Legal & privacy

Privacy Policy

Effective November 2, 2026. This policy explains the information BookProSalon processes to provide customer, salon-partner and administrative services.

BookProSalon is in a pre-launch stage. This policy should be reviewed by qualified legal counsel and updated with the verified business identity and privacy contact before public launch.

Information we collect

Account information

Name, email address, phone number, password hash, account role, verification state and account status.

Salon and service information

Salon identity, owner relationship, address, coordinates, contact details, photos, operating hours, offered services and administrator review information.

Booking and queue information

Selected services, price snapshots, requested date or walk-in choice, booking state, queue token, service progress, cancellation reason and payment status.

Technical information

Session and API tokens, device notification tokens, security events, IP address and user-agent details recorded for important administrative actions.

How information is used

  • Create and secure accounts.
  • Show approved salons and genuine service information.
  • Process booking requests and maintain queue state.
  • Send account, approval, booking and turn-related notifications.
  • Record payments and verified gateway events where configured.
  • Prevent misuse, enforce ownership and maintain audit records.

When information is shared

Customers and salon partners receive only the information needed for their booking relationship. Customer queue responses do not expose another customer’s name or phone. Information may be processed by configured hosting, email, push-notification, SMS or payment providers when those services are enabled. We do not describe information as sold.

Retention and security

Information is retained while needed to provide the service, meet operational or legal requirements, resolve disputes and protect the platform. Passwords are stored as secure hashes. Access is role-restricted, sensitive actions are validated server-side, and production traffic should use HTTPS. No internet service can guarantee absolute security.

Your choices

You may update supported profile information and manage device notifications through the relevant portal. Account access, correction or deletion requests will be handled through the verified privacy channel once published, subject to legitimate retention obligations.

Policy updates

This policy may change as the service and configured providers evolve. The effective date at the top will be updated when material revisions are published.