Privacy

Only what you send us, and a little about how the site is used.

Contact form

Your name and email address, your organization if you add one, the kind of inquiry and your message. A brand referral adds the brand’s name, its Instagram handle or link, and who referred it.

Stylist pull form

Your name and email address, the appointment you want, a preferred date if you choose one, your project details, whether pieces will travel outside the US, and the version of the pull terms you accepted. You may attach up to three PDFs or images.

Newsletter

Your email address, only if you ask to join.

Visits

The pages you view and a few actions, such as sending a form or opening an email link, through the analytics described below. Our host also keeps standard server logs, such as your IP address and browser type.

To reply to you, arrange appointments and manage the loans that follow.

To confirm that your request arrived: we may send one short email to the address you gave.

To send the newsletter, if you ask for it.

To see which pages and forms are used, so we can improve the site, and to keep the forms free of spam.

The site keeps no copy of what you send. Each form goes by email, delivered by Resend, to our team’s inboxes on Google Workspace, where it stays with the rest of our correspondence.

Files attached to a pull request travel with that email; the site does not store them. Before sending, your browser shrinks most JPEG, PNG and WebP photos over 1 MB, which removes their location and camera details. Smaller photos, HEIC photos and PDFs are sent as they are, so check them for anything you would rather not share.

Confirmations are limited to one per address every 24 hours. To keep count, we store a hashed (scrambled) form of your email address with Upstash, never the address itself, and it expires after 24 hours. A daily total of confirmations sent, which holds nothing about you, expires after 48 hours.

Joining is your choice. The newsletter box on our forms is unticked until you tick it, and the signup forms in the footer and on the About page are there if you want them.

When you tick the box, we send Mailchimp your email address and nothing else. Mailchimp then emails you a link to confirm before you are added; if you are already on the list, or have left it, your choice stays as it is. Our other signup forms send your address straight to Mailchimp.

Every issue carries a link to unsubscribe. Leave whenever you like.

Vercel Web Analytics and Speed Insights count visits and measure how quickly pages load. Neither uses cookies.

Google Analytics 4 shows us how visitors find and use the site. It sets cookies to recognize a returning browser, and it may collect information about your activity over time and across other websites. We have turned off Google signals, ads personalization and data sharing.

The actions we record name only things like the kind of inquiry or the inbox you chose, never your name, email address or message.

We do not respond to Do Not Track browser signals.

We do honor Global Privacy Control: when your browser sends it, we do not load Google Analytics.

We share information only with the services that run the site for us, each for its own job.

Vercel

Hosts the site, keeps its server logs and runs Web Analytics and Speed Insights.

Google Analytics

Measures how the site is used.

Cloudflare Turnstile

Checks that a form is sent by a person, not a bot.

Resend

Delivers form emails to our team, and confirmations to you.

Google Workspace

Hosts our team’s email, where your messages arrive.

Mailchimp

Sends the newsletter.

Upstash

Holds the short-lived count that limits confirmation emails.

Sanity

Stores the site’s own words and images. It never receives visitor information.

Each keeps data under its own retention settings. We do not sell your personal information or share it for cross-context behavioral advertising. We may disclose information when the law requires it.

You can ask to see the information we hold about you, to correct it, or to delete it. Email or call us using the details at the end of this page, and we will honor reasonable requests. This is open to everyone, California residents included.

To leave the newsletter, use the unsubscribe link in any issue.

The site is not directed to children under 16, and we do not knowingly collect their information. If you believe a child has sent us details, tell us and we will delete them.

We take reasonable measures to protect what you share: the site is served only over an encrypted connection, the contact and pull forms are checked for bots, and the site keeps no copy of your messages or files. No method of sending or storing information is perfectly secure.

When we change this policy, the date at the top changes too. After a material change, a notice also appears at the top of this page for 30 days.