Privacy Policy for Salon & Parlour Management

Who holds what Salon & Parlour is installed by a salon onto their own Wix site. The salon is the controller of its client data. They decide what to record, why, and for how long. Their clients' questions about that data go to them. We are a processor. The app stores data in the salon's own Wix collections, inside the salon's own Wix site. We do not run a database of our own, we do not copy this data anywhere, and we cannot read it. What the app stores All of it lives in the salon's Wix site, in collections prefixed Salon_. About the salon's clients Name, phone number and email address Day and month of birth, if given. The year is deliberately not stored: the salon needs the date to send a card, not the client's age Appointment history, including what was booked, with whom, and whether they turned up Purchases, payments, tips, gift cards, memberships and loyalty points Colour formulas and treatment notes Allergy notes and the date of the last patch test Before and after photographs, held in the salon's own Wix Media Manager Consultation form answers and the typed name given as a signature Free text notes and labels the salon adds Messages between the client and the salon About the salon's staff Name, email address, phone number Working hours, time off, and which services they are trained in Clock-in and clock-out times Commission rates and earnings About the salon Opening hours, services, prices, stock, and the app's settings What we collect for ourselves Nothing. The app has no analytics, no tracking, no third-party scripts, and sends nothing to any server we control. It has no server we control. Wix handles installation, billing and subscription status, and tells the app only whether the salon's subscription is active. Wix's own privacy policy covers that. Who else sees it Nobody, unless the salon asks for it: Wix, because the data sits in their platform and the payments run through it Wix Inbox, for messages, which is where the salon already reads them Wix Stores, if the salon lists retail products online, and only the product name, price and stock count Wix Automations, if the salon sets up reminders. The app hands over a name, a booking time and a contact detail so Wix can send the message The app does not sell data, does not share it for advertising, and has no marketplace that takes a salon's clients elsewhere. Health information Allergy notes and patch test dates are health information. Under the GDPR they are special category data under Article 9, and in most jurisdictions they carry obligations beyond those on a name and a phone number. The app stores them because a salon that cannot see an allergy before mixing a colour is a salon that will eventually hurt somebody. That is a real reason, but it is not a legal basis by itself. Salons are responsible for having a lawful basis for holding this, which in most cases means explicit consent from the client. The consultation forms feature is the intended place to collect it. This section is the one that most needs review before launch. It is written honestly rather than confidently. How long it is kept For as long as the salon keeps it. Nothing expires on its own, because a colour formula from three years ago is exactly the sort of thing a client comes back for. Deleting a client in the app deletes their record. Uninstalling the app leaves the collections in place in the salon's site, so nothing is lost by accident; a salon that wants the data gone deletes the collections through their Wix dashboard. Client rights A client's request to see, correct, export or delete their data goes to the salon, who can do all four from the app. We cannot act on such a request ourselves, because we cannot reach the data. Security Data sits in Wix's infrastructure and inherits its security. Within the app, every read is filtered and every write stamped with the installation it belongs to, so one salon's data cannot be reached from another's. Ids used by clients to manage their own bookings are generated from a cryptographic source rather than a predictable one. Changes Material changes will be noted here with a new date, and announced in the app's release notes. Contact Questions about this policy, or about how the app handles data, go to coder.sagor@gmail.com. If you are a client of a salon rather than a salon owner, your questions about your own records go to the salon. They hold the data; we cannot reach it.