Privacy policy

Data controller

Federico Parisi. For any request: support@ttsalon.com.

Data we collect

Account data: first name, last name, email, phone and, if you add them, photo and location.

Usage data: bookings, associated and favourite salons, messages and photos sent in chat, reviews, likes and content views.

Location: only if you allow it, to show salons nearby; we don't store it on our servers.

Notifications: the device code to send you push notifications, if you turn them on.

Technical data: information needed to run and secure the service.

Why we use it

To provide the service (performance of the contract): account, bookings, chat, reviews and notifications.

For security, abuse prevention and moderation of reports (legitimate interest).

To comply with legal obligations.

We don't use your data for third-party advertising and we don't sell it.

Who sees your data

Only your photo, name and location (if set) are public. Reviews show your photo, first name and surname initial.

Your phone and email are visible only to the salons you're a client of and to the app administrators.

The salon you book with sees the appointment details and the notes you write.

The app administrators can read chats and write on behalf of a salon, only for support and moderation: each time they do, the action is logged.

Providers

We use providers that process data on our behalf: Supabase (database, storage and sign-in, on servers in London: the European Union recognises the United Kingdom as adequate for data protection), Expo (push notification delivery), Apple and Google (sign-in with their account and app distribution), GitHub (runs the nightly backup of the database, without keeping it) and Cloudflare (stores those backups, hosts the TT Salon website, forwards the emails you send us and, while you sign up, checks that the domain of your email exists: it receives only the part after the @). Emails arrive in a Proton mailbox, in Switzerland, a country the European Union recognises as adequate. GDPR agreements are in place with each of them; for providers based in the United States the transfer is covered by the EU-US Data Privacy Framework or by the standard contractual clauses approved by the European Commission.

Maps come from OpenFreeMap and address suggestions from Komoot's Photon, both built on OpenStreetMap data: they receive the phone's IP address and, for suggestions, the address the salon is typing.

How long

We keep your data while your account is active. If you delete your account we erase or anonymise your personal data, including your profile photo and the photos you sent in chats; past bookings remain, anonymised, in the salons' statistics. For security we keep for 30 days the log of the searches salons make to invite someone.

Every night we make a backup of the database: one for each day of the month, replaced the following month, and the one of the first of each month, replaced after a year. The data of a deleted account can therefore remain in these backups for up to a year; we use them only to restore the service after a failure and, if we ever restored one, we would erase the data of deleted accounts again.

Your rights

You can request access, rectification, erasure, restriction, portability and object to processing by writing to support@ttsalon.com. We reply within one month of the request, as the GDPR requires. You can also lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Deleting your account

You can delete your account at any time in the app, under Profile → Delete account, or request it from the web page /en/delete-account.

Children

The service is for people aged 14 or over.

Security

Data travels over encrypted connections and access is limited by permissions enforced directly in the database.

Changes

If this policy changes significantly we'll tell you in the app.