Privacy Policy

Who we are and what this covers

Salonsgo is a Saudi platform for booking and managing beauty salon appointments. We are the data controller for personal data collected through our platform.

This policy covers our website, our apps, and the salon dashboard. It does not cover what a salon does with your data outside our platform — each salon has its own policies.

Personal data we collect

We collect what running the service requires, namely:

• Account data: name, mobile number, email address.
• Booking data: services requested, times, salon, notes, and preferences.
• Salon business data: services, prices, staff, expenses, and accounting reports.
• Payment data: handled by licensed payment service providers. We never store card numbers.
• Technical data: device type, browser, IP address, and pages used.
• Location: only with your permission, and only to show nearby salons.

Why we process it and our legal basis

We process your data on the following bases:

• Performance of a contract: creating your account, confirming bookings, issuing invoices.
• Legal obligation: retaining invoices and tax records as required by the Zakat, Tax and Customs Authority.
• Consent: marketing messages, and access to your location.
• Legitimate interests: platform security, fraud prevention, and service improvement — where these do not override your rights.

Who we share it with

We do not sell your personal data. We share it only as far as necessary with:

• The salon you booked with — it sees your name, mobile number, and booking details.
• Licensed payment service providers, to process payments.
• Cloud hosting, email, and operational messaging providers.
• The Zakat, Tax and Customs Authority, for e-invoicing purposes.
• Competent authorities, where there is a lawful request.

Where your data is stored and cross-border transfers

Some of our systems are currently hosted with a cloud provider in a region outside the Kingdom of Saudi Arabia, which means personal data is transferred across borders.

This is done under the conditions permitted by the Personal Data Protection Law and its implementing regulations, and under processing agreements that bind the provider to protect the data.

How long we keep it

We keep your account data for as long as the account exists, then delete or anonymise it after closure, unless there is a legal reason to retain it.

Invoices and tax records are retained for the statutory period required by Saudi tax law, even after the account is closed.

Your rights

The law gives you the following rights, which you can exercise by contacting us:

• The right to be informed how your data is collected and used.
• The right to access your data and obtain a copy of it.
• The right to request correction or updating of inaccurate data.
• The right to request destruction of your data once it is no longer needed.
• The right to withdraw consent at any time, without affecting processing carried out before withdrawal.

Children's privacy

The service is intended for people aged 18 and over. Where the beneficiary is a minor, a guardian must create the account and make the booking on their behalf.

How we protect your data

We encrypt data in transit and at rest, isolate each salon's data from every other salon at the database level, restrict internal access to the minimum necessary, and record sensitive operations in an audit log.

No system is perfectly secure. If an incident affects your personal data, we will notify the competent authority and affected individuals as the law requires.

Cookies and measurement tools

We use cookies that are necessary to run your session and remember your preferred language.

We also use a user-experience performance monitor that collects aggregated technical data about page load speed and errors encountered while browsing, in order to improve performance. It runs on the website's pages, and its collection can be disabled through your browser settings.

Marketing messages

We only send marketing messages with your consent. You can stop them at any time via the unsubscribe link in the message or by contacting us directly; you will still receive operational messages (booking confirmations, reminders, invoices).

Complaints

If you object to how we handle your data, contact us first and we will address the complaint. You then have the right to escalate to the competent personal data protection regulator in the Kingdom.

Changes to this policy

We may update this policy. Where a change is material we will notify you through the platform or by email before it takes effect. The date of the last update is shown at the top of this page.