Privacy Policy

Styloving acts as a data processor for salon owners using the platform to manage their business. Salon owners are the data controllers for their client records. For data collected directly by Styloving (account registration, platform usage, and public booking form submissions), Styloving acts as the data controller.

We collect the following categories of personal data depending on how you interact with our platform:

We process your personal data for the following purposes:

• To provide and maintain the Styloving platform
• To process appointment bookings and send confirmations
• To communicate with you about your account or bookings
• To detect your approximate location for showing nearby salons
• To improve our services and user experience
• To measure marketing campaign performance (including trial starts and onboarding completion events)
• To comply with legal obligations
• To prevent fraud and ensure platform security

We process your data based on the following legal grounds under GDPR:

• Contract performance — to provide the services you signed up for
• Legitimate interests — to improve our platform and prevent fraud
• Consent — for cookies, analytics, marketing communications, geolocation, and advertising measurement technologies (including Meta Pixel)
• Legal obligation — to comply with tax and business regulations

We share data with the following third-party services, all of which are GDPR-compliant:

• Supabase — Database hosting and authentication (EU data centers)
• Resend — Transactional email delivery
• Vercel — Website hosting and deployment
• Anthropic — AI-powered catalog import (data processed per request, not stored)
• Mapbox — Map display (receives approximate coordinates only)
• Meta Platforms Ireland Ltd. — Meta Pixel for consent-based ad attribution, campaign measurement, and retargeting audiences

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy. Account data is retained for the duration of your account plus 30 days after deletion. Booking data is retained for 2 years for business record purposes. You may request earlier deletion at any time.

We implement industry-standard security measures to protect your data, including encryption in transit (TLS/SSL), encryption at rest, role-based access controls, and regular security reviews. All data is stored in EU-based data centers.

We use the following types of cookies:

• Essential cookies — Required for the platform to function (authentication, language preference)
• Functional cookies — Remember your preferences (selected city, cookie consent choice)
• Analytics cookies — Help us understand how visitors use our site (only with your consent)
• Marketing cookies — Used for campaign attribution, ad measurement, and remarketing (including Meta Pixel), only with your consent

You can manage your cookie preferences through the cookie consent banner or your browser settings. Meta Pixel and similar marketing technologies are loaded only after you select "Accept".

As a data subject in the EU, you have the following rights:

• Right of access — Request a copy of your personal data
• Right to rectification — Correct inaccurate or incomplete data
• Right to erasure — Request deletion of your personal data
• Right to data portability — Receive your data in a machine-readable format
• Right to restrict processing — Limit how we use your data
• Right to object — Object to processing based on legitimate interests
• Right to withdraw consent — Withdraw consent at any time for consent-based processing

To exercise any of these rights, please contact us at the email address below. We will respond within 30 days.

Our platform is not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

Your data is primarily stored and processed within the European Union. Where data is transferred outside the EU (e.g., for specific third-party services), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs).

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our platform or sending you an email. Continued use of the platform after changes constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

Email: privacy@styloving.com