Last updated 9 October 2026
Privacy Policy
What we collect, why we collect it, and what you can ask us to do about it.
OpenChair LLC, doing business as ChairWatch ("ChairWatch", "we", "us", "our") runs an operating platform for beauty, skincare and wellness professionals. This notice explains what information we handle, why we handle it, who we share it with, and what you can ask us to do about it.
It covers our website at www.chairwatch.com, the ChairWatch apps and consoles, the booking pages that businesses run on ChairWatch, and the other places we deal with you, like email, texts and support.
We have written this in plain language on purpose. If anything here is unclear, write to us at support@chairwatch.com and we will explain it.
The short version
- We do not sell your personal information, and we do not share it for cross context behavioural advertising.
- Our website uses no tracking cookies, no advertising pixels and no third party analytics.
- Our apps count how they are used, with our own tools only and without cookies. On a salon's booking page you are anonymous. Section 4 says exactly what we count.
- When you are a client of a salon or studio, that business decides what it keeps about you. We hold it for them and act on their instructions. Ask them first, and we will help.
- Card details never touch our systems. Stripe, the company that moves the card money, handles them.
- Each business is walled off from every other one. A salon can never see another salon's clients, notes or numbers.
- You can ask us for a copy of your information, ask us to fix it, or ask us to delete it. Section 13 says how.
1. The two different roles we play
This is the most important thing to understand about how ChairWatch handles information, and it is the part most privacy notices skip.
When we decide (we are the "controller")
For some information, we decide what to collect and why. That covers:
- People who hold a ChairWatch login. That includes salon and studio owners, stylists, nail techs, barbers, braiders, estheticians, makeup artists, tattoo pros, spa staff and front desk teams, plus anyone using ChairWatch Educators, Suppliers, Affiliates, Insiders or Organizers.
- Customers who create their own ChairWatch account to manage bookings across the businesses they visit.
- Visitors to our website, people who fill in our contact form, and people who write to support.
- How we bill businesses for their ChairWatch subscription.
When the business decides (we are the "service provider")
A business that uses ChairWatch keeps its own records: its client book, appointment history, notes, intake and consent forms, photos, messages and sales. That business decides what to collect, who on its team can see it, and how long to keep it. We hold and process it on their behalf, under our agreement with them, and we do not use it for our own purposes.
So if you are a client of a salon and you want your record changed or removed, the business is the right first stop. Tell us and we will pass it on and help them act on it, but the call is theirs.
Where both are true at once
If you book through a ChairWatch booking page and also create a ChairWatch account, there are two separate things:
- Your account (your email, password, name, phone, photo and settings) belongs to you and is ours to look after. It travels with you to every business you visit.
- Your client record at each business (their notes, your history with them, their forms) belongs to that business, and is kept separate from every other business you visit.
2. What we collect
2.1 What you give us
- Account details: name, email address, password (stored scrambled, never in plain text), phone number, profile photo and a short line about yourself if you add one.
- Security settings: whether you turned on a second step at sign in, and where you want your sign in code sent.
- Business details: business name, addresses, opening hours, locations, the services you offer, your team, your price list, your policies and your branding.
- Team and pay details where a business uses ChairWatch for staff, chair rent, commission or payroll. That can include role, schedule, pay arrangements and what a person earned.
- What you write to us: support messages, contact form submissions, feature requests and anything you post in ChairWatch community spaces.
- Referral codes you enter when you sign up, so we can credit the partner who sent you.
2.2 What a business keeps about its clients
A business using ChairWatch may hold, about the people it serves: name, email, phone, birthday, address, appointment and waitlist history, purchases, deposits, tips, loyalty balances, memberships, packages, gift cards, invoices, saved card references, photos, its own notes and tags, marketing preferences, and no show or cancellation history.
2.3 Intake forms, consents and the things you upload
Businesses can build their own intake and consent forms. Depending on what a business asks, an answer might include:
- A signature, either typed or drawn with a finger.
- Photos, for example a patch test record, a colour correction, a nail repair or a tattoo cover up.
- Files, for example a referral or a note from a doctor.
- Health related answers, like allergies, skin sensitivities, medications, pregnancy or a past reaction. Some treatments cannot be done safely without asking.
Health related answers, and any official ID number a form asks for, count as sensitive information. We handle them only to run the service for the business that asked for them. We never use them for marketing, we never sell them, and we never use them to build a profile of you. Businesses: only ask for what you genuinely need, and tell people why you are asking.
ChairWatch is not a healthcare provider, and the platform is not built to meet US health privacy law (HIPAA) or similar rules. If your work is covered by those rules, ChairWatch is not the right place to keep that information.
2.4 Payment information
We use Stripe to move card money. Card numbers, expiry dates and security codes go straight to Stripe and are never stored on ChairWatch systems. What we keep is the harmless part: a reference that lets a business charge a saved card again, the last few digits, the card brand, what was paid, when, and whether it went through.
A business taking money through ChairWatch has its own online payments account with Stripe, separate from its ChairWatch account. Stripe collects what it needs to verify that business under financial rules, which can include an official ID document and a tax number. That part is between the business and Stripe, and is covered by Stripe's privacy policy.
2.5 What we collect automatically
- Sign in and device information. When you sign in we record that a session started, when it expires, and a short friendly label for the device so you can recognise it later and sign it out. We work that label out from your browser's own description of itself. We do not store the raw text of it.
- Server logs. Our servers record requests, including IP address, time, what was requested and whether it worked. We use these to keep the platform running and to spot abuse.
- Audit history. The platform records who changed what and when, so a business can answer "who cancelled this" or "who refunded that". This is a core part of the product and cannot be turned off.
- Usage of AI features, where a business turns them on. See section 8.
- How the apps are used. Which screens are opened, how far a booking gets, and when something fails. Section 4 says exactly what we count and what we leave out.
We do not track you across other companies' websites, and we do not build advertising profiles.
2.6 Location
Business addresses are turned into map coordinates so clients can find a salon and search nearby. That is about the business, not about you. We do not track the live location of a person's phone. If a ChairWatch app ever asks for your location, it will say why and you can say no.
2.7 What we get from other people
Unlike our previous notice, which said we received nothing from third parties, this is now accurate: we do receive some information from others.
- Sign in providers. If you sign in with Google or Apple, we receive your name and email address, and a stable ID for you. We do not receive your password. If you use Apple's hide my email, we only ever see the relay address.
- Stripe tells us whether a payment worked, whether a business has been verified, and when money settles or is disputed.
- Your calendar, if you connect one. See section 2.8.
- Instagram and Facebook, if a business connects its accounts so it can post from ChairWatch. We receive the business's own account details and posts, not its followers' personal information.
- Imports. If a business moves to ChairWatch from another system, it can bring its client list and history with it. The business is responsible for having the right to move that information.
2.8 Connecting your own calendar
Staff can connect a personal Google Calendar so ChairWatch knows when they are already busy. We only ask the calendar when you are free or busy. We never read what your events say, so titles, guests and locations of your private life stay private. You can also choose to have your ChairWatch bookings written into your calendar, which is a separate choice you make yourself.
To keep this working while nobody is looking, we store the permission your calendar provider gives us, and we keep it scrambled. When you disconnect, we tell your provider to cancel that permission, not just delete our copy.
2.9 Signing up at a ChairWatch event
At events such as trade shows, you can sign up with us on your phone at the ChairWatch booth. That sign up form asks for:
- a selfie you take at the booth,
- your first name, your business name (or your own name, if that is what you go by) and what kind of pro you are,
- your Instagram or TikTok handle, and your city and state,
- your mobile number and email, your email and text choices, and an event code if you have one,
- one feature you would love your booking platform to have.
Your booth selfie. We use it as proof that you visited our booth, which is part of how the event reward works. It is stored privately: only ChairWatch staff can see it, and it is never shown on a public page. There is a separate box on the form that says ChairWatch can share your selfie on social media. It starts unticked. We only ever post your selfie on ChairWatch social media if you ticked that box. If you did not, it stays with us.
No face recognition, ever. A booth selfie is an ordinary photo. We do not run face recognition or face scanning on it, we do not measure or extract face geometry from it, and we do not create any biometric identifier or biometric information from it. That includes under the Illinois Biometric Information Privacy Act and similar laws.
How long we keep it. We keep your booth selfie until you ask us to delete it. To ask, write to support@chairwatch.com from the email you signed up with, or tell us the name and phone number you used. If you said yes to social media and change your mind, write to the same address and we will stop using it.
Your feature idea. We may use an AI service provider to group your idea with similar ones other people sent in, so we can see which ideas are most popular. We currently use Anthropic for this. Only the words of your idea are sent, never your selfie, your contact details or your handles. Ideas are shown publicly on the Dacheboard, our feature voting board, with the business or personal name you gave on the form. Your email, phone number, handles, city and selfie are never shown there. If you would rather your name came off your idea, write to support@chairwatch.com.
3. Why we use your information
| What for | Our lawful reason (UK and EEA) |
|---|---|
| Creating your account, signing you in, keeping you signed in | To perform our contract with you |
| Running bookings, the waitlist, payments, sales, stock and everything else the platform does | To perform our contract |
| Sending you booking confirmations, reminders and receipts | To perform our contract |
| Taking payments, chasing failed ones, handling refunds and disputes | Contract, and legal obligation |
| Support, and answering what you write to us | Contract, and our legitimate interest in helping you |
| Keeping the platform safe, stopping fraud and abuse, keeping an audit history | Legitimate interest, and legal obligation |
| Fixing bugs and making the product better | Legitimate interest |
| Marketing emails and texts from ChairWatch | Your consent, or legitimate interest where the law allows it |
| Marketing a business sends to its own clients | The business's own reason, with consent where required |
| Tax, accounting and answering lawful requests | Legal obligation |
| Handling health related answers on an intake form | Your explicit consent, given to the business that asked |
We do not use the information a business keeps about its clients to train AI models, to advertise to those clients ourselves, or to sell to anyone.
4. Cookies, local storage and similar technology
Here is the honest position, which is better than most.
Our website (www.chairwatch.com)
It sets no cookies. There is no Google Analytics, no advertising pixel, no Meta pixel, no session recording and no third party tracker. It does not count your visit either. Our fonts are served from our own servers, so loading a page does not tell anyone else you were here.
The one thing our website stores in your browser is a small note recording that you closed the cookie message, so we do not show it every time. You can clear it any time by clearing your browser's site data.
The ChairWatch apps and booking pages
The apps mostly use your browser's own storage, plus one cookie to keep you signed in. Almost all of it is for things the app cannot work without:
- Keeping you signed in. In the ChairWatch apps for professionals, the part of your sign in that lasts up to 30 days is kept in a cookie our servers set, which the page itself cannot read. It is only ever sent to ChairWatch, and signing out removes it. A short pass that runs out after 15 minutes is kept in your browser's local storage. On a salon's booking page and in the phone app, your sign in pass is kept in local storage. Each app keeps its own, so a browser can hold more than one sign in at a time.
- Remembering what you were doing: a basket you have not checked out, a booking you are halfway through, a seat you picked, whether you hid a help bubble. Some of this is deliberately kept only until you close the tab, because a shared salon iPad should not remember the last person's order.
- Counting how the apps are used: a random number for the tab, and roughly where the visit came from. Both are forgotten when you close the tab. The next part explains it.
None of it is used for advertising or to follow you elsewhere.
Counting how the apps are used
We count how people use the ChairWatch apps and booking pages, so we can see what works and fix what does not. This is ours alone. No outside analytics company, no advertising pixel and no cookie is involved, and we do not share these records with anyone.
What we count:
- Which screens are opened and which main buttons are pressed, like opening the calendar or sending a campaign.
- How far a booking gets on a booking page: opening the page, looking at a service or a team member, each step of checkout, and the booking being made.
- When something goes wrong, as a short error code and the kind of request that failed. Never the message on the screen and never anything you typed.
- A little context: whether the screen is phone, tablet or computer sized (worked out from its width), and roughly where a visit came from: Instagram, Facebook, Google, a QR code, straight in, or somewhere else.
On a booking page you are anonymous. Each browser tab gets a random number that is forgotten when you close it. We never attach your name or your account, even when you are signed in. We only note whether you were.
In the business apps, what a team member does is counted against their account and their business, so we can see which features each business uses and where people get stuck.
These records never hold your IP address, your browser's description of itself, your name, email or phone number, or anything you type.
Each record is deleted after 90 days. We keep daily totals made from them, which say nothing about any one person.
If your browser sends Global Privacy Control, booking pages count nothing at all for you.
We are building a way for a business on the Advanced plan to see totals for visits to its own booking site, like how many visits reached checkout. It is not available yet. When it is, those totals will be anonymous, and a business will never see who visited.
Third parties on booking and checkout pages
Some pages load tools from other companies to do a job, and those companies may set their own cookies or storage:
- Stripe, on any page where you pay. Stripe uses this to check the payment is genuine and to stop fraud. It is not optional on a payment page, because without it the payment cannot be made safely.
- Google Maps, where a business shows a map of where to find it.
- Google and Apple, if you choose to sign in with them.
Those companies handle that information under their own privacy policies.
Your choices
We set no tracking or advertising cookies, so there is nothing of that kind to opt out of. To stop booking pages counting your visit, turn on Global Privacy Control in your browser (section 16). Blocking the storage above will stop the apps working properly: you will not stay signed in, and payment pages may refuse to load. You can clear everything any time through your browser's settings.
5. Emails, texts and push messages
Messages leave ChairWatch through one path, which keeps it predictable and easy to control.
- Email goes out through Twilio SendGrid.
- Text messages go out through Twilio.
- Push notifications go out through Google Firebase Cloud Messaging.
Service messages
Booking confirmations, reminders, changes, receipts, waitlist offers, password resets and sign in codes are part of the service. You cannot turn all of them off while keeping an account, though the platform lets you and the business choose which ones you get.
Marketing messages
Marketing is separate and always optional. Every marketing email has an unsubscribe link, and it works immediately without needing to sign in. For texts, reply STOP. Message and data rates from your phone company may apply.
When you unsubscribe we keep a permanent record that this address or number said no. That record exists so we can keep honouring it, and it is one of the few things we deliberately never delete.
A business is responsible for having permission before it markets to its own clients, including under US text messaging rules.
6. How we share information
We do not sell personal information, and we have not sold or shared it for cross context behavioural advertising in the last twelve months.
The companies that help us run the platform
These companies handle information only to do a job for us, under a contract that says so.
| Company | What they do | Where |
|---|---|---|
| Stripe | Payments, payouts, subscriptions and verifying businesses | United States |
| DigitalOcean | Our servers, database and the storage holding uploaded photos and files | United States |
| Twilio SendGrid | United States | |
| Twilio | Text messages | United States |
| Google (Firebase) | Push notifications, and sign in with Google | United States |
| Google (Maps and Places) | Address lookup and maps | United States |
| Apple | Sign in with Apple | United States |
| Meta (Instagram and Facebook) | Letting a business post to its own accounts | United States |
| Anthropic | AI features: the assistant (section 8), and grouping feature ideas from our event sign up form (text only) | United States |
We keep this list current. If we add a company that handles personal information, it goes here.
The business you are a client of
If you book, buy or join a waitlist, the business sees what it needs to serve you. Its team sees what its owner allows them to see.
Other people using the platform
Reviews, community posts and anything else you put in a public space can be seen by others. Think before you post.
When the law requires it
We may share information to answer a valid legal request, to enforce our terms, or to protect the rights and safety of people using ChairWatch. We push back on requests that are too broad.
If the company changes hands
If ChairWatch is ever sold or merged, information may move with the business. ChairWatch is self funded and has no outside investors. If this ever happened, we would tell you first, and this notice would keep applying until we told you otherwise.
7. Where your information is kept
ChairWatch runs in the United States, and the companies listed above are US based. If you use ChairWatch from outside the US, your information is transferred to and processed in the US, where privacy law is different from your own.
For people in the UK and the EEA, we rely on the European Commission's Standard Contractual Clauses, and the UK Addendum, in our contracts with the companies above. Write to us if you would like more detail.
8. AI features
ChairWatch includes an assistant that can answer questions about a business's own diary, clients and numbers, and can draft changes for a person to approve.
Here is how it works, and its limits:
- It is off unless a business turns it on.
- When it runs, the question, plus the business information needed to answer it, is sent to an AI model provider. We currently use Anthropic.
- The assistant cannot move money. There is no way for it to charge a card, issue a refund or send a payout.
- Anything that changes a business comes back as a plan that a person has to approve before it happens.
- Your information is not used to train AI models. Our agreements with model providers do not allow it.
- We record how much each AI request used so we can bill the business fairly. That record holds the amount used, not the content of the conversation.
Feature ideas from our event sign up form are handled differently from the assistant. When you send us an idea through that form, we may send the words of the idea, and nothing else about you, to Anthropic so it can be grouped with similar ideas. Section 2.9 has the details.
No decision that has a legal or similarly significant effect on you is made by AI alone. See section 12.
9. How long we keep things
Our previous notice said we kept nothing longer than three months after an account closed. That was not accurate, and it was not possible: tax and financial records have to be kept for years. Here is the real position.
| What | How long |
|---|---|
| Your account | While it is open. After you close it, up to 12 months, so we can settle disputes and stop fraud |
| A business's client records, bookings, notes and forms | The business decides. We keep them while its ChairWatch account is open |
| Payment, payout, invoice and tax records | As long as tax and accounting law requires, which is normally several years and is longer than the rest |
| Sign in sessions | They expire on their own, and you can end one early from your account |
| Server logs | A short period, normally weeks, unless we are investigating something |
| Audit history of who changed what | As long as the record it belongs to |
| Records of how the apps are used (section 4) | 90 days. Daily totals made from them, which are not about any one person, are kept |
| Booth selfies from event sign ups | Until you ask us to delete them. Section 2.9 says how |
| Unsubscribe and do not contact records | Indefinitely, so we can keep honouring them |
| Backups | Deleted on the normal backup cycle after the live copy goes |
When a record is deleted in ChairWatch it is first marked as removed and hidden from normal use, so a business can recover from a mistake and so history still adds up. It is then cleared out in the ordinary course.
10. How we protect your information
- Every business is walled off from every other one. This is built into the platform at the database layer, not bolted on: a request that does not say which business it belongs to is refused outright, and asking for another business's information returns "not found".
- Traffic is encrypted in transit.
- Passwords are stored scrambled and can never be read back, by us or by anyone else.
- You can turn on a second step at sign in.
- Sign in passes are short lived and refresh quietly in the background.
- Permissions given to us by your calendar, and details needed to import from another system, are stored scrambled.
- Card details never reach us at all.
- What a person on a team can see and do is checked on our servers every time, not just hidden in the interface.
No system is perfectly secure, and we will not pretend otherwise. If a breach happens that puts you at risk, we will tell you and the right regulators as quickly as the law requires.
11. Children
You must be 18 or over to hold a ChairWatch account. We do not knowingly let a child create one, and if we find out one has, we will close it and delete what we hold.
We know that salons and studios serve young clients, and a parent or guardian may book on their behalf. In that case the child's details sit in the business's client book, and the business is responsible for having the right permission from a parent or guardian. We ask businesses not to put a child's health details, photos or signature into ChairWatch without that permission.
If you believe we hold information about a child that should not be there, write to support@chairwatch.com and we will deal with it promptly.
12. Automated decisions
The platform does make some decisions automatically, and you should know what they are:
- Waitlist offers. When a spot opens up, who gets offered it depends on the mode the business chose: first come first served, first to respond, provider selected, or highest value first.
- Booking rules. Whether a booking is confirmed straight away, needs a deposit, or needs a card held depends on the rules the business set, and on any exception it set for you.
- Cancellation and no show charges, calculated from the business's own published policy.
These follow rules a business chose and can change, and a person at that business can override any of them. None of them is AI, and none of them profiles you. If an automatic decision does not look right, ask the business, and ask us if you are not satisfied.
13. Your rights and how to use them
Wherever you live, you can ask us to:
- Tell you what we hold about you and why.
- Give you a copy, in a form you can take elsewhere.
- Fix anything wrong.
- Delete what we hold, unless we have to keep it.
- Stop or limit some uses, including marketing.
- Take back consent you gave us, which does not undo what was already done.
- Not be treated worse for asking. We will never downgrade your service because you used a right.
How to ask
Email support@chairwatch.com or use the form at www.chairwatch.com/contact. You can also change most of your details yourself in your account settings.
We will confirm we got your request quickly, and answer within 45 days. If it is complicated we may take another 45 days, and we will tell you why before the first 45 are up. There is no charge unless a request is repetitive or excessive, and we will tell you before charging anything.
We have to check it is really you, usually by writing to the address or number already on your account. We use whatever you send for that check and nothing else, and we delete it afterwards. An authorised agent can ask on your behalf with proof that you said they could.
If you are a client of a business
Send the request to that business, because they decide. If you are not sure who to ask, or you do not get anywhere, tell us and we will help.
If we say no
We will tell you why. You can appeal by replying to us with the word appeal in your message. We will answer an appeal within 45 days, and if we still say no we will tell you how to complain to your regulator.
14. If you live in the United States
State privacy laws give people extra rights. These apply to residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, and to any other state whose law applies to us. The details differ by state, but we offer the rights in section 13 to everyone, which is simpler and better than the minimum.
What we have collected in the last twelve months
This table replaces the one in our previous notice, which understated several categories.
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Name, address, phone, email, account name, IP address, an ID that is unique to you | Yes |
| B. Customer records | Name, contact details, employment details, financial details | Yes |
| C. Protected characteristics | Age or date of birth where a business asks for a birthday | Yes |
| D. Commercial information | Appointments, purchases, payment history, what you bought | Yes |
| E. Biometric information | Fingerprints, face scans, voiceprints | No |
| F. Internet or network activity | Server logs, how you use the platform, which features you use | Yes |
| G. Location | Approximate location from an IP address, and business addresses turned into map coordinates. Not your phone's live location | Yes |
| H. Audio, visual and similar | Photos uploaded to a profile, a portfolio or an intake form, booth selfies from event sign ups, and signatures drawn on screen | Yes |
| I. Employment information | Role, schedule, chair rent, commission and pay, where a business uses ChairWatch for its team | Yes |
| J. Education information | Course enrolment and progress, where ChairWatch Educators is used | Yes |
| K. Inferences | Visit counts, lifetime spend, no show history and loyalty standing, worked out from real activity | Yes |
| L. Sensitive personal information | Account sign in details, and health related answers on an intake form where a business asks for them | Yes |
Several of these say yes where our previous notice said no. The platform genuinely does more than it used to, and the old answers no longer described it.
Sensitive information
We do not collect biometric information. Booth selfies from event sign ups are ordinary photos, and we never scan them for faces or extract face geometry from them (see section 2.9).
We use sensitive information only to provide the service, keep it secure and meet the law. We do not use it to work out anything about your character, habits or preferences, which means the right to limit its use does not change how we handle it. We do not sell it and we never will.
Selling and sharing
We have not sold personal information, and we have not shared it for cross context behavioural advertising, in the last twelve months. We do not do this with the personal information of anyone, including people we know to be under 16. We have disclosed the categories above to the companies in section 6, for the business reasons described there.
California: Shine the Light
California residents can ask once a year what personal information, if any, we gave to others for their own direct marketing. We give none. California residents under 18 with an account can ask us to remove something they posted publicly.
15. If you live in the UK or the EEA
Along with the rights in section 13, you can object to processing we base on legitimate interest, ask us to restrict processing while a dispute is sorted out, and complain to your data protection authority. In the UK that is the Information Commissioner's Office.
Our lawful reasons are in the table in section 3. We would rather you came to us first, and we will take it seriously.
16. Do Not Track and Global Privacy Control
We do not track anyone across other companies' websites and set no advertising cookies, so for most of what we do there is nothing for a Do Not Track or Global Privacy Control signal to switch off. One thing does change: if your browser sends Global Privacy Control, a salon's booking pages stop counting your visit at all (see section 4). If we ever add anything that counts as selling or sharing, we will treat Global Privacy Control as a valid opt out and say so here first.
17. Changes to this notice
We will update this notice as the platform changes and as the law changes. The date at the top always tells you when it last changed.
If a change matters to you, we will do more than quietly update the page: we will email you, or tell you in the app, before it takes effect.
18. How to reach us
For anything about this notice, or to use any right in it:
OpenChair LLC, doing business as ChairWatch
137-45 244th Street
Rosedale, NY 11422
United States
Email: support@chairwatch.com
Phone: (718) 914-1097
Online: www.chairwatch.com/contact
OpenChair LLC is the company responsible for the information described in section 1 as ours to decide about.
ChairWatch is operated by OpenChair LLC d/b/a ChairWatch. Section 18 above is how to reach us about your information, and it is the address to use for a privacy request.
See also our terms of service.