Your data, handled calmly

SalonWard is scheduling and point-of-sale software for salons and barbershops. Two kinds of people trust us with data, and the roles differ:

• Salon teams (the businesses that sign up): for your account and business data, SalonWard decides how the platform stores and secures it.
• Salon clients (the people who book): your salon owns its client book and decides what happens with it. SalonWard processes that data on the salon's behalf and never uses it for anything else. Questions about your record start with your salon.

SalonWard, the operator of salonward.com, is the controller for the platform: accounts, subscriptions, billing, support and this website. For questions about privacy, or to exercise any of the rights below, one address reaches a human:

Only what the product needs to work: account details (name, email, a hashed password), the salon's business records (services, appointments, invoices, stock), the client records a salon keeps (contact details, visit history, notes, consents), and short-lived technical logs that keep the service healthy.

Card payments are handled by the payment provider on their own secure pages. Full card numbers never reach SalonWard's servers.

Every purpose rests on one of the AVG's legal bases, never on “because we can”:

• Running your account and the product itself, such as storing your salon's records, sending booking confirmations and processing subscriptions: necessary to perform our contract with you.
• Keeping invoices and administration: a legal (fiscal) obligation. Dutch law requires a business to keep its records for seven years. The salon's invoices stay in its account for as long as the account exists, and go to the salon in its export when it closes.
• Short-lived technical and security logs, such as sign-in attempts, rate limits and error traces: our legitimate interest in keeping the platform secure and working, and nothing beyond that interest.
• Anything consent-based, such as a salon's marketing emails to its clients, happens only with recorded consent, which can be withdrawn at any time and is honoured by an enforced unsubscribe link.

We don't sell data, we don't run advertising trackers, and we don't profile visitors across other websites. Marketing emails a salon sends through SalonWard always carry a working unsubscribe link, and client consents are recorded per person.

As few parties as the product allows, each bound by a processing agreement and used only to deliver the service. These are the processors, by name:

• Hosting. Hostinger International Ltd. (Cyprus) runs the servers in a data centre in Frankfurt, Germany. The database, the application and the daily backups live there.
• E-mail. TransIP B.V. (the Netherlands) delivers the e-mails the product sends, such as confirmations, reminders and receipts. It receives the recipient's address and the message.
• Subscription payments. Stripe Payments Europe, Ltd. (Ireland) takes the payments salons make to SalonWard and handles their card or bank details on its own pages. Full card numbers never reach SalonWard.
• Text messages. Twilio Ireland Limited sends the texts a salon switches on (booking confirmations, reminders, changes and cancellations, waitlist offers and membership notices) and the messages the salon's team writes to a client in Conversations, and receives the client's replies, such as STOP. It receives the client's phone number, the full text of every message as the salon sends it, including a stop link, and the salon's sender name, and processes them in the United States.

Some data goes elsewhere only because a salon, or you, chose it:

• When a salon connects its own Stripe or Mollie account to take client payments, that provider handles those payments under the salon's own agreement with it, on its own secure pages.
• When you switch on notifications, they travel encrypted through the push service of your browser or phone maker (such as Google, Apple, Mozilla or Microsoft). That service sees your device's address, not the content.
• When a salon sets up the developer API or a webhook, data goes to the addresses that salon configured, on its instruction and under its responsibility.

That is everything. No ad networks, no analytics vendors, no data brokers, and nobody receives this data for their own use.

As short as the product allows, as long as the law requires, enforced by automatic retention jobs, not good intentions:

• Account and salon data: for as long as the account exists. When the owner closes the account, the salon receives an export of its data, including its invoices, invoice lines and payments, and SalonWard deletes everything 30 days after closure.
• Invoices and billing administration: for as long as the account exists, so the salon can meet its seven-year fiscal retention duty. This is the one category a client's erasure request cannot shorten. At closure they go to the salon in its export, and the salon keeps its own fiscal records from then on.
• E-mail and text message logs: message contents are stripped after 90 days and the remaining delivery records deleted after 13 months.
• Appointment change history: 13 months. The appointments themselves are the salon's records and follow the salon's own retention choices.
• Audit logs of sensitive changes: two years.
• Daily backups rotate automatically. The oldest is overwritten after fourteen days, so deleted data leaves the backup set within two weeks. A backup copy kept away from the server is encrypted before it leaves.

Functional only. Each one exists so something you asked for keeps working, which is why Dutch law requires no consent banner for them (and why there isn't one):

• a secure, encrypted sign-in cookie for salon teams (expires after 12 hours),
• a per-salon cookie for the client portal and payment flows (expires after 1 hour),
• your language choice (kept for a year; stores the two-letter language and nothing else),
• small in-app preferences for signed-in users, such as selected branch, collapsed sidebar and dismissed getting-started card (kept for a year),
• and your light/dark choice, which lives in your browser's own storage and is never transmitted to us.

There are no third-party, advertising or analytics cookies. Delete them any time via your browser's site-data settings. Signing in and your saved preferences simply start fresh.

The database, the application and the backups are in the European Union. Two of the processors above belong to groups based in the United States. Stripe may process payment data there, and Twilio processes text messages there, meaning the recipient's phone number and the message.

Those transfers rest on the EU-US Data Privacy Framework, under which both companies are certified, and on the European Commission's standard contractual clauses in their processing agreements. Nothing else leaves the EU/EEA. If that changes, this page changes first.

Export and erasure aren't a support ticket. They are built into the product:

• Salons can export a client's complete record and, on request, erase it. Personal identifiers are anonymized while the non-personal business records a salon must keep (like invoice totals) remain.
• Salon clients can see their own visits, packages and points through their salon's client portal, and can ask their salon for a copy or erasure of their record at any time.
• Salon account holders can correct their business data directly in the app, and cancelling a subscription stops renewals while access runs to the end of the paid period.

Under the AVG (GDPR) you can ask us, or your salon in the case of salon client records, for:

• Access: a copy of the personal data held about you.
• Rectification: correction of anything inaccurate or incomplete.
• Erasure: deletion of your data where no legal duty requires keeping it.
• Restriction: pausing processing while a dispute or check is resolved.
• Portability: your data in a structured, machine-readable format. The product's own exports already are.
• Objection: to processing based on legitimate interest, and always to direct marketing.
• Withdrawal of consent: at any time, for anything that runs on consent, without affecting what happened before.

Salon clients exercise these through their salon (the controller for their record), and salons find the export and erasure tools built into the product. Platform account holders write to us directly; we respond within a month.

None. SalonWard makes no automated decisions with legal or similarly significant effects about anyone, and builds no profiles across other websites.

Encrypted connections everywhere, passwords stored only as modern salted hashes, every salon's data isolated down to the database row, two-factor authentication available on every account, sessions you can revoke, and daily backups that stay in the EU. Security work is boring on purpose. This page only claims what the product verifiably does.

If a data breach ever creates a risk to people's rights, we notify the Autoriteit Persoonsgegevens within 72 hours and the people affected without undue delay, in plain language. For salon client data, we inform the affected salons without undue delay so they can meet their own duties.

For the client records a salon keeps in SalonWard, the salon is the controller and SalonWard is the processor. The processing agreement (verwerkersovereenkomst) is part of the terms for every salon account and describes exactly what that means, including instructions, confidentiality, security, sub-processors, assistance and deletion.

Tell us first. Most privacy questions are resolved in one reply. You also always have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens which itself asks that you contact the organisation first.

If how we handle data changes, this page changes first and the date above moves. Substantial changes, such as a new processor, are e-mailed to account owners before they take effect.