to screen for fraud, improve and optimize our Site, and assess the performance of our marketing campaigns.
We do not use automated decision-making technology that produces significant decisions about you without human review.
Sharing Your Personal Information
We share your personal information only with the third-party service providers necessary to operate our business. We do not sell your personal information for money.
Shopify — powers our online store and in-salon point of sale, and processes orders, payments, and customer data. Shopify may also use store data to improve its services, as described in its privacy policy: https://www.shopify.com/legal/privacy
Judge.me — collects and displays customer product and store reviews. When you place an order, we may share your name, email address, and order details so Judge.me can send you a review request. Privacy policy: https://judge.me/privacy
Google Customer Reviews — after an online purchase, you may be offered an optional survey from Google. Only if you opt in, we share your email address, order number, delivery country, and estimated delivery date with Google so it can send you the survey. Privacy policy: https://policies.google.com/privacy
Google Analytics — helps us understand how customers use the Site. Privacy policy: https://policies.google.com/privacy. Opt out: https://tools.google.com/dlpage/gaoptout
Google Business Profile — we sync public customer reviews between our Google Business Profile and our review platform. Only information you have chosen to make public in your review is shared. Privacy policy: https://policies.google.com/privacy
Google Workspace — stores Kija Assistant chat messages and contact requests for us, and delivers contact requests to the salon by email. Privacy policy: https://policies.google.com/privacy
Verizon Wireless and Google Voice — deliver short text alerts of Kija Assistant contact requests (your name, contact details, and request) to the salon owner's phone. Privacy policies: https://www.verizon.com/about/privacy/ and https://policies.google.com/privacy
Anthropic and Cloudflare — questions typed into Kija Assistant (with emails and phone numbers removed) are processed to write the reply from Kija’s own information. Privacy policies: https://www.anthropic.com/legal/privacy and https://www.cloudflare.com/privacypolicy/
Resend — sends the one-time back-in-stock email you ask for (your email address and the product). Privacy policy: https://resend.com/legal/privacy-policy
We may also disclose your personal information to comply with applicable laws, respond to a subpoena or lawful government request, or to protect our rights.
Behavioral Advertising
We may use your personal information to provide targeted advertisements we believe may be of interest to you. You can opt out through our Your Privacy Choices page, or directly with each platform:
- Meta (Facebook and Instagram): https://www.facebook.com/settings/?tab=ads
- Google: https://adssettings.google.com/
- Digital Advertising Alliance opt-out portal: https://optout.aboutads.info/
Your California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the following rights under the CCPA, as amended by the CPRA:
- Right to Know — You may request information about what personal information we collect, use, disclose, and retain about you, including the specific pieces of personal information we have collected.
- Right to Delete — You may request that we delete personal information we have collected from you, subject to certain exceptions.
- Right to Correct — You may request that we correct inaccurate personal information we hold about you.
- Right to Opt Out of Sale or Sharing — We do not sell your personal information for money. Like most online stores, we use advertising and analytics tools that may be considered "sharing" under California law. You can opt out at any time on our Your Privacy Choices page.
- Right to Limit Use of Sensitive Personal Information — We do not use sensitive personal information beyond what is necessary to fulfill your orders.
- Right to Non-Discrimination — We will not discriminate against you for exercising any of your privacy rights.
To exercise any of these rights, contact us using the details in the Contact Us section below. We will verify your identity before responding, which may require confirming information already associated with your account or order. You may also designate an authorized agent to submit a request on your behalf. We aim to respond to verified requests within 45 days.
Notice of Financial Incentive
We offer 10% off your first online order (our welcome offer) when you sign up for our marketing emails through a sign-up form on our Site or through Kija Assistant. To join, we collect your email address, and our email service records how you interact with our emails, such as opens and clicks.
We believe the welcome offer is reasonably related to the value of your information to us. We estimate that value to be about equal to the discount, based on the expected benefit of sending marketing emails to subscribers and our cost of providing the offer. Joining is optional. You can unsubscribe at any time using the link in any marketing email or by contacting us using the details below; unsubscribing does not affect a discount you have already used.
Data Retention
We retain your Order Information for as long as necessary to fulfill the purposes described in this policy, and to meet our tax, accounting, and other legal recordkeeping obligations. You may request deletion of your personal information at any time using the contact details below.
Do Not Track
We do not alter our Site's data collection practices in response to Do Not Track signals from your browser. We do honor Global Privacy Control (GPC) signals as a valid request to opt out of the sale or sharing of your personal information.
Data Security
We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Payment information is processed securely through Shopify, which is PCI DSS compliant. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Minors
The Site is not directed to children, and we do not knowingly collect personal information from anyone under the age of 16. Our SMS marketing program is separately restricted to participants aged 18 and older, as described in our Terms of Service. If you believe we have collected information from a child under 16, please contact us immediately and we will delete it.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated policy will be posted on this page with a revised effective date. Continued use of the Site after any changes constitutes your acceptance of the updated policy.
Contact Us
For any questions, concerns, or privacy rights requests, contact us at:
Kija Hair Salon
13925 Yale Ave., Suite 150
Irvine, CA 92620
Email: support@kijahairsalon.com
Phone: (949) 551-6693
You may also reach us through our Contact page.