GDPR and Cookie Notice
Last Updated 1st February 2025
1. Introduction
Stylaa Ltd ("Stylaa", "we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy and GDPR & Cookie Notice outlines how we collect, use, store, and protect your personal information when you use our mobile application and website ("App" and "Website").
This policy applies to all users of the Stylaa platform, including Customers and Service Providers ("Providers"), such as stylists, salons, barbers, and other professionals. By using the Stylaa App or Website, you agree to the terms set out in this Privacy Policy. If you do not agree, you must discontinue use immediately.
2. Who We Are
Stylaa Ltd is a company registered in England and Wales, with its registered office at [Company Address]. For any questions regarding this Privacy Policy or your data rights, you may contact us atprivacy@getstylaa.com.
3. What Personal Data We Collect
We collect various types of personal data depending on your interactions with Stylaa:
Account Information: Name, email address, phone number, password.
Booking Information: Appointment details, payment status, transaction history.
Payment Information: Payment card details are processed securely via Stripe. We do not store your full payment details.
Device & Technical Information: IP address, device type, browser information, app usage data.
Location Data: If enabled, we collect location information to enhance booking experience.
Reviews & Communications: Customer feedback, messages exchanged between Customers and Providers.
Marketing Preferences: Your choices regarding promotional emails and notifications.
4. How We Collect Your Data
We collect personal data in the following ways:
Directly from You: When you register an account, book a service, leave a review, or contact support.
Automatically: When you interact with our App or Website (e.g., cookies, analytics tracking).
From Third Parties: Payment processors, identity verification partners, and social media (if you link your account).
5. Why We Collect Your Data & Legal Basis
We process your personal data under the following legal bases:
Purpose
Legal Basis
Retention Period
Account registration & management
Contractual necessity
5 years of inactivity
Processing bookings & payments
Contractual necessity
10 years (tax compliance)
Sending service-related emails & notifications
Contractual necessity
Until account deletion
Marketing communications (with consent)
Consent
Until consent withdrawn
Fraud prevention & security measures
Legitimate interest
7 years
Legal compliance & dispute resolution
Legal obligation
Until resolution
6. How We Use Your Data
We use personal data to:
Provide and manage bookings on the Stylaa platform.
Process payments securely through Stripe.
Improve user experience via analytics and feedback.
Detect and prevent fraud or suspicious activity.
Enable communication between Customers and Providers.
Offer personalised marketing (if consented).
7. How We Share Your Data
We do not sell your data. However, we may share your data with:
Service Providers: Payment processors (e.g., Stripe), ID verification (e.g., Shufti Pro).
Legal Authorities: If required by law for fraud prevention or compliance.
Business Transfers: If Stylaa undergoes a merger, acquisition, or asset sale.
Marketing Partners:If you have given consent to receive third-party offers.
8. GDPR Compliance & Your Rights
Under the UK General Data Protection Regulation (UK GDPR), you have rights over your personal data, including:
Right to Access: Request a copy of your personal data.
Right to Rectification: Correct inaccurate or incomplete data.
Right to Erasure: Request deletion of your data under certain conditions.
Right to Restrict Processing: Limit how we use your data in certain circumstances.
Right to Data Portability: Receive your data in a portable format.
Right to Object: Object to data processing for direct marketing or legitimate interests.
To exercise your rights, contact us at privacy@getstylaa.com.
9. How We Protect Your Data
We implement strict security measures to protect your data from unauthorised access, loss, or misuse, including:
Encryption for payment data.
Secure servers and firewalls.
Multi-factor authentication for Provider accounts.
Regular security audits and compliance reviews.
10. Cookie Notice & Tracking Technologies
Stylaa uses cookies and similar technologies to:
Remember your preferences.
Improve platform functionality.
Track analytics for performance insights.
Deliver personalised marketing content.
Cookies fall into the following categories:
Essential Cookies: Necessary for platform functionality.
Performance Cookies: Help us track site performance and usage.
Functional Cookies: Store user preferences for a personalised experience.
Marketing Cookies: Used to deliver relevant advertisements.
You can manage cookie settings via your browser or opt-out of non-essential cookies at any time. For more details, refer to our Cookie Policy.
11. Data Retention
We retain personal data only as long as necessary for legal, contractual, or operational purposes. The specific retention periods are outlined in Section 5 above.
12. Third-Party Links & Social Media
Stylaa may include links to external websites. We are not responsible for their privacy policies.
If you interact with us via social media, your data will be subject to the platform’s policies.
13. Changes to This Policy
We may update this Privacy Policy & Cookie Notice periodically. Any material changes will be communicated via the App, Website, or email. Continued use of Stylaa after changes constitutes acceptance of the updated policy.
14. How to Contact Us
If you have questions or concerns about this Privacy Policy & GDPR & Cookie Notice, please contact us:
Email: privacy@getstylaa.com
Postal Address: [Company Address]
Data Protection Officer (DPO): dpo@getstylaa.com
If you are unsatisfied with how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at www.ico.org.uk.
By using Stylaa, you acknowledge and agree to this Privacy Policy, GDPR Compliance, and Cookie Notice.