Privacy Policy

Effective August 24, 2026

Lisa Leming ("we," "our," or "us") respects your privacy. This policy explains how we collect, use, disclose, and protect personal information through lisaleming.com, the client portal at lisaleming.app, and related email and text communications.

Information we collect

Information you provide. When you request a quote, use the client portal, or contact us, we may collect your name, email address, phone number, preferred contact method, event type, event date and time, event or getting-ready location, requested services, party size, referral source, notes, and your consent choices. We also collect service selections, quote acceptances, contract and invoice activity, and other information you submit during the booking and client-service process. If you communicate with us by email or text, we receive the contents of those communications.

Address-search information. When you use the address suggestions in the inquiry form, the text you enter, a place identifier, or a ZIP code may be sent through our booking system to Google Places to return matching locations.

Contracts and electronic signatures. When you electronically sign a contract, we collect the signer's name, signature, date and time of signing, and IP address. We retain this information with the signed contract and generate a PDF record that includes the signing details.

Payments. When you pay an invoice, our payment processor collects the payment information needed to complete the transaction. We receive transaction records such as the amount, status, date, and payment reference, but we do not receive your full payment-card number.

Email activity. Emails sent through our client system may use a small tracking image or similar technology to record whether and when an email is opened. That activity is associated with the relevant client and communication.

Service photographs. During trials and services we may take photographs to record makeup and hair details for your appointment. These are stored privately with your client record and are not published unless you give permission.

Technical and security information. Our website host, security tools, and server may automatically process information such as your IP address, browser and device type, operating system, referring page, pages requested, date and time, and security signals. We use this information to deliver the site, diagnose problems, prevent spam and abuse, and maintain security.

Please do not include highly sensitive information, such as government identification numbers, financial account details, or medical information, in an inquiry or message. Payment information is not collected through the website inquiry form.

How we use information

Respond to inquiries, check availability, prepare quotes, and provide requested services

Provide brochures, record service selections, prepare and administer quotes, contracts, invoices, and payments

Communicate about appointments, bookings, and client service, and understand whether an important client email was opened

Operate, maintain, secure, and improve the website and inquiry process

Prevent fraud, spam, misuse, and other security threats

Maintain business records and comply with legal, tax, accounting, and contractual obligations

How we disclose information

We disclose personal information only as reasonably needed for the purposes described above:

Service providers. Website and application hosting, customer relationship and booking systems, email and communications providers, electronic-signature and document generation tools, private file storage, payment processing, and other vendors that support our business

Security and spam prevention. Cloudflare Turnstile (https://www.cloudflare.com/turnstile-privacy-policy/) processes browser and device signals to distinguish people from automated traffic. If enabled, Akismet may process an inquiry's contact details and technical information to detect spam

Address suggestions. Google Places processes search terms and place requests used to provide address suggestions, subject to Google's Privacy Policy (https://policies.google.com/privacy)

Legal and safety purposes. Authorities, advisers, or other parties when reasonably necessary to comply with law, enforce agreements, protect rights or safety, or investigate misuse

Business changes. A successor or adviser involved in a merger, sale, reorganization, or transfer of the business, subject to appropriate confidentiality protections

At your direction. Other parties when you ask us to share information or give us permission

We do not sell personal information. We do not share personal information for cross-context behavioral advertising, and we do not use the website for targeted advertising.

Text messages

If you choose text as your preferred contact method or separately consent to receive text messages, we may text you about your inquiry, appointment, or booking. Consent to texts is not a condition of purchasing services. Message frequency varies, and message and data rates may apply. You may opt out at any time by replying STOP or by contacting us. We do not share your mobile number or text-message consent with third parties or affiliates for their own marketing or promotional purposes.

Cookies and tracking technologies

Our websites and service providers may use cookies, browser storage, and similar technologies that are necessary for site and portal operation, security, and spam prevention. We do not use advertising cookies or third-party analytics for targeted advertising. As described above, client emails may use a tracking image or similar technology to record opens. You can adjust cookie controls in your browser, although blocking necessary storage or scripts may prevent parts of the websites, client portal, inquiry form, or security check from working correctly.

Some browsers offer a Do Not Track setting. Because there is no uniform standard for interpreting that signal, the site does not respond to Do Not Track signals. We do not permit third parties to collect personal information on this site over time and across unrelated websites for targeted advertising. Because we do not sell or share personal information for cross-context behavioral advertising, Global Privacy Control signals do not change how we process information.

Data retention

We keep personal information only as long as reasonably necessary for the purposes described in this policy, including client service, business records, dispute resolution, security, and legal, tax, accounting, and contractual requirements. Signed contracts, signature records, signing timestamps and IP addresses, related PDFs, invoices, and payment records may be retained as business and legal records. Retention periods vary based on the type of information and why it was collected. When information is no longer needed, we take reasonable steps to delete it or make it non-identifying.

Security and processing in the United States

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security. We and our service providers process information in the United States and potentially other locations where they operate.

Your choices and privacy rights

You may ask to access, correct, or delete personal information you provided, or withdraw a consent for future communications. We may need to verify your identity and may retain information when required or permitted by law. You may unsubscribe from texts as described above and can opt out of non-essential email by replying or using any unsubscribe method provided.

Privacy laws may provide additional rights depending on where you live and whether the law applies to our business. California's Consumer Privacy Act applies only to businesses that meet statutory thresholds. If an applicable law gives you additional rights, you may submit a request using the contact details below. We will not discriminate against you for exercising an applicable privacy right.

Children's privacy

This website and our services are not directed to children under 13, and we do not knowingly collect personal information online from children under 13. If you believe a child under 13 has provided personal information through the site, please contact us so we can review and delete it as appropriate.

Portfolio images and third-party links

Portfolio images are displayed with permission. If you appear in an image and would like us to review or remove it, please contact us. The site may also link to websites or services we do not control. Their privacy practices are governed by their own policies.

Changes to this policy

We may update this policy as our services, providers, or legal obligations change. We will post the revised policy on this page and update the effective date above. Please review it periodically.

Contact us

For questions or privacy requests, contact us at lisa@lisaleming.com or through the Contact page at https://lisaleming.com/contact