Privacy Policy
Last updated: [date]
Draft: this policy hasn't been reviewed by a lawyer yet. Have it checked against PIPEDA (and Quebec's Law 25 if you have users there) before launch, then remove this note.
This explains what personal information StyleSpot collects, why, who sees it, and the choices you have. [StyleSpot's legal business name] is responsible for it. Our privacy contact is [name or role, contact email].
What we collect
- Account details: your name, email, password (stored scrambled, never readable), and if you sign in with Google or Apple, the name and email they share with us.
- Profile details you add: phone number, town, address and postal code, photo; for stylists also bio, specialties, services, prices, hours and portfolio photos.
- Bookings: appointments, notes and reference photos you add, reviews and review photos, and messages about a booking.
- Notes stylists keep: a stylist can keep private notes about their clients (e.g. hair type, allergies, colour formulas). Only that stylist sees them.
- Location: if you allow it, your browser location for one search. It isn't saved.
- Payments: when you pay online, Stripe handles your card details; StyleSpot only sees the amount, its status, and an ID Stripe uses for a card you chose to save with a stylist.
- Device: if you turn on notifications, a technical address for sending them to your device.
How we use it
- To run bookings: showing stylists and openings, sending confirmations, reminders and messages, and calendar invites.
- To show distances: addresses are turned into map points. Clients only ever see a stylist's distance and a point rounded to about 1 km; a stylist's full address is shared only with clients who have a confirmed appointment.
- To keep StyleSpot safe: preventing spam and abuse, and reviewing reports.
- We don't sell your personal information, and we don't send marketing without your consent.
Who sees what
- Stylists' public pages (name, photo, town, bio, services, prices, portfolio, reviews) are visible to anyone.
- Client profiles are private. A stylist sees a client's name and booking details, and their phone number only while they have an upcoming appointment.
- Reviews show the reviewer's first name.
- Service providers we use to run StyleSpot: [hosting provider], [email provider], Stripe for payments, [SMS provider, e.g. Twilio] for texts you opt into, OpenStreetMap/Nominatim for maps and address lookups, and Google or Apple if you sign in with them. They only get what they need to provide their service. [List where each stores data, e.g. Canada or the US.]
- We may disclose information if the law requires it.
Cookies
We use one cookie to keep you logged in. We don't use advertising or tracking cookies.
How long we keep it
While your account is open. If you delete your account, we remove your personal details, photos and notes; past bookings stay without your name so the other side's records still make sense. Backups are kept for 14 days, so deleted information is fully gone from them after that.
Your choices and rights
- See and correct your information in your profile and Account settings.
- Choose which reminder, review and message emails you get, and turn texts and device notifications on or off, in Account settings.
- Delete your account in Account settings.
- Ask for a copy of your information, or raise a concern, by emailing [contact email]. You can also contact the Office of the Privacy Commissioner of Canada.