Book Hair

Privacy policy

Last updated: 16 July 2026

This policy explains what data we process when you use Book Hair, and why. We comply with the Swiss Data Protection Act (nFADP) and the GDPR.

Data controller

For operating the Book Hair platform (salon accounts, technical logs, cookies), the data controller is Hiurda's Holistic Agency. For the booking data of a salon's clients, the salon concerned is the controller; Book Hair processes that data on its behalf as a processor, under a data processing agreement. For any question about your data, write to us at hiurda.pro@gmail.com.

Data we process

  • Salon account data: name and email address of the person responsible for the salon.
  • End-client booking data: name, email address, phone number and appointment details.
  • Technical logs: data needed for the operation and security of the service.

Purposes

We use this data to provide the booking service and to send email confirmations and reminders.

Legal basis

We process this data to perform the booking or service contract (art. 6(1)(b) GDPR) and, for technical logs, based on our legitimate interest in keeping the service secure and reliable (art. 6(1)(f) GDPR).

Cookies

We use functional cookies only: session and authentication, and language preference. These are required for the service to work, so no consent banner is shown. No advertising cookies and no analytics tracking are used at this time.

Email delivery

Emails (confirmations and reminders) are sent via Resend or, where a salon has configured one, the salon's own SMTP provider. These emails may include a tracking pixel that tells the salon whether the message was opened; this signal is used solely to follow up on booking-related communication.

Hosting and subprocessors

We use the following subprocessors to operate Book Hair:

  • Vercel Inc. (USA) — application hosting.
  • MongoDB, Inc. — database hosting (MongoDB Atlas, European Union region).
  • Resend, Inc. (USA) — transactional email delivery (confirmations and reminders), unless the salon has configured its own email provider.
  • Infomaniak SA (Switzerland) — storage of uploaded documents (accounting receipts).
  • Payrexx AG (Switzerland) — online payment processing, only for salons with online payments enabled.
  • Google LLC (USA) — automated receipt text extraction (Gemini API), only when a salon uses receipt scanning.

Where data is processed outside Switzerland or the EEA, transfers are safeguarded by the EU Standard Contractual Clauses.

Retention

Account data is kept while the account is active and deleted at the latest 12 months after it is closed. Booking data is kept for at most 2 years after the last appointment, unless a longer legal retention duty applies.

Your rights

You have the right to access, rectify, delete and port your data. To exercise it, write to us at hiurda.pro@gmail.com. You may also lodge a complaint with a supervisory authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the EU, your country's data protection authority.

Contact

For any data protection question: hiurda.pro@gmail.com.