PRIVACY POLICY

Lightspeed POS–Integrated

Last Updated: [Insert Date]

This Privacy Policy describes how Uptown Luxe & Leisure (“Company,” “we,” “us,” “our”) collects, uses, stores, and protects personal information from customers and visitors through our website, in-store services, and point-of-sale systems, including Lightspeed (“Services”).

By using our website, making a purchase, booking an appointment, or interacting with us in-store or online, you agree to this Privacy Policy.

1. INFORMATION WE COLLECT

A. Information You Provide Directly

We collect personal information you voluntarily provide, including:

• Name
• Email address
• Phone number
• Billing and shipping address
• Purchase history and transaction details
• Appointment or styling preferences
• Custom or personalization details
• Reviews, feedback, and communications

This information may be collected in-store via Lightspeed POS, through our website, or through direct communication.

B. Information Collected Automatically

When you visit our website or interact with digital services, we may collect:

• IP address
• Browser type and device data
• Pages viewed and interaction data
• Cookies and similar tracking technologies

2. HOW WE USE YOUR INFORMATION

We use personal data to:

• Process in-store and online transactions through Lightspeed POS
• Manage customer accounts, receipts, and purchase history
• Fulfill orders, shipping, and returns
• Provide customer support and styling services
• Communicate about purchases, promotions, or updates (with consent)
• Improve store operations and customer experience
• Prevent fraud and ensure transaction security
• Comply with legal, accounting, and tax obligations

3. LIGHTSPEED POS DATA PROCESSING

We use Lightspeed POS to process sales and manage customer information.

Lightspeed may process personal data on our behalf, including:

• Transaction records
• Customer contact details
• Purchase history
• Inventory and receipt data

Lightspeed acts as a data processor, while Uptown Luxe & Leisure remains the data controller. Lightspeed processes data in accordance with its own privacy and security standards.

4. LEGAL BASIS FOR PROCESSING (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process personal data under the following lawful bases:

• Contractual necessity (processing purchases and services)
• Consent (marketing communications, cookies)
• Legal obligations (tax and recordkeeping requirements)
• Legitimate interests (business operations, fraud prevention, service improvement)

5. DATA SHARING & THIRD PARTIES

We do not sell personal information.

We may share data only with trusted third parties necessary to operate our business, including:

• Lightspeed POS
• Payment processors
• Shipping and fulfillment providers
• Email and marketing platforms (with consent)
• Accounting, tax, or legal service providers
• Authorities when required by law

All third parties are required to safeguard your information and use it only for authorized purposes.

6. DATA RETENTION

We retain personal data only as long as necessary to:

• Complete transactions and services
• Maintain accurate business and tax records
• Comply with legal obligations
• Resolve disputes and enforce agreements

When data is no longer required, it is securely deleted or anonymized.

7. DATA SECURITY

We use reasonable administrative, technical, and physical safeguards to protect personal information, including:

• Secure POS systems
• Encrypted payment processing
• Restricted access to customer data

Despite safeguards, no system can be guaranteed 100% secure.

8. YOUR PRIVACY RIGHTS

Depending on your location, you may have the right to:

• Access your personal information
• Correct inaccurate or incomplete data
• Request deletion of your data
• Restrict or object to data processing
• Withdraw consent at any time
• Request data portability

GDPR Rights (EEA/UK)

You may also lodge a complaint with your local data protection authority.

Requests can be made using the contact details below. Identity verification may be required.

9. COOKIES & TRACKING

Our website uses cookies to:

• Enable core site functionality
• Analyze traffic and usage
• Improve performance and experience

You can manage cookie preferences through your browser settings.

10. CHILDREN’S PRIVACY

Our Services are not intended for children under 13. We do not knowingly collect personal data from children.

11. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy at any time.

• Updates will be posted on this page
• Continued use of our Services constitutes acceptance of the updated policy

12. CONTACT INFORMATION

For privacy questions, GDPR requests, or data concerns, contact:

Uptown Luxe & Leisure

Uptownluxeleisure@gmail.com

1-423-674-2072

216 1st St NE Cleveland, Tennessee, USA 37311