Privacy
Privacy Policy
How SalonSync processes and protects personal data.
Version 2026-08-draft-1 ยท Effective date 2026-08-02
1. Controller and contact
SalonSync controls account, website and its own business data. For salon client data, SalonSync may act as processor for the salon. Final legal entity and address details will be inserted before approval. Privacy enquiries: privacy@salonsync.nl.
2. Data we process
We may process account and contact details, salon configuration, subscription and payment status, usage and security logs, support communications, and technically necessary device and network data. We do not store Mollie API keys in registration records.
3. Purposes and legal bases
We process data to perform the contract, manage accounts and payments, secure the service, provide support, comply with legal obligations and—where appropriate—improve the service based on legitimate interests. You may withdraw consent for consent-based processing.
4. Roles of the salon and SalonSync
The salon generally decides why and how client and appointment data is used and acts as controller. SalonSync processes that data under the salon's instructions and the applicable data processing agreement.
5. Processors and recipients
We may use carefully selected hosting, email, monitoring, support and payment providers. Mollie processes payment data under its own terms and privacy policy. A current supplier list will be published before production or provided on request.
6. International transfers
Where data is processed outside the European Economic Area, we use a valid transfer mechanism and additional safeguards where necessary. Specific countries and mechanisms will be included in the final supplier information.
7. Retention
We retain data only as long as needed for the stated purposes, contractual service, security, disputes and legal retention duties. Final category-specific periods will be documented before approval.
8. Security
We use appropriate technical and organisational measures, including access controls, encryption where appropriate, logging, backups and incident procedures. No method provides absolute security.
9. Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction, portability or object to processing. Contact privacy@salonsync.nl. We may verify identity and will respond within the legal period.
10. Complaints
You may raise a privacy complaint with us and have the right to complain to the Dutch Data Protection Authority or your competent European supervisory authority.
12. Children
SalonSync is a business service and is not intended for independent use by children. Salons remain responsible for a valid legal basis and safeguards when processing data about minor clients.
13. Changes
We update this policy when processing, suppliers or law changes. Material changes receive a new version and effective date and will be communicated appropriately.