Privacy Notice

The Consultify legal entity is {{LEGAL_ENTITY_NAME}}, registered at {{REGISTERED_ADDRESS}}, company number {{COMPANY_NUMBER}}. Privacy enquiries can be sent to {{PRIVACY_CONTACT_EMAIL}}.

Consultify determines the purposes and means of platform operations, account security, product administration, and Consultify platform and public-booking journey analytics. For client, appointment, treatment, salon policy, and salon communications data, the relevant salon ordinarily determines the service purpose and Consultify provides the platform under the applicable agreement. The final controller and processor wording must match those agreements and legal review.

• Account and identity details, such as name, contact details, role, sign-in security information, and salon membership.
• Salon and service data, including services, staff, resources, schedules, forms, and workspace settings.
• Client and booking data, including contact details, appointment requests, treatment or consultation information, acknowledgements, and communication choices.
• Payment and billing records. Payment card details are handled through the relevant Stripe feature and are not intended to be stored directly in Consultify application records.
• Security and operational information needed to prevent abuse, protect accounts, deliver requested features, investigate failures, and support users.
• Optional analytics information only after permission, including public-booking interactions, referral context, browser details, and a temporary random journey identifier.

• To provide accounts, public booking, consultations, scheduling, communications, payments, and features the user or salon requests.
• To perform contracts with customers and take requested steps before entering a contract.
• To meet legal, accounting, safeguarding, and regulatory obligations where they apply.
• To protect the service, prevent fraud and abuse, enforce access controls, and keep reliable operational records.
• With permission, to understand visits and booking journeys and improve Consultify. Analytics permission does not authorise advertising, unrelated profiling, or cross-site tracking.

Where consent is the legal basis, it may be withdrawn at any time without affecting processing that was lawful before withdrawal. Cookie and similar-technology permission is separate from salon marketing consent, booking policies, treatment consent, and payment authorisations.

Essential technologies support sign-in, security, bookings, payments, requested preferences, and privacy choices. Optional analytics is off unless the visitor actively allows it. The service continues to work when optional analytics is rejected.

Consultify does not install Google Analytics or Google Ads as part of this release. Public-booking analytics does not store raw IP addresses in the analytics event table. Linkable raw journey events are retained for no more than 30 days, and aggregate reporting may be retained for up to 13 months.

Data may be made available to authorised salon staff and Consultify personnel who need it for their role, and to service providers that support hosting, communications, payments, security, and requested integrations under appropriate terms.

Stripe is used only when a payment, card, billing, or account-connection feature is requested. Meta is used only when an account owner requests the WhatsApp business connection or related messaging feature. Provider notices and technology details are listed in the Cookie Notice. Consultify does not sell personal data.

Some service providers may process data outside the United Kingdom or the country where the user is located. Where required, Consultify will use an approved transfer mechanism and supplementary safeguards. Final production wording must reflect the actual hosting regions, providers, and signed agreements.

Consultify keeps personal data only for as long as needed for the purpose for which it was collected, applicable legal or professional obligations, dispute handling, security, and documented deletion schedules. Transactional booking, payment, and salon records are kept separately from optional journey analytics and are not deleted merely because analytics permission is withdrawn.

Privacy-choice records are proposed to be retained for up to 24 months after expiry or withdrawal for consent and objection evidence, subject to final legal approval.

Depending on the applicable law and circumstances, a person may have rights to access, correct, erase, restrict, or object to processing; receive portable data; withdraw consent; and complain to a data-protection authority. Requests can be sent to {{PRIVACY_CONTACT_EMAIL}}. Consultify may need to verify identity and determine whether the request should be handled with the relevant salon.

Consultify uses access controls, authenticated sessions, request-forgery protection, encryption in transit, scoped tenant access, rate limits, audit records, and provider security features appropriate to the service. No security measure can eliminate every risk, and security controls are reviewed as the service changes.

Consultify is a business platform and is not directed to children for independent account use. Salons remain responsible for any guardian or minor-related requirements in the services they provide.

Material changes to optional analytics purposes, providers, or this notice version cause optional technology to remain off until a fresh choice is made. The effective date and version will be updated when this notice changes.

Contact: {{PRIVACY_CONTACT_EMAIL}}