Customer Care

Privacy Policy

How Jay2Jah handles customer information with care.

Last updated September 21, 2026

Jay2Jah Sugar Wax and Spa Inc values clear, respectful handling of personal information. This Privacy Policy explains what information we collect, how we use it, when we disclose it, the choices available to customers, and how to contact us. It applies to jay2jah.com, appointments, customer accounts, VIP memberships, retail transactions, marketing, customer support, Jewel, and related services.

Our Privacy Commitment

Your personal information is entrusted to Jay2Jah, and we value that trust. Jay2Jah does not sell, rent, trade, or exchange personal information for money. We do not disclose personal information for cross-context behavioral advertising or authorize Shopify, Jewel providers, or another service provider to use it for that provider's own independent marketing. We disclose information only as needed to provide a service you request, operate and protect Jay2Jah, follow your direction, or comply with law.

We work to keep personal information from being placed at unnecessary risk. We collect only what is reasonably needed, limit access by role and purpose, require providers to protect information and follow approved instructions, and delete or de identify information when it is no longer reasonably needed. No organization can promise that a system will have zero risk, but Jay2Jah uses reasonable administrative, technical, and physical safeguards and will respond to a security incident and provide notice when required by law.

Who We Are

Jay2Jah Sugar Wax and Spa Inc is located at 1150 Dexter Lane Suite 103, Cordova Tennessee 38016. The website and online store are hosted by Shopify. Jay2Jah determines how personal information is used for its business, while Shopify and other providers process information to deliver their services.

Information We Collect

Information Customers Provide

  • Contact information, including name, email address, phone number, billing address, and any address needed for an enabled fulfillment method.
  • Appointment information, including selected services, dates, provider preferences, attendance history, preparation questions, and information a customer chooses to share about sensitivities, medications, pregnancy, recent procedures, or other service considerations.
  • Transaction information, including products, services, memberships, gift cards, discounts, taxes, payment status, refunds, and receipts. Payment providers process full payment card details; Jay2Jah generally receives transaction confirmations and limited payment information rather than the full card number.
  • Account, membership, and rewards information, including login related account identifiers, plan, billing cadence, renewal date, benefits, loyalty activity, preferences, and settings. Shopify or another account provider handles passwords; Jay2Jah does not need customers to send passwords through support channels.
  • Communications, including contact form messages, emails, SMS messages, reviews, feedback, service concerns, privacy requests, and staff handoff notes.
  • Marketing choices, including email or SMS opt in, opt out, cookie preferences, and advertising privacy choices.

Information Collected Automatically

  • Device and network information, such as IP address, browser, device type, operating system, approximate location derived from IP, and security signals.
  • Website and app activity, such as pages viewed, links selected, searches, cart activity, referring pages, timestamps, cookie identifiers, and interactions with site features.
  • Transaction and account logs needed to operate, secure, troubleshoot, and document requested actions.

Jewel Interaction Information

When a customer uses Jewel, we may collect button selections, messages, feedback, timestamps, session and device information, the page where Jewel was opened, and a conversation or handoff record. When a signed in customer asks for account help, Jewel may access only the order, appointment, membership, rewards, or profile information needed to fulfill the request.

The launch version of Jewel is text first and uses visitor initiated playback of a prerecorded introduction. It does not accept microphone input and does not record a customer's voice. Jay2Jah will update this Policy before enabling voice input or another feature that collects a new category of information.

Where Information Comes From

We collect information directly from customers, automatically from devices and website use, from Shopify and the service providers used for a requested transaction, and from marketing or referral partners when permitted. We may also receive updated information from payment, fraud prevention, review, or identity verification providers.

How We Use Information

  • Provide, confirm, reschedule, cancel, and support appointments and spa services.
  • Process purchases, retail pickup when offered, memberships, billing, refunds, discounts, rewards, and account requests.
  • Authenticate customers, protect accounts, prevent fraud, maintain security, and document consent and confirmed actions.
  • Respond to questions, service concerns, accessibility requests, privacy requests, and human handoffs.
  • Personalize service, product, membership, and rewards information when the customer is signed in and the use is appropriate.
  • Send transactional messages about appointments, accounts, purchases, and memberships.
  • Send marketing email or SMS when the customer has opted in or the communication is otherwise permitted by law.
  • Measure performance, troubleshoot errors, improve the website and Jewel, and understand which information customers find useful.
  • Comply with legal obligations, enforce agreements, and establish or defend legal claims.

Jewel and Automated Processing

Jewel is an automated digital guide. She may use approved rules and connected information to answer questions, recommend a next step, prepare a requested action, or apply an active pre-approved offer after the customer signs in or creates an account and eligibility is verified. Jewel does not make solely automated decisions that produce legal or similarly significant effects. She cannot approve medical eligibility, refunds, policy overrides, or any discretionary decision. After written owner activation, she may issue only the limited courtesy offer described in the Terms of Service when the connected system verifies every rule.

A customer account action requires authentication when appropriate, a clear summary of the material details, an explicit confirmation, and a success response from the connected system. A customer may ask for human review at any time.

How We Disclose Information

We disclose personal information only as reasonably necessary for the purposes described here, at a customer's direction, or as required by law. Depending on the service a customer uses and the store configuration, recipients may include the following categories and providers.

  • Ecommerce hosting and customer accounts, including Shopify.
  • Appointment and scheduling providers, including Sesami or another enabled booking provider.
  • Subscription, deposit, and payment support providers, including Seal Subscriptions, Downpay, Shopify Payments, card networks, and Affirm when offered.
  • Loyalty and account experience providers, including Froonze when enabled.
  • Email and SMS providers, including Klaviyo, subject to customer choices.
  • Review, form security, fraud prevention, analytics, and support providers, including Judge me and hCaptcha where used.
  • Automation and accounting providers, including Make and Intuit QuickBooks, when a workflow is configured to send relevant information.
  • Jewel hosting, AI, and automation providers when enabled. These providers may receive only the information needed to operate the requested feature under Jay2Jah's instructions.
  • Professional advisers, insurers, law enforcement, regulators, courts, or transaction parties when reasonably necessary for legal, safety, or business transfer purposes.

An installed app does not necessarily receive every customer's information. The information disclosed depends on the customer's interaction and the feature that is enabled.

Jay2Jah does not authorize a service provider to keep, sell, disclose, or use personal information for the provider's own independent marketing. Providers are expected to use personal information only to deliver the approved service, maintain security, comply with law, or follow another documented instruction from Jay2Jah or the customer.

Shopify Network Intelligence

The store is hosted by Shopify. Shopify processes information to host the store, complete transactions, secure accounts, and provide enabled Shopify services. Jay2Jah will not enable or use a Shopify Network Intelligence or related Enhanced Service feature that discloses personal information for cross-context behavioral advertising unless Jay2Jah first updates this Policy, provides any required privacy choice, and obtains any consent required by law. Information may be processed by Shopify and its providers in countries other than the customer's own. Customers may review Shopify's Consumer Privacy Policy and privacy portal for more information.

No Sale or Cross-Context Behavioral Advertising

Jay2Jah does not sell, rent, trade, or exchange personal information for money. Jay2Jah's policy is also not to disclose personal information for cross-context behavioral advertising or to let another business use it for that business's independent marketing. A limited disclosure to a service provider solely to provide a requested service under Jay2Jah's instructions is not a sale by Jay2Jah.

Jay2Jah will maintain the Your Privacy Choices page at Your Privacy Choices, honor applicable recognized browser-based opt-out signals, and provide available cookie controls even while this no-sale and no-cross-context-advertising commitment remains in effect. Before this Policy is published, Jay2Jah must verify that Shopify, Network Intelligence, advertising pixels, installed apps, cookies, consent controls, and marketing-provider settings match this commitment. Jay2Jah will update the Policy and provide any legally required notice or choice before adopting a materially different practice.

Marketing Choices

Marketing consent is collected separately from an appointment, order, account, or support request. Customers may unsubscribe from marketing email through the link in a message and may stop marketing SMS by replying STOP. Reply HELP for SMS help. Opting out of marketing does not stop messages needed to complete an appointment, transaction, membership, security, or account request.

Data Retention

We retain information only for as long as reasonably necessary for the purpose collected, the customer's relationship with Jay2Jah, security, accounting, dispute resolution, and legal obligations. Operating periods for Jewel are as follows: identifiable Jewel interaction content for up to 90 days; confirmed action, authentication, and consent logs for up to 24 months; and de identified usage analytics for up to 24 months. Information may be kept longer when required by law, needed for an active dispute or security investigation, or retained in a protected backup until ordinary deletion occurs.

Appointment, transaction, membership, accounting, and customer support records are retained for the period reasonably needed to provide the service, keep required business records, and resolve questions. Jay2Jah will configure providers to avoid using identifiable customer conversations to train general purpose models and will not authorize that use without updating this Policy and obtaining any required consent.

Security and Data Minimization

We use reasonable administrative, technical, and physical safeguards appropriate to the information and our operations, including role-based access, secure provider and account configuration, authentication where appropriate, activity and consent logging, retention limits, and review of enabled connections. No method of storage or transmission is completely secure, so we do not make a zero-risk guarantee. We limit collection to information that is reasonably needed and restrict access based on role and purpose. Customers should not submit full payment card numbers, passwords, government identification numbers, medical records, or unnecessary sensitive information through Jewel, email, SMS, or the contact form.

Privacy Rights and Requests

Depending on where a customer lives and which law applies, the customer may have the right to access, correct, delete, or obtain a portable copy of personal information; opt out of targeted advertising, certain sharing or sales, or certain profiling; withdraw consent; or appeal a denied request. Some information may be exempt, and we may retain information when the law permits or requires it.

To submit a request, email admin@jay2jah.com with the subject Privacy Request or write to the address below. Describe the request and the account or transaction involved. We may take reasonable steps to verify identity and authority before responding. If a request is denied and applicable law provides an appeal right, reply to the decision email with the subject Privacy Appeal and explain the requested review. We will respond within the period required by applicable law.

A customer may also use Shopify's privacy portal at https://privacy.shopify.com for information Shopify processes through services such as Shop or Shop Pay. A request sent to Jay2Jah may require coordination with providers and does not automatically delete information held independently by a third party.

Children and Minor Clients

The online services are not directed to children under 13. We do not knowingly collect personal information online from a child under 13 without legally required permission. If we learn that this occurred, we will take reasonable steps to delete the information. A parent or guardian should contact us about a minor's information or service request. Rules for receiving a spa service are addressed separately from the rules for collecting information online.

International Processing

Jay2Jah and its providers may process information in the United States and other countries where privacy laws may differ from those in the customer's location. When required, we and our providers use measures intended to support lawful transfers and applicable customer rights.

Changes to This Policy

We may update this Privacy Policy when our services, systems, providers, legal obligations, or Jewel capabilities change. The current version will be posted with a revised date. We will provide any additional notice or obtain consent when required. We will update this Policy before enabling Jewel microphone input, materially longer conversation storage, a new category of sensitive information, or a materially different use of customer information.

Contact Us

Privacy questions and requests may be sent to Jay2Jah Sugar Wax and Spa Inc, 1150 Dexter Lane Suite 103, Cordova Tennessee 38016, 901 529 2524, or admin@jay2jah.com.