Beautifully Known, operated by makeup artist Josie Greene in Knoxville, Tennessee and serving surrounding areas, uses this website to share services and portfolio work, receive inquiries, and manage appointments. This policy explains how information is handled through beautifullyknown.com and its optional Google Calendar and Instagram connections.
Information we collect
When you inquire or book, we collect the name, email address, phone number, selected service, preferred or reserved appointment time, and any message you provide. Appointment records also include the accepted price, duration, status, and applicable booking details. Please do not include payment-card information or sensitive medical information in a message.
Authorized administrators have a login and may connect studio accounts. We store a password hash, account connection identifiers, and authorization tokens needed for those connections. The hosting service may record technical information such as IP addresses, browser details, requested pages, timestamps, and errors to operate and protect the website.
How we use information
We use information to respond to inquiries, arrange makeup services, check appointment availability, manage confirmations, cancellations and rescheduling, send service-related messages when email delivery is configured, and maintain website security. We do not sell personal information or use connected-account data for advertising or training AI models.
Google Calendar access
Only an authorized studio administrator connects Google Calendar. Booking visitors do not need to connect a Google account. With the account holder’s permission, the website reads the calendar list to identify a writable booking calendar, checks busy periods and event times to prevent scheduling conflicts, and creates, reads, updates or deletes the website’s appointment events in the selected calendar.
Calendar events created by the website contain the service, appointment time, client name, email, phone number, and submitted appointment notes. These details are shared with Google and may be visible to people who have access to that calendar under the account holder’s sharing settings. Details of unrelated calendar events are not displayed to website visitors.
We store the selected calendar identifier and encrypted authorization tokens to maintain the approved connection. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Google data is used for the scheduling features described here, rather than unrelated profiling or marketing.
Instagram access
If an authorized administrator connects the studio’s Instagram account, the website reads its account identifier and recent media, including post identifiers, captions, image or video-cover links, post links, and publication times. It caches recent posts to display the portfolio feed and stores encrypted authorization tokens to refresh it. This connection does not request permission to publish posts or read direct messages. Loading Instagram-hosted images or following social links sends ordinary connection information to Meta; those services have their own privacy policies.
Sharing and service providers
Josie and authorized website support personnel may access information as needed to provide services, maintain the site, resolve a problem, or handle a request. Hosting and email providers process information needed to operate their services. Google receives scheduling data when Calendar is connected, and Meta supplies connected Instagram media. Information may also be disclosed when required by law or necessary to protect safety and prevent abuse. Service providers may process information outside your location.
Cookies and security
The website uses an essential session cookie for administrator sign-in, form protection, and booking requests. Sessions expire after up to eight hours. Blocking essential cookies may prevent these features from working. Public pages also use Google Analytics cookies as described below. Advertising personalization and Google Signals are disabled in our analytics integration. Connections use HTTPS, administrator passwords are hashed, and saved account authorization tokens are encrypted. No system can guarantee absolute security.
Inquiry and booking forms use Cloudflare Turnstile to help prevent spam and automated abuse. Cloudflare processes browser and connection information for its security check, and our server validates the resulting token before accepting a submission. Read Cloudflare�s Turnstile privacy policy.
Website analytics
We use Google Analytics to understand visits to public pages and improve the website. Google may receive information about visited pages, traffic sources, browser and device characteristics, interactions, approximate location, and cookie-based identifiers. Loading the Google tag sends ordinary browser connection information to Google. Analytics is separate from the studio’s Google Calendar connection.
Our integration excludes administrator and private appointment-management pages. Page-view metadata omits URL query strings, fragments, private appointment links, and submitted booking-form contents. Connected Google Calendar and Instagram authorization tokens are not sent to Analytics. Analytics records are retained according to the settings of our Google Analytics property.
Read how Google uses information from partner websites. You can manage cookies in your browser, use a tracking blocker, or install Google’s Analytics opt-out browser add-on.
Retention and deletion
Inquiry and appointment records remain stored until they are removed; the website does not currently apply an automatic retention period to those records. We retain information while needed for client services, active appointments, business records, security, or legal obligations. You can request access, correction, or deletion by contacting us below. Requests are reviewed manually, and we may verify your identity before acting. Some records may need to be retained for an active appointment or a legal requirement. Information in hosting logs, email systems, backups, or connected services may remain subject to those systems’ retention practices.
Administrators can disconnect Google Calendar or Instagram in Admin → Connections. Disconnecting removes the locally stored authorization tokens; disconnecting Instagram also clears its cached feed. Disconnecting does not erase existing appointment records or events already in Google Calendar. Account holders can also revoke access through their Google or Instagram account settings. See our data deletion instructions for requesting removal of information already stored.
Changes and contact
We will update this page and its effective date when our practices change. For privacy questions or requests, email josie@beautifullyknown.com or call 865-766-9052.