Privacy Policy
Last updated October 29, 2026.
This policy describes what Velvet Prahem Studio collects through prahem.com. The studio is at 1805 Broadway St, Fresno, CA 93721, United States. The phone number is +1 (559) 724-9140. No public email address is published on this site.
Information the form collects
If you submit an appointment request, the form collects:
- Your name
- Email address
- Phone number
- Requested service
- Preferred date and preferred time
- Any message you choose to add
- Your acknowledgment of this policy
The form also uses a hidden field that people are not asked to fill in. If that field is filled, the submission is rejected. A timestamp kept in your session is used to reject forms that are sent immediately, which is a common pattern for automated spam.
Why it is collected
The salon uses this information to read your request, contact you about a time, and protect the form from abuse. Sending the form does not create a confirmed appointment. The site does not use the form for advertising lists, and it does not sell personal information.
Session cookie
When you open the contact page, the site sets a first-party cookie named salon_session. It holds a session identifier so the form can keep a security token and the time the form was opened. The cookie is HTTP-only, uses SameSite=Lax, and is marked Secure when the page is served over HTTPS. It expires when you close the browser. Other pages do not need this cookie. Details are in the cookie policy.
Rate limiting and logs
The server stores a hash of the IP address, not the raw address in the file name, with timestamps of recent form attempts. Those records are used to limit repeated submissions and are written so that entries older than 48 hours can be dropped the next time the file is updated. The web host may also keep ordinary server logs, which can include IP address, browser type, and the URL requested. This site does not control how long a host keeps those logs.
How a request is delivered
A completed request is emailed to the salon only when config/mail.php is present and valid. That file sits outside the public web folder and holds the mailbox settings. If the file is missing, the site tells you and does not claim the request was received. If the operator chooses the “log” transport, the request is written to a private folder on the server instead of being emailed, and the confirmation text says so.
The email provider or the host that stores that mailbox is a service provider for this purpose. This site does not send the form to an advertising network.
How long information is kept
The website does not run a separate customer database. Request details live in the salon’s email mailbox, or in the private log if that transport is enabled, until the salon deletes them. Rate-limit files are intended to hold only recent timestamps. Session files are temporary server files used to operate the form.
Security
The form is checked on the server, mail credentials are not placed in JavaScript, and the public site is not the place those credentials belong. No method of transmission or storage is perfectly secure.
Children
This website is not directed at children under 13, and the appointment form is not meant for them.
California requests
You can call the salon and ask what you submitted through the form, or ask the salon to delete a request email if it is still in the mailbox. If a California privacy law gives you a right to access, delete, or correct that information, use the phone number and address on this page to make the request. This policy does not state that any particular statute applies to the salon, and it does not claim a certification.
Changes
If this policy changes, the updated version will be posted on this page with a new date. The version you are reading describes the form, the session cookie, and the rate-limit files that the site actually uses.