Privacy policy

Who we are

Nolatech Salon is online booking software run by [Operator legal name] ("we"). Salons use it to take bookings and send appointment messages. When you book with a salon, the salon decides what your information is used for and we process it on the salon's behalf. For staff and owners who sign in, and for the running of the service itself, we are responsible for the information.

What we collect

When you book or join a waitlist: your name, mobile number and/or email address, the service, time and staff member you chose, any notes you add, any promotion code you use, and whether you agreed to appointment texts or to offers.

As you use the salon: your booking history (including cancellations, check-ins and missed visits), notes the salon's staff write about your visits, and a record of every text and email sent to you about your appointments.

For salon staff: name, email, role, working hours and time off, and sign-in records.

Technical: a sign-in cookie for staff (no advertising or tracking cookies), and server logs with IP addresses kept for security and fixing problems.

How it is used

To make, change and cancel your bookings; to send confirmations, changes, cancellations and reminders; to tell you when a time you're waiting for opens up; to let the salon see your history and contact you about your appointments; and to keep the service secure and working.

Offers and marketing go only to people who ticked the box agreeing to them, and you can withdraw that at any time.

We do not sell your information, and we do not use it to advertise to you on behalf of anyone else.

Text messages

Appointment texts go only to numbers whose owner agreed to them. Reply STOP to any text to stop them; reply HELP for help. See the SMS terms for details.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties.

Who we share it with

The salon you book with, which sees your details and history.

Service providers that run parts of the service for us, under contracts that limit them to doing so: our hosting provider (servers in [hosting region]); our text-message provider (Twilio) to deliver texts; our email provider to deliver emails; and, when payments are added, our payment processor. Their list is kept up to date on this page.

Authorities, if the law requires it.

How long it is kept

Booking records are kept while the salon uses the service, so the salon has your history, and for up to [retention period] after the salon leaves. Message records follow the same rule. Security logs are kept for up to 90 days. Backups are encrypted and rotate out within [backup retention period].

Your choices and rights

You can ask the salon, or us, for a copy of your information, to correct it, or to delete it. Some records may be kept where the law requires (for example, for tax). Depending on where you live, you may have further rights, such as to object or to complain to a data-protection authority.

To make a request, contact the salon or write to [privacy@your-domain]. We will answer within 30 days.

Security

Each salon's data is kept separate by the database itself, connections are encrypted, staff accounts have roles that limit what each person can see, and backups are encrypted. No system is perfectly secure; if a breach affects you, we will tell you and the salon as the law requires.

Children

The service is not meant for children under 13, and we do not knowingly collect their information. A parent or guardian should book for them.

Changes and contact

We will post changes here with a new date, and tell salons ahead of important ones. Questions: [privacy@your-domain], or [Operator legal name], [Operator postal address].