Privacy Policy

1. Information we collect

• Account details: name, email address, phone number, password (hashed).
• Booking information: appointments, service preferences, notes you add.
• Salon and staff profile content you choose to publish (bio, photos, specialties).
• Messages sent through the in-app chat between customers and stylists.
• Technical data such as IP address, used only for rate-limiting and abuse prevention.

2. Lawful basis and purpose

We process your information to provide the booking service you requested (contractual necessity), to secure your account and prevent abuse (legitimate interest), and, where required, with your consent (e.g. accepting these policies at signup).

3. How we use your information

To create and manage your account, process bookings, connect you with the relevant salon or customer, send account-related emails (verification, password reset, staff invites), and improve the Platform. We do not sell your personal information.

4. Who can see your information

A salon you book with can see your name, phone number, and booking details. A stylist can only message you once you have a confirmed booking together. The platform administrator can see aggregate and account data to operate and support the Platform.

5. Data retention

We retain account and booking data for as long as your account is active, and for a reasonable period afterwards to meet legal, accounting, or dispute- resolution needs, after which it is deleted or anonymised.

6. Your rights

Under POPIA, you may request access to, correction of, or deletion of your personal information, and may object to certain processing. To exercise these rights, contact us using the details below.

7. Security

Passwords are hashed, not stored in plain text. Sessions are stored in HTTP-only cookies. We apply rate limiting to login, registration, and booking endpoints to reduce abuse.

8. Contact

For any privacy-related request or question, contact us at noreply@halosalons.app.