Privacy Policy

SalonKoi (“we”, “us”) runs this booking platform. We are the data controller for the account and booking information described below. Each salon you book with is a separate business and its own controller for what it does with your booking once it has it.

Questions, corrections or deletion requests: privacy@salonkoi.com.

Only what a booking actually needs:

• Your account — name, email address, phone number if you give one, the language you use the site in, and a profile photo if you add one. Your password is stored only as a bcrypt hash; we never hold the password itself and cannot read it.
• Your bookings — the salon, the services you chose and their price at the time you booked, any note you added, the serial number and time the salon assigned, who is serving you, the status, and the reason if it was cancelled.
• How your bookings ended — whether each visit was completed, cancelled inside the last 60 minutes before it, or marked by the salon as a no-show. See how this is used.
• Your reviews — the star rating and comment you write after a completed booking.
• Your notifications — the alerts about your bookings that appear under the bell at the top of the page.
• Your location, only while you look— if you allow the “near me” prompt, your browser gives us approximate coordinates. We use them to sort salons by distance for that search and we do not store them against your account.
• Password reset and phone verification codes — stored hashed, good for one use only, and valid for 15 and 10 minutes respectively. A phone code is sent by text message, or by email while text messages are not available. Once you verify a number, we record that it is verified.
• If you work at a salon— the salon’s details you enter (name, address, map coordinates, phone, opening hours, service menu and prices, photos and service icons) and your role at it.

We do not take payment details. Nothing is charged online — you pay the salon directly.

• To run your booking — the salon cannot serve you without knowing who is coming and for what. This is performance of our contract with you.
• To tell you about a booking — by email and in your notifications: confirmation, a change of time, a reassignment, a cancellation, or a no-show recorded against you. Also contract performance; these are service messages, not marketing.
• To keep accounts secure — password reset codes, phone verification, and blocking abusive accounts. Our legitimate interest in a safe platform.
• To keep booking fair— how your bookings ended is used as described below. Our legitimate interest, and the salons’, in bookings that turn up.
• To show ratings— your review and display name appear publicly on the salon’s profile. You choose to post it.
• To fix faults — when something on the site breaks, an error report is sent to our error-monitoring provider. Our legitimate interest in a site that works.
• To show advertising — where consent applies, only with the consent you give in the cookie banner, which you can withdraw at any time.

Two things depend on how your past bookings ended. First, how many bookings you can have open at the same time: a new account can hold one, and once your phone number is verified, completed visits raise that. Late cancellations and no-shows do not lower it. Second, when a salon is deciding whether to accept a request from you, it is shown counts — your completed visits, late cancellations and no-shows, at how many different salons those no-shows were recorded, whether your phone is verified, and when you joined.

A salon is never shown the names of the other salons you have visited, or what you booked there. Nothing is decided about you automatically beyond the limit on open bookings; whether to accept is the salon’s call. If a salon marked you absent and you were there, contact the salon — it can correct the record. The Cancellation Policy has the details.

• The salon you book — sees your name, the services requested, your note and your contact details, so it can serve you and reach you about the appointment, and the counts described above while your request waits for an answer.
• Anyone visiting a salon profile — sees your review, star rating and display name. Nothing else about you is public.
• Our service providers — the hosting and database platforms that run the site; Resend, which delivers our emails; Cloudflare, which stores uploaded photos; and Sentry, which receives error reports — these carry your account number and the page or request that failed, and we have switched off everything else it could collect, such as your IP address. They process data on our instructions only.
• Google — when advertising is switched on, as described in our Cookie Policy.

We do not sell your personal information.

Your account and its booking history stay while your account is open, because that history is the record of what you booked, from whom and for how much. Password reset codes expire after 15 minutes and phone codes after 10. Ask us to delete your account and we will remove it along with your name, email address, phone number and profile photo; once it is gone, reviews written from it stop being shown on salon profiles.

You can ask us to show you what we hold, correct it, delete it, or send you a copy — and you can object to a use or withdraw consent for ads (through the cookie banner) at any time. Write to privacy@salonkoi.com and we will answer within 30 days. If you are in the UK or EU and are unhappy with our answer, you may complain to your national data protection authority.

Traffic to the site is encrypted over HTTPS. Passwords are stored as bcrypt hashes, and reset and verification codes are hashed too. Access to a booking requires your signed-in session, and salon staff can only see bookings at their own salon.

SalonKoi is not intended for children under 13, and we do not knowingly collect their information. If you believe a child has created an account, tell us and we will remove it.

The site sets one cookie of its own — your language choice, and only if you use the language switch. Signing in keeps a session token and a copy of your profile in your browser’s local storage, which is what keeps you signed in between pages; both are removed when you sign out. Each item, and advertising cookies, are covered in full by our Cookie Policy.

If we change what we collect or why, we will update this page and the date at the top. Material changes will be announced on the site before they take effect.