Privacy Policy

This Privacy Policy explains how StylistSelect (“StylistSelect,” “we,” “us”) collects, uses, and shares personal information. It applies to our website, dashboard, and the embeddable matching widget (together, the “Service”).

Two roles. For information about the salon owners and staff who hold accounts with us, StylistSelect is the data controller. For information about a salon’s own clients collected through the widget embedded on that salon’s website, the salon is the controller and StylistSelect acts as a processor on the salon’s behalf. If you are a salon’s client, please also review that salon’s privacy notice.

1. Information we collect

Account information. When a salon owner or staff member registers, we collect name, email address, password (stored only as a secure hash), time zone, and role.

Salon and stylist content. Salon details, categories, services, stylist profiles, and the answers stylists give to matching questionnaires.

Widget-visitor information. When a client uses the matching widget on a salon’s site, we record the answers they give, the quiz interactions and outcome, and technical data including IP address, approximate location derived from that IP (city, region, country, and coarse coordinates), browser and device information, and the referring page. This supports the salon’s matching results and usage analytics.

Security and audit logs. Sign-in records (including IP address and browser), and administrative action logs.

Billing information. Subscriptions are processed by Stripe. We do not store full card numbers; we retain a Stripe customer and subscription identifier and your plan status.

Integration data. If a salon connects Phorest, we sync staff and service records and store the salon’s Phorest credentials in encrypted form to perform that sync.

2. How we use information

• Provide, operate, and improve the Service and the matching results.
• Authenticate users and secure accounts.
• Produce analytics and reporting for salons (e.g., quiz volume, conversions, and approximate visitor location).
• Process subscriptions and payments.
• Communicate with account holders about the Service.
• Detect, prevent, and investigate fraud, abuse, and security issues.
• Comply with legal obligations.

3. Legal bases (EEA/UK)

Where the GDPR or UK GDPR applies, we rely on: performance of a contract (to provide the Service); legitimate interests (to secure, operate, and improve the Service and provide salon analytics); consent (where required, such as certain widget analytics); and legal obligation. Where we act as a processor for a salon, the salon is responsible for establishing the legal basis for its clients’ data.

4. How we share information

We do not sell personal information. We share it only with:

• Service providers (subprocessors) who host and run the Service on our behalf — including Amazon Web Services (hosting and storage), Stripe (payments), and an IP-geolocation database provider for approximate location. If a salon connects Phorest, data is exchanged with Phorest to perform the sync.
• The relevant salon — widget-visitor data is made available to the salon whose widget was used.
• Legal and safety — where required by law or to protect rights, safety, and the integrity of the Service.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

5. Cookies and local storage

The dashboard uses browser storage to keep you signed in (an authentication token) and to remember preferences. The widget uses local storage to remember an anonymous session identifier and whether a privacy notice has been acknowledged. We do not use third-party advertising cookies.

6. Data retention

We retain account and salon data for as long as the account is active and as needed to provide the Service, then delete or anonymize it within a reasonable period unless a longer period is required by law. Widget-visitor analytics are retained to provide salons with historical reporting; a salon may request deletion of its data. Backups are retained on a rolling basis and then expire automatically.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. Account holders can update much of their information in the dashboard. To make a request, contact us at the address below. If your data was collected through a salon’s widget, direct your request to that salon (we will assist them as their processor). You may also have the right to lodge a complaint with a supervisory authority.

8. Security

We use technical and organizational measures to protect personal information, including encryption in transit, hashing of passwords and single-use tokens, encryption of stored integration credentials, access controls, and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International transfers

We operate in the United States, and information may be processed there and in other countries where our service providers operate. Where required, we use appropriate safeguards for international transfers.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information.

11. Changes

We may update this Policy from time to time. Material changes will be reflected by updating the effective date above and, where appropriate, through additional notice.

12. Contact

Questions or requests about this Policy or your personal information:
privacy@stylistselect.com