Happy Bubbles Skin

Privacy Policy

Effective September 28, 2026

Happy Bubbles Skin is a skin studio inside Excalibur Hotel & Casino in Las Vegas, Nevada. This policy explains what we collect when you use happybubblesskin.com or visit the studio, why we collect it, who else handles it, and what you can ask us to do with it.

What we collect, and why

When you visit the website

• The website has no customer accounts and nothing to sign up for.
• Like any website, ours receives your IP address, browser details and the pages you ask for. They appear in short-lived server logs. We use them to keep the site running and secure, for example to stop one address from holding many appointment slots at once.
• On product pages, the cart and checkout, Stripe's script can load to show payment options and Affirm's pay-over-time messages. Where it does, Stripe collects details about your device and browser to help prevent fraud.

When you shop online

• Your email address, name and phone number, and your shipping address if we are delivering the order. For store pickup we ask for a phone number instead of an address.
• What you ordered, the prices, the sales tax and how you chose to receive it.

We use these to fulfill your order, send your order confirmation, work out sales tax, contact you about pickup or delivery, and keep our sales and tax records. If you enter your details at checkout but don't place the order, they stay with that unfinished cart in our system.

You pay in Stripe's secure payment form. Stripe processes the payment. If you choose Affirm, Klarna or another pay-over-time option, that company receives your details and runs its own eligibility check. We receive the result and the kind of payment used. We never see or store your full card number.

When you book an appointment

Your name, email address and phone number, the treatment, the date and time, and whether the booking repeats. It goes into the studio's appointment calendar, which our staff use, and we email you a confirmation.

When we send you a payment link

For a package arranged in the studio, we may email you a link to pay online. We create it with your name, email address, phone number and the package price. On the payment page you choose pickup or shipping and agree to the sale terms, and we record those choices and when you made them. Stripe's checkout page then takes the payment and asks for your email address, phone number and billing address, plus a shipping address if you chose shipping. We ask for the billing address because pay-over-time lenders such as Affirm require it.

Skin analysis in the studio

The skin analysis happens only in the studio, run by a member of our team with you present, and only after you read and agree to our consent statement. It is a cosmetic assessment, not a medical diagnosis. It involves:

• Photographs: three pictures of your face, from the front and from each side.
• Your answers: the concerns and areas you want to work on, your skin type, age range, sun exposure and skincare routine, and whether you are pregnant or nursing or take a medication that makes skin sensitive to light. We ask the last two because they rule out some treatments.
• Results: scores for the appearance of your skin, an estimated skin-age range, the treatments we recommend and the plan you choose.

The photographs go from our tablet straight into private cloud storage. To score them, our server sends the three photographs and your answers to Anthropic, whose Claude AI model reads them and returns the scores. Anthropic does not receive your name or your age range, and its terms for business customers do not allow it to train its AI models on what we send. We never publish your photographs, and we never use them to identify or recognize you.

If you choose a treatment plan, we email it to you with a calendar file of your sessions. We keep the photographs and results with your record so we can compare your skin at later visits, until you ask us to delete them. Ask at the end of your analysis and we delete them while you wait. Ask any time later, in the studio, by email or by phone, and we'll delete them and let you know when it's done. We keep a short record that you gave consent (your name, the date and the team member who took it), with no photographs in it.

We treat your photographs and your answers about pregnancy and medication as sensitive. We use them only for your assessment and treatment plan, and we never sell them.

Your customer record

The studio and the website share one customer list. What you give us when you shop in the studio, order online, book, pay by link or have a skin analysis is kept under your name, email address or phone number, where our staff can look it up. That includes what you bought, receipts we email you, store credit, your appointments, and anything you choose to tell us, such as your birthday.

Emails we send

Order and booking confirmations, payment links, treatment plans, and receipts you ask for. They are about your own orders and visits. We don't run a newsletter or send marketing emails.

Cookies

• Our own code sets one cookie, omnipos_cart_id, which remembers your shopping cart for 30 days. We use no advertising or analytics cookies.
• Where Stripe's script loads (product pages, the cart and checkout), Stripe may set its own cookies to prevent fraud.
• You can block or delete cookies in your browser. Without the cart cookie, the site can't remember what is in your cart.
• Some browsers send a "Do Not Track" signal. We don't track you across other websites, so the site works the same whether or not it is on.

Who we share it with

We share personal information only with the companies that run part of our service for us, and only so they can do that job:

• Render hosts our website, servers and database in the United States.
• Stripe processes payments.
• Affirm, Klarna or another pay-over-time provider, only if you choose one at checkout. It handles your application under its own privacy policy.
• Cloudflare stores skin-analysis photographs in private storage.
• Anthropic reads skin-analysis photographs and answers to produce the scores.
• Resend delivers the emails we send you.
• Google hosts our email inbox if you write to us.
• Shipping carriers receive the name and address on the label when we ship an order.

We also disclose information when the law requires it, or to protect our customers, our team or our business from fraud. We don't sell personal information, and we don't share it with anyone for their own marketing or for advertising. Apart from Stripe's fraud checks described above, we don't let other companies collect information about what you do on our site, over time or across other websites.

How long we keep it

• Orders, payments and receipts are business records. We keep them for as long as tax and accounting rules require, and they are not deleted automatically.
• Your customer details and appointments stay on file until you ask us to delete them, apart from what we must keep as sales records.
• Skin-analysis photographs and results stay until you ask us to delete them.
• Server logs are kept briefly by our hosting provider and then deleted.

Your choices and rights

Wherever you live, you can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct it;
• delete it, including your skin-analysis photographs and results.

Email info@happybubblesskin.com or call (725) 306-3934. So that we never hand your information to someone else, we'll confirm the request comes from you, usually by replying to the email address we have on file. We aim to answer within 30 days. We delete everything we can; sales and tax records we are required to keep stay until that requirement ends. We won't treat you differently for asking.

Nevada residents

We don't sell covered information as Nevada law (NRS Chapter 603A) defines it. You can still send us a request not to sell it: email info@happybubblesskin.com with "Nevada opt-out" in the subject line, and we'll answer within 60 days.

California residents

California's consumer privacy law may not apply to a business our size, but we honor California residents' requests to know, correct and delete their personal information anyway. We don't sell or share personal information for cross-context behavioral advertising, and we don't give it to other companies for their own direct marketing.

Security

The website only works over encrypted (HTTPS) connections. Card details are entered in Stripe's form and never touch our servers. Skin-analysis photographs sit in private storage with no public address, and can only be opened through links that expire within minutes. Staff tools need a staff sign-in, and the site tells browsers not to run scripts from sites we haven't approved. No system is perfectly secure; if a breach affects your information, we'll tell you as the law requires.

Children

Our website and services are meant for adults. We don't knowingly collect personal information from children under 13. If you think a child has given us information, contact us and we'll delete it.

Changes to this policy

When we change this policy, we'll update the date at the top. If a change affects how we use information we already hold, we'll say so at the top of this page before it takes effect.