Who we are
SalonDiary is operated by Parsa Safar-Manesh, trading as SalonDiary, a UK sole trader. Contact us at contact@salondiary.app about privacy or your information.
We are the data controller for our website enquiries, SalonDiary user accounts, subscriptions and service administration. A salon is normally the controller of its own client, appointment, treatment and consultation records; we process those records on the salon’s behalf. Contact your salon first about those records. We can help direct a request if needed.
Information we use
- Account and business details: name, email, sign-in identifiers, salon contact details, team roles and account settings.
- Subscription and payment records: chosen plan, billing status, transaction references and payment history. Stripe handles card entry and processing; SalonDiary does not store full card numbers or card security codes.
- Salon records: client names and contact details, bookings, services, payment records, reminders, notes, treatment records and photographs where supplied. Consultation forms may include health information.
- Support and technical information: messages you send us, IP addresses and request, security and email-delivery logs needed to operate and protect the service.
Information comes from you, your salon and authorised team members, sign-in providers and service providers such as Stripe. Account and billing information is needed to provide the subscription; optional sign-in methods are not required to use email sign-in.
Google and Facebook sign-in
If you choose an enabled social sign-in option, the provider shares the information permitted by your authorisation, such as your name, email address, provider account identifier and profile information. Supabase handles authentication. We use this information to create or authenticate your SalonDiary account. We do not receive your Google or Facebook password, request access to your friends list, or post to your social account.
Removing SalonDiary from a provider’s connected apps stops that connection but does not automatically erase information already held by SalonDiary. See our data deletion instructions.
Why we use information
- Contract: creating and managing your account, providing your subscription, processing billing and responding to service requests.
- Legitimate interests: keeping the service reliable and secure, preventing misuse, troubleshooting and handling enquiries. We consider the impact on your rights when relying on this basis.
- Legal obligations: maintaining required financial records and responding to valid legal requests.
- Consent: where required for optional communications or features. You may withdraw consent without affecting earlier lawful processing.
Salons must determine their own lawful basis for client records and an appropriate additional condition for health information. A checkbox alone does not settle every data-protection obligation. SalonDiary’s own responsibilities continue to apply.
Client scores summarise recorded attendance, cancellations and payment chasing for salon staff. They are not a credit-reference score. A salon may also use booking-access settings to limit online booking; contact the salon to discuss or correct its records and decisions.
Who receives information
Authorised salon users can access records according to their permissions. Our service uses Cloudflare for hosting and storage, Supabase for authentication, Stripe for payments and subscriptions, and Resend for service emails. Google and Meta process sign-in information when you choose their login options. When a salon sends an SMS reminder, Twilio processes the recipient phone number, message content and delivery information. Messages may contain the client name and appointment or payment details. Salon staff must record the client's permission before using this channel. WhatsApp sending remains unavailable pending setup; if enabled, Twilio and Meta will process the relevant message and delivery information. Stripe also processes messaging top-ups and saved-card authorisations for optional automatic top-ups.
We may disclose information where necessary to meet legal obligations or protect legal rights. We do not sell your personal information. Providers may also process some information as independent controllers under their own privacy notices.
International processing
Our providers operate internationally, so information may be processed outside the UK. Applicable UK transfer requirements must be met, using an adequacy arrangement or appropriate contractual safeguards where required. Contact us for information about the arrangements and safeguards applicable to your data; this notice does not promise UK-only storage.
How long information is kept
Account information is kept while needed to provide and administer your account. After closure or a deletion request, retention depends on the purpose, outstanding support or disputes, security needs and applicable legal requirements. Financial records may need to remain after an account is deleted. Salon client records follow the salon’s retention decisions and instructions, subject to legal requirements.
Deletion is not instantaneous across backups and provider systems. Residual copies may remain until the relevant backup or retention cycle expires. We will explain any information retained and the reason when handling your request. Cancelling a subscription does not itself delete the account or salon records.
Cookies, browser storage and security
The dashboard uses authentication cookies and browser storage for functions such as sessions and invitation flows. Hosting and payment providers may use security cookies. The marketing site loads fonts from Google, which involves requests including technical information such as your IP address. The marketing site also uses Cloudflare Web Analytics, provided by our hosting provider Cloudflare, to count page visits and measure page speed. It does not use cookies or browser storage and does not identify or track individual visitors. This notice does not provide consent for advertising cookies.
We use HTTPS, authenticated access and role-based controls to help protect information. No online service can guarantee absolute security. Salon owners must manage staff access, devices, exported files and backups responsibly.
Your choices and rights
Depending on the circumstances, you can ask for access, correction, deletion, restriction or portability of your information, object to processing, and withdraw consent where we rely on it. Email contact@salondiary.app. We may need proportionate information to verify your identity. We normally respond within one month; where the law permits an extension, we will explain it.
You can complain to us and to the Information Commissioner’s Office (ICO). For salon-controlled client records, the salon is normally responsible for responding, with our assistance where appropriate.
Changes to this notice
We update this notice when our service or processing changes. The revision date appears above; we will bring material changes to your attention where appropriate.