Your data
Privacy policy
Last updated 26 July 2026
This explains what we hold about you and what you can do about it. If you only want the controls, they are on your privacy settings page โ download everything, or ask us to delete it.
Who we are
NearbySalon is a directory and booking platform. When you book or enquire, we are the data fiduciary for your account, and the business you booked with is a separate fiduciary for the record of your visit. Both of us are obliged to look after it.
What we collect, and why
- Account โ your name, mobile, optionally e-mail and city. Needed to sign you in and to let a business recognise your booking.
- Bookings and orders โ what you booked, when, with whom, and what you paid.
- What you write โ reviews, questions, enquiries and support messages.
- Sensitive notes โ if you tell a salon about an allergy, we store it so they can keep you safe. It is shown only to that business, never used for marketing, and never written to our activity logs.
- Technical โ sign-in times, IP address and browser, kept to spot someone else using your account.
What we do not do
- We do not sell your personal data.
- We do not send marketing unless you asked for it, and every message can turn it off.
- We do not read your passwords. They are stored as one-way scrypt hashes and cannot be recovered โ only reset.
Who else sees it
The business you book with sees your booking, your contact details and anything you wrote to them. Nothing is shared with any other business. Reviews and questions are public by design, under the name on your account โ everything else is not.
How long we keep it
- Account and bookings โ while your account is open.
- Sign-in and activity records โ 12 months.
- One-time codes โ 10 minutes, then discarded.
- Invoices and payment records โ as long as tax law requires, even after deletion. We will tell you when this applies.
Your rights
Under the Digital Personal Data Protection Act 2023 you can:
- Get a copy of everything we hold โ a single download, no waiting.
- Correct anything wrong.
- Delete your account. We sign you out everywhere immediately and confirm within 30 days.
- Withdraw consent as easily as you gave it โ one toggle, same page.
- Complain to us first, and to the Data Protection Board of India if we do not resolve it.
Cookies
We set one cookie to keep you signed in, and one to remember which business dashboard you were using. Both are strictly necessary and cannot be turned off without signing out. Anything beyond that โ analytics, advertising โ is off until you say yes, and you can change your mind at any time.
Children
Accounts are for people aged 18 and over. If a child's data reaches us we delete it on becoming aware.
Contact
Our Data Protection Officer can be reached at privacy@nearbysalon.in. We answer within 30 days.
This policy describes how the platform is actually built. It has not yet been reviewed by a lawyer, and should be before the platform accepts real customers.