Beautiful Hair is Healthy Hair.

Asherlee Naturals ("we," "our," or "the Studio") is committed to protecting the privacy of our clients and customers in accordance with the Jamaican Data Protection Act, 2020. This policy explains how we handle your information across our e-commerce platform and our Curl Care Studio.

1. Data Collection & Legal Basis

We collect and process your data based on contractual necessity (to fulfill your orders and bookings) and consent.

• Registration Data: Name, contact details, and TRN (if required for specific business transactions).
• Sensitive Personal Data: In providing salon services, we may record details regarding your hair and scalp health. By booking a service, you consent to us maintaining these records to ensure your safety and service quality.
• Transaction History: In compliance with Jamaican financial regulations, we maintain records of all sales and services.

2. Standards of Processing

In accordance with the eight (8) enforceable standards of the DPA, we ensure that your data is:

1. Processed fairly and lawfully.
2. Obtained only for the specified purposes of retail and salon services.
3. Adequate, relevant, and not excessive.
4. Accurate and kept up to date.
5. Not kept for longer than is necessary.
6. Processed in accordance with your rights as a data subject.
7. Protected by appropriate technical and organizational security measures.
8. Not transferred outside of Jamaica unless that country ensures an adequate level of protection.

3. Image Rights & Marketing

We love to showcase our curl transformations!

• Gallery & Social Media: We will only use "Before and After" photos of your hair for marketing purposes with your explicit verbal or written consent. You may withdraw this consent at any time.

4. Data Sharing

We do not sell or lease your personal data. We only share information with:

• Local Authorities: When required by Jamaican law (e.g., Tax Administration Jamaica).
• Third-Party Processors: Secure platforms used for booking and credit card processing that adhere to international security standards (PCI-DSS).