Privacy Policy
Last updated: August 29, 2026
Who we are
TLC Nails and Esthetics is a private nail and esthetics suite at 9706 Belair Rd, Nottingham, MD 21236, run by Thiara. This policy covers the website at tlcnailsandesthetics.com. When it says "we" or "us," it means TLC Nails and Esthetics. When it says "you," it means anyone who visits the site, books an appointment, or sends a message.
The short version: we collect what you type into the contact form, plus the standard analytics a website records, and we use it to answer you and book your appointment. We don't sell your personal information.
What we collect
What you give us. When you send the contact form, you choose what to share: usually your name, phone number, email, and what service you are asking about. You never have to use the form; you can call or text instead.
What is collected automatically. Like nearly every website, ours records some technical data when a page loads: IP address, browser and device type, pages viewed, and the site or search that sent you here. This is aggregate and practical, not surveillance.
The tools we use
We'd rather name the tools than hide behind "third-party service providers." Each runs under its own privacy policy.
- Acuity Scheduling runs the booking calendar. The booking panel only loads after you choose a service, and the details you enter are stored in Acuity so your appointment exists.
- Google Analytics 4 and Google Tag Manager measure how people find and move through the site. They follow Google Consent Mode: in California, Canada, the UK, and the EEA they are off by default until you accept the cookie banner; elsewhere in the United States they are on by default and declining turns them off.
- Microsoft Clarity doesn't load at all until you press Accept on the cookie banner. If you accept, it shows us anonymized heatmaps and session replays so we can see where a page confuses people, and it masks anything you type into a form before it leaves your browser. If you never accept, Clarity never runs.
- Ahrefs Web Analytics counts visits. It's cookieless and doesn't identify you.
- Resend delivers the email when you submit the contact form, so your message reaches Thiara and you get a confirmation.
- Cloudflare Turnstile protects the form from spam bots. It's a security tool, not a tracker.
- Netlify hosts the site and keeps a backup copy of form submissions so a message is never lost.
Cookies and your choice
The first time you visit, a banner asks whether you accept analytics cookies. Nothing here requires you to accept, and booking and the contact form work exactly the same if you decline. You can change your answer at any time with the button below, and you can also block or delete cookies in your browser settings.
How long we keep information
Messages and booking details are kept as long as we need them to serve you and keep ordinary business records, then deleted. Analytics data is kept in aggregate.
Your rights
You can ask us what information we have about you, ask us to correct it, or ask us to delete it. Call or text (347) 879-2075 and we'll handle it. California residents have these rights under the CCPA and CPRA, including the right to opt out of the sale or sharing of personal information. We don't sell your personal information, and declining the cookie banner turns off the only optional tracking on this site. We won't treat you differently for exercising any of these rights.
Children
The site isn't directed at children under 13, and we don't knowingly collect their information. Appointments for minors are made by a parent or guardian.
Changes
If this policy changes, we'll update the date at the top of this page. The ground rules for using the site itself live in the terms of service.