Privacy Policy

1. What we collect

• Account data: name, email, phone number, date of birth (for age verification and, for Salons, KYC).
• Booking data: services booked, appointment times, cancellation/no-show history, reviews you leave.
• Payment data: handled by Stripe and PayPal — we store transaction records and the last 4 digits of a card where relevant, never full card numbers.
• Business verification data (Salons only): legal business name, registration number, VAT number, identity document, submitted to Stripe Identity for verification.
• Communications: messages sent to our AI assistant or Salon staff via web chat, WhatsApp, Telegram, or voice.
• Device & usage data: IP address, device fingerprint, and app/browser metadata, used for fraud and risk-of-no-show scoring.
• Location: approximate location if you allow it, used to show nearby Salons.

2. How we use it

• To create and manage your account and process bookings.
• To process payments and deposits through Stripe/PayPal.
• To verify Salon identity and comply with our own legal and anti-fraud obligations.
• To calculate trust and no-show risk scores that protect both customers and Salons.
• To power the AI concierge, respond to messages, and improve its accuracy over time.
• To send booking confirmations, reminders, and — if you've opted in — marketing messages.
• To detect and prevent fraud, abuse, and platform misuse.

3. Legal basis

We process your data under one or more of: performance of a contract (creating your account, processing a booking), legitimate interest (fraud prevention, trust scoring, service improvement), legal obligation (KYC, tax, accounting records), and consent (marketing communications, optional location access) — you can withdraw consent for anything consent-based at any time.

4. Who we share it with

• The Salon you book with, limited to what they need to deliver the appointment.
• Payment processors (Stripe, PayPal) to process transactions and, for Salons, identity verification.
• Messaging providers (Meta/WhatsApp Business, Telegram, SendGrid, Twilio) to deliver messages you request.
• Infrastructure and AI-model providers that process data on our behalf under contract, solely to operate the service — we don't sell your data to third parties for their own marketing.
• Regulators or law enforcement where we're legally required to.

5. International transfers

SalonTime operates across multiple countries. Where your data is transferred outside the UK/EEA, we rely on adequacy decisions or Standard Contractual Clauses to keep it protected to UK/EU standards.

6. Retention

We keep account and booking data for as long as your account is active, and for a further period afterward as required for tax, accounting, and dispute-resolution purposes. You can request deletion at any time — see Your Rights below.

7. Your rights

If you're in the UK/EEA (and, as a matter of policy, wherever you are), you have the right to access, correct, export, or delete your personal data, restrict or object to certain processing, and withdraw consent. Request an export or deletion from your account settings, or email [email protected]. We'll respond within 30 days. If you're unhappy with how we've handled a request, you can complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.

8. Cookies & local storage

We use essential local storage to keep you signed in and remember your theme preference. We don't use third-party advertising trackers.

9. Security

We encrypt data in transit (TLS) and encrypt sensitive credentials at rest. Access to customer and Salon data is restricted to what's needed to operate the service.

10. Children

SalonTime isn't directed at anyone under 18, and we don't knowingly collect their data.

11. Changes to this policy

We'll notify you by email or in-app notice of material changes before they take effect.

12. Contact

Email [email protected] for anything privacy-related.