Privacy Policy
SalonKoi connects you with nearby salons and barbershops. This page explains exactly what we hold about you, why, and what you can ask us to do with it.
Last updated 25 August 2026
Who we are
SalonKoi (“we”, “us”) runs this booking platform. We are the data controller for the account and booking information described below. Each salon you book with is a separate business and its own controller for what it does with your booking once it has it.
Questions, corrections or deletion requests: privacy@salonkoi.com.
What we collect
Only what a booking actually needs:
- Your account — name, email address, and phone number if you give one. Your password is stored only as a bcrypt hash; we never hold the password itself and cannot read it.
- Your bookings — the salon, the services you chose and their price at the time you booked, any note you added, the serial number and time the salon assigned, who is serving you, the status, and the reason if it was cancelled.
- Your reviews — the star rating and comment you write after a completed booking.
- Your location, only while you look— if you allow the “near me” prompt, your browser gives us approximate coordinates. We use them to sort salons by distance for that search and we do not store them against your account.
- Password reset codes — stored hashed, valid for 15 minutes, and deleted once used.
- If you work at a salon— the salon’s details you enter (name, address, map coordinates, phone, opening hours, service menu and prices) and your role at it.
We do not take payment details. Nothing is charged online — you pay the salon directly.
Why we hold it, and on what basis
- To run your booking — the salon cannot serve you without knowing who is coming and for what. This is performance of our contract with you.
- To email you about a booking — confirmation, a change of time, a reassignment, or a cancellation. Also contract performance; these are service messages, not marketing.
- To keep accounts secure — password reset codes and blocking abusive accounts. Our legitimate interest in a safe platform.
- To show ratings— your review and display name appear publicly on the salon’s profile. You choose to post it.
- To show advertising — where consent applies, only with the consent you give in the cookie banner, which you can withdraw at any time.
Who sees it
- The salon you book — sees your name, the services requested, your note and your contact details, so it can serve you and reach you about the appointment.
- Anyone visiting a salon profile — sees your review, star rating and display name. Nothing else about you is public.
- Our service providers — the hosting and database platforms that run the site, and Resend, which delivers our emails. They process data on our instructions only.
- Google — when advertising is switched on, as described in our Cookie Policy.
We do not sell your personal information.
How long we keep it
Your account and its booking history stay while your account is open, because that history is the record of what you booked, from whom and for how much. Password reset codes expire after 15 minutes. Ask us to delete your account and we will remove it along with your name, email address and phone number; once it is gone, reviews written from it stop being shown on salon profiles.
Your rights
You can ask us to show you what we hold, correct it, delete it, or send you a copy — and you can object to a use or withdraw consent for ads (through the cookie banner) at any time. Write to privacy@salonkoi.com and we will answer within 30 days. If you are in the UK or EU and are unhappy with our answer, you may complain to your national data protection authority.
How we protect it
Traffic to the site is encrypted over HTTPS. Passwords are stored as bcrypt hashes, and reset codes are hashed too. Access to a booking requires your signed-in session, and salon staff can only see bookings at their own salon.
Children
SalonKoi is not intended for children under 13, and we do not knowingly collect their information. If you believe a child has created an account, tell us and we will remove it.
Cookies and local storage
The site itself sets no cookies. Signing in stores a session token in your browser’s local storage, which is what keeps you signed in between pages. Advertising cookies are a separate matter and are covered in full by our Cookie Policy.
Changes to this policy
If we change what we collect or why, we will update this page and the date at the top. Material changes will be announced on the site before they take effect.