Legal

Privacy Policy

Last updated 18 August 2026

1. Who this applies to

This policy covers two groups: salon owners and staff who sign up to SalonDo (“ salon admins”), and their clients who book appointments through a SalonDo-powered site (“clients”). SalonDo is the data controller for salon admin account data, and acts as a data processor on behalf of each salon for their clients’ booking data — the salon itself is the data controller for its own clients.

2. What we collect

For salon admins: name, email address, salon name, and billing details (handled by Stripe — we don’t store full card numbers).

For clients booking through a salon’s site: name, email address, phone number, and booking history (services booked, appointment times, and any notes the salon records against a booking).

3. Why we process it

To provide the booking service itself (creating accounts, managing appointments, processing deposits), to send appointment reminder emails, to communicate with salon admins about their account, and to meet our legal obligations (e.g. billing records). We don’t sell personal data, and we don’t use client booking data for our own marketing.

4. Who we share it with

We use a small number of third-party processors to run the Service:

  • Supabase — database hosting and authentication.
  • Stripe — payment processing for subscriptions and booking deposits.
  • Resend — sending transactional emails (booking confirmations and reminders).
  • Vercel — application hosting.

Each of these providers only processes data as needed to perform their function for us, under their own data processing terms.

5. Where data is stored

Our infrastructure providers may process data outside the UK/EEA. Where that happens, it’s covered by their own standard contractual clauses or equivalent safeguards required under UK GDPR.

6. How long we keep data

We keep account and booking data for as long as an account is active, plus a reasonable period afterwards in case the account is reopened or records are needed for legal/financial purposes. You can request earlier deletion — see Section 8.

7. Cookies

We use only the cookies necessary to keep you signed in and to remember your session — no third-party advertising or tracking cookies.

8. Your rights

Under UK GDPR you have the right to access, correct, delete, or export your personal data, and to object to certain processing. To exercise any of these rights, email support@salondo.co.uk. If you’re a client of a salon using SalonDo and want your data corrected or removed, you can also contact that salon directly, since they control your booking relationship.

9. Changes to this policy

We may update this policy from time to time. Material changes will be announced by email or via the dashboard before they take effect.

10. Contact

Questions about this policy or how your data is handled? Email support@salondo.co.uk.