Privacy Policy

Effective date: October 16, 2026

Beyond Basics Hair Restoration ("we" or "us") is a hair restoration salon in Wilmington, North Carolina. This policy explains what personal information we collect on this website, why we collect it, and who we share it with.

The site is published for beyondbasicshairrestoration.com. It may also be served from our hosting address while that domain is connected.

Information you give us

Payment-link requests. There is no customer account and no card form on this site. You build a cart, choose local pickup or shipping, and submit Request Payment Link. We collect:

• Your name, email address, and phone number if you provide one
• Whether you want local pickup or shipping
• A United States shipping address if you choose shipping (street, apartment or suite if you add one, city, state, and ZIP code)
• The cart you submitted: product names, codes, options, quantities, catalog prices, and whether an item is on backorder

Please do not type a card number into any form. We do not ask for one, and we do not store card numbers, expiration dates, or security codes.

A hidden "Company website" field is there to catch automated spam. Leave it blank. If it is filled in, we reject the request. We do not save that field with your order.

Contact and booking messages. The contact form collects your name, email address, phone number if you provide one, the inquiry type you choose, and your message. A hidden field works the same way to catch spam. Contact messages are delivered to the salon's GoDaddy inbox. They are not stored in our order database. There is no public comment or review form on this site.

Information collected automatically

Shopping cart. Your browser stores a cart identifier and a list of backordered item codes in local storage so the cart can be restored on a later visit. That information stays on your device until the cart is cleared or you remove the site data.

Request retry. While you submit a payment-link request, the browser keeps a short-lived session value so a lost response can be retried without creating a second request.

Analytics choice. A banner asks you to Accept or Decline. Your choice is stored in local storage on your device for up to one year. We load a GoDaddy website analytics script on each visit. Click details are sent only if you Accept. Those details can include the text of the link or button, the page title, and whether the link leaves our site. If you Decline, we do not send those click details. This analytics is not used for advertising, and we do not run advertising pixels.

Spam and rate limits. Payment-link requests are limited to 5 attempts per minute for an IP address and 3 attempts per 30 minutes for the same cart. Those counters, including the IP address and cart identifier, are stored in our database and removed after about two hours. Requests that are submitted before the form could have been read are rejected. We also limit how many new requests the salon accepts in an hour. The contact form has a separate limit of 5 submissions per minute per IP address. That contact-form counter stays in server memory and is not written to the database.

Optional verification check. When it is turned on, the payment-link form shows a Cloudflare Turnstile check. The check loads from Cloudflare. We send Cloudflare the verification result and, when we have it, your IP address, so Cloudflare can tell us whether the check passed. We do not store the verification token with your order. When the check is turned off, we do not send anything to Cloudflare.

Sales-tax lookup. To calculate North Carolina sales tax, we send the street address, city, state, and ZIP code to the U.S. Census Bureau geocoder so we can identify the county. We do not send your name, email, phone, or payment details to the Census Bureau. We read county tax rates from the public North Carolina Department of Revenue rate table. We do not send your personal information to that site.

Technical logs. The host that runs the site may keep ordinary server logs, such as IP address, browser type, and the page requested, to operate the site and investigate abuse.

Why we use this information

• To review your cart, check availability, and prepare an order
• To calculate shipping and North Carolina sales tax
• To send you a GoDaddy payment link, and to alert salon staff about the request and about a confirmed payment
• To answer consultation and contact messages
• To prevent duplicate, automated, or excessive submissions
• To understand how the site is used, only if you accept analytics
• To keep records we need for taxes, accounting, and customer questions

Who we share it with

We share information only as needed to run the salon and the store:

• GoDaddy Commerce holds the shopping cart and the order our staff create from your request.
• GoDaddy Payments processes the payment when you open the payment link we send. Card data is handled by GoDaddy Payments. It is not stored on this website.
• GoDaddy's contact inbox receives your contact-form message and the salon's alerts about payment requests and confirmed payments. Those alerts include the contact and order details you submitted, and GoDaddy emails them to the salon.
• Railway hosts this website and the MySQL database where payment-link requests are stored.
• Cloudflare receives the Turnstile check described above, only when that check is turned on.
• The U.S. Census Bureau receives the address parts used to identify a county for sales tax.

We do not sell personal information, and we do not share it with advertising networks. Links to Instagram, Facebook, and brand sites such as Jon Renau leave our site. Those sites have their own privacy practices.

How long we keep it

Payment-link requests stay in our database so we can fulfill the order, answer questions, and keep business and tax records. The software does not delete them on a fixed schedule. Abuse counters for IP addresses and carts are deleted after about two hours. Your analytics choice stays in your browser for up to a year, or until you clear this site's data. Contact messages stay in the salon's GoDaddy inbox.

You can ask us to correct or delete information we hold about you. We will do that unless we need to keep it for taxes, accounting, fraud prevention, or another legal duty.

Your requests

Email info@salonbeyondbasics.com or call (910) 452-0072 ext. 2 to ask what we have, to correct it, or to ask us to delete it. Please include the email address you used and, if you have one, your payment-request reference.

Children under 13

This site is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has given us information, contact us and we will delete it.

Changes

If we change this policy, we will post the new version on this page and update the effective date.

Contact

• Beyond Basics Hair Restoration
• 1124 Floral Parkway, Suite B, Wilmington, NC 28403
• Phone: (910) 452-0072 ext. 2
• Email: info@salonbeyondbasics.com

Tuesday through Friday, 10:00 a.m. to 6:00 p.m. Saturday by special request. Sunday and Monday closed.

See also our Terms of Use.