Privacy Policy

1. Introduction

Welcome to Baglioré Beauty ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our software platform and related services (collectively, the "Service").

We are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This policy outlines our practices regarding the collection, use, and disclosure of your information through your use of our Service, and sets forth your privacy rights.

By accessing or using our Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us when you register for an account, subscribe to our Service, or communicate with us. This information may include:

• Identity Information: Your name, username, business name, and professional profile
• Contact Information: Email address, phone number, and business address
• Business Information: Company name, logo, business description, and related operational details
• Financial Information: Payment details, transaction history, and billing information
• Account Information: License type, subscription status, and user preferences
• Customer Relationship Data: Information about your customers that you input into the system, including contact details, appointment history, and service preferences
• Communications: Records of your interactions with our support team and feedback you provide

2.2 Automatically Collected Information

When you access or use our Service, we automatically collect certain information about your device and usage patterns. This information may include:

• Log Data: IP address, browser type, operating system, referring/exit pages, clickstream data, and timestamps
• Device Information: Device type, device ID, and hardware specifications
• Usage Data: Features accessed, buttons clicked, time spent on pages, navigation paths, and usage frequency
• Location Data: General geographic location based on IP address
• System Performance: Error reports, technical issues encountered, and performance metrics

This information is collected using various technologies, including cookies, web beacons, and similar tracking technologies. For more information about our use of these technologies, please see Section 7 below.

2.3 Customer Management Data

As part of providing our salon management service, we process information about your customers that you input into the system, including:

• Customer Contact Details: Names, phone numbers, email addresses
• Appointment Information: Service types, scheduled dates/times, practitioner assignments
• Service History: Past appointments, service notes, product preferences
• Financial Records: Payment amounts, payment methods, purchase history
• Customer Preferences: Service preferences, special requests, satisfaction ratings

You are responsible for obtaining appropriate consent from your customers for the collection and processing of their personal information through our Service, in accordance with applicable privacy laws.

3. How We Use Your Information

We use the information we collect for various purposes related to providing, maintaining, and improving our Service. These purposes include:

3.1 Service Provision

We use your information to:

• Create and manage your account, including verifying your identity and eligibility
• Process payments, subscriptions, and transactions
• Manage licenses and verify compliance with our terms
• Provide the core functionality of our salon management system, including appointment scheduling, customer relationship management, and invoicing
• Personalize your experience based on your preferences and usage patterns
• Respond to your inquiries, provide technical support, and troubleshoot issues
• Fulfill any other purpose for which you provide the information

3.2 Service Improvement

We use collected data to:

• Monitor and analyze usage patterns and trends to improve our Service
• Identify user needs and preferences to enhance user experience
• Develop new features, functionality, and services
• Troubleshoot and resolve technical issues
• Optimize performance and ensure system stability
• Strengthen security measures and protect against unauthorized access
• Conduct research and analytics to improve our business operations

3.3 Communication

We use your contact information to:

• Send transactional messages related to your account, such as confirmation emails and billing receipts
• Provide service updates, maintenance notifications, and system alerts
• Respond to your questions, comments, and support requests
• Send marketing communications about new features or services (with your consent where required by law)
• Deliver license and subscription renewal reminders
• Alert you about security incidents or privacy concerns if they arise
• Request feedback on our Service through surveys or interviews

You can opt out of marketing communications at any time by following the unsubscribe instructions included in each email or by contacting us directly.

4. Data Storage and Security

4.1 Data Storage

We implement the following data storage practices:

• Your information is stored on secure servers located in certified data centers with redundant systems to prevent data loss
• All database connections are encrypted using industry-standard protocols
• We maintain regular backup procedures to protect against accidental data loss
• We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements
• After termination of your subscription, we retain your data for a limited period (typically 30 days) to allow for data export, after which it may be deleted from our active systems
• Archived copies of your data may be retained for longer periods as required by law or for legitimate business purposes

4.2 Security Measures

We prioritize the security of your information and implement various measures to protect it:

• All sensitive data, including personal information and payment details, is encrypted during transmission and storage
• We use secure payment processing systems that comply with PCI DSS standards
• We conduct regular security audits and vulnerability assessments
• Access to personal information is restricted to authorized personnel only, based on the principle of least privilege
• We utilize authentication mechanisms, including password requirements and multi-factor authentication options
• Our systems are monitored for unauthorized access attempts and suspicious activities
• We maintain incident response procedures to address potential data breaches promptly

While we implement safeguards to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, and we encourage you to take steps to protect your personal information, such as maintaining strong passwords and logging out of your account after use.

5. Information Sharing

5.1 Third-Party Service Providers

We may share information with trusted third parties who assist us in operating our business and providing the Service. These service providers have access to your information only to perform specific tasks on our behalf and are obligated to protect your information. We may share information with:

• Payment Processors: To handle secure payment transactions
• Cloud Service Providers: For secure data storage and hosting
• Analytics Providers: To help us understand how our Service is used
• Customer Support Tools: To assist with support inquiries and communication
• Email Service Providers: To send transactional and marketing emails

All third-party service providers are contractually obligated to use your information only for the purpose of providing the requested services and to implement appropriate data security measures.

5.2 Legal Compliance

We may disclose your information if required to do so by law or in response to valid legal requests, such as:

• Court orders, subpoenas, or other legal processes
• Requests from government or law enforcement authorities
• When necessary to comply with applicable laws and regulations
• To protect or defend our rights, property, or safety, or that of our users or others
• In connection with investigations of suspected fraud, intellectual property infringement, or other illegal activities

We will only disclose the specific information required by the particular legal request or obligation.

6. Data Subject Rights

Depending on your location, you may have certain rights regarding your personal information under applicable privacy laws, such as the General Data Protection Regulation (GDPR) or the California Consumer Privacy Act (CCPA).

These rights may include:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Rectification: You may request that we correct inaccurate or incomplete information about you.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal information.
• Right to Restriction of Processing: You may ask us to temporarily or permanently stop processing your personal information.
• Right to Data Portability: You may request a copy of your personal information in a structured, machine-readable format.
• Right to Object: You may object to the processing of your personal information in certain circumstances.
• Rights Related to Automated Decision-Making: You may contest automated decisions made about you and request human intervention.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing your request.

Please note that some of these rights may be limited where we have compelling legitimate grounds to process your information or where we are required to comply with legal obligations.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information about your browsing activities on our Service. Cookies are small data files stored on your device that help us improve our Service and your experience.

We use these technologies for the following purposes:

• Essential Cookies: Necessary for the operation of our Service, such as session management, authentication, and security
• Preference Cookies: Allow us to remember your settings and preferences
• Analytics Cookies: Help us understand how visitors interact with our Service by collecting and reporting information anonymously
• Performance Cookies: Collect information about how you use our Service to improve its functionality
• Marketing Cookies: Track your browsing habits to deliver targeted advertising (used only with consent where required by law)

You can control cookies through your browser settings. Most web browsers allow you to manage your cookie preferences by blocking, deleting, or disabling cookies. Please note that if you choose to block all cookies (including essential cookies), you may not be able to access or use all features of our Service.

8. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at [email protected], and we will take steps to delete such information from our systems.

If we learn that we have collected personal information from a child under 18 without verification of parental consent, we will take steps to delete that information as quickly as possible.

9. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or legal requirements. We will notify you of any material changes by posting the updated Privacy Policy on our website and changing the "Last Updated" date. In some cases, we may provide additional notice, such as by sending you an email notification.

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information. Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

If you have questions about this Privacy Policy or our privacy practices, please contact us at [email protected].

Last updated: February 2025