Processing on your instructions

This agreement applies between the business holding a SalonWard account (the salon — the controller) and SalonWard, operator of salonward.com (SalonWard — the processor), for all personal data the salon stores in the product. It applies for as long as the account exists and covers nothing else.

Client records (contact details, visit history, notes, photos, consents), appointments and waitlist entries, staff records (profiles, schedules, hours), invoices and payments, messages the salon sends, and reviews — processed solely so the salon can run its business in SalonWard: scheduling, point of sale, communication, reporting. The people concerned are the salon's clients, staff and contacts.

SalonWard processes the salon's data only to provide the product and its documented features — which are the salon's standing instructions — and never for purposes of its own. No selling, no profiling, no advertising, no training anything on it. If a legal obligation ever forces processing beyond this, SalonWard informs the salon first unless the law forbids it.

Everyone SalonWard authorises to touch personal data is bound to confidentiality, and access is limited to what operating the platform actually requires. Platform-operator actions on a salon's account are logged in that salon's own audit trail.

SalonWard implements the technical and organisational measures described on the privacy page — encrypted transport, hashed credentials, database-row isolation per salon, two-factor authentication, revocable sessions, EU-resident encrypted backups, and automatic retention enforcement — and keeps them current with the state of the art.

The salon grants general written authorisation for the sub-processor categories on the privacy page (EU hosting, transactional email delivery, payment providers). Each is bound by obligations equivalent to this agreement, and SalonWard remains fully responsible for their work. Changes are announced in the product before they take effect, with the right to object; objecting salons may terminate and export.

SalonWard assists the salon with data-subject requests — export, correction and erasure are product features rather than tickets — and, where relevant, with security, breach notification and data-protection impact assessments, taking into account what the platform can technically know.

SalonWard informs affected salons of a personal data breach without undue delay after becoming aware of it, with what is known about its nature, scope and mitigation — so the salon can meet its own notification duties toward the Autoriteit Persoonsgegevens and the people affected.

When an account closes, the salon exports its data first (the tools are built in). SalonWard then deletes the salon's personal data — including from rotating backups within the fourteen-day backup cycle — except what the law requires keeping, such as the seven-year fiscal administration.

SalonWard makes available the information reasonably needed to demonstrate compliance with this agreement, and contributes to audits the salon is legally entitled to conduct — starting with the documentation on the privacy page, which is kept truthful by design.

This agreement is part of the terms; where the two conflict on personal-data matters, this agreement wins. Liability follows the terms. Dutch law governs, and changes are announced like changes to the terms — the date above moves.