Privacy

Two different things, and it matters which

If you are a salon, the details of your own account are held by us and this page is our promise to you.

If you are a client who booked an appointment, your details belong to the salon you booked with. She decides what to keep about you and for how long. We hold it for her and do nothing else with it. So anything you want changed or removed, ask her, and she can do it from her own screen in a few taps.

What we hold

• About a salon. Her name, email, phone, business name, address and what she pays us.
• About her clients. Name, mobile, email, appointment history, what was paid, and any notes she chooses to type.
• Card details. Nobody's card number is ever on our servers. Cards are typed into Stripe and we only ever see the last four digits and whether a payment worked.
• The ordinary technical traces any website has: a sign in session, and server logs that record addresses and errors so we can fix things.

Why we hold it

To run the appointment: to take the booking, send the confirmation and the reminder, show the salon her own day, and keep her money records straight. That is the whole list.

We do not sell it. We do not use it for advertising. We do not use one salon's clients to sell anything to anybody, including to those clients. We do not let one salon see another salon's records: each salon's data is separated in the database and the separation is enforced there rather than by the app remembering to ask.

Who else sees it

Only these, and only for the part each one does:

• Stripe. Card details and payments. Your card number is typed into Stripe and never reaches us. Held in Australia and the United States.
• Postmark. Sending email. Confirmations, reminders and anything else the app sends. Held in the United States.
• Our hosting provider. Running the app and storing the database it keeps your records in. Held in Australia.

We will also hand something over if the law requires it, and we will tell the salon unless we are not allowed to.

Reminders and emails

A client gets an email because she made a booking: the confirmation, a reminder before the appointment, and anything about a change to it. That is all. We never email a salon's clients to sell them anything, and nothing is sent off the back of anything but a real booking.

Being forgotten, exactly

A salon can erase a client from her own screen. This is what that does, and it is one way: it cannot be undone.

Gone:

• Her name
• Her mobile number
• Her email address
• Any notes the salon keeps about her
• Any notes about individual visits
• The address every email was sent to

Kept, and why:

• The booking: its date, service, duration, price and status. The salon has to be able to say what work she did and when. With no name on it this is her own trading record, not information about a person.
• The money ledger, every entry. Her takings have to reconcile, and the ledger is insert-only by database permission so it could not be altered even deliberately.
• The client row itself, empty, with its visit and no-show counts. Bookings point at it. Deleting it would orphan them or cascade them away, which would take her accounting with it.
• Invoices the salon received from us. They are about the salon, not about the client, and they are tax records.

So an erased client leaves a nameless appointment and a figure in the salon's books. We would rather say that plainly than promise a deletion that would take her accounts with it.

How long

A salon's records stay while her account exists, and they stay after she stops paying, because they are hers and leaving should never cost her her history. Money records are kept for at least five years because the ATO requires it.

If a salon asks us to close her account and delete everything, we will, apart from what we have to keep for tax.

Keeping it safe

• Everything travels encrypted.
• Card numbers are never on our servers.
• Each salon's data is walled off in the database itself.
• Passwords are stored hashed, so nobody here can read one.
• If something is breached and it affects you, we will tell you and the regulator, as the law requires.

Asking us

A salon can export everything she holds, at any time, from her own settings. If you want to see what we hold about you, or want it corrected, write to kiwicalapp@gmail.com. If you are a client of a salon, ask the salon first: she holds your record and she can act on it immediately.

If you are not happy with how we have handled it, you can complain to the Office of the Australian Information Commissioner.