Privacy Policy

1. Introduction

Hair X Salon ("Hair X," "we," "us," or "our") is committed to protecting your privacy and ensuring that your personal data is handled responsibly and in compliance with the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and any applicable data protection legislation.

This Privacy Policy ("Policy") explains how we collect, use, store, share, and protect your personal information when you access and use our website, mobile application, and related services (collectively, the "Platform").

By using the Platform, you consent to the collection, use, and processing of your personal data as described in this Policy. If you do not agree with this Policy, please discontinue use of the Platform immediately.

2. Information We Collect

We may collect the following types of information:

a. Personal Information Provided by You:

• Full name
• Email address
• Phone number
• Gender
• Date of birth
• Profile photo (optional)
• Location/address
• Appointment preferences (services, staff, time slots)

b. Information Collected Automatically:

• Device information (model, OS, browser type)
• IP address
• App usage data (pages visited, features used, time spent)
• Cookies and similar tracking technologies (see Section 6)

c. Payment Information:

• Transaction details processed through third-party payment gateways (e.g., Razorpay)
• We do not store your card or banking details on our servers

d. Salon Partner Information:

• Business name and GSTIN
• Staff details (name, role, contact)
• Service menus and pricing
• Working hours and branch information

3. How We Use Your Personal Information

• To facilitate account creation and authentication
• To enable booking and appointment management
• To process and facilitate payments
• To provide customer support
• To send transactional messages (booking confirmations, reminders, cancellations)
• To personalize user experience and service recommendations
• To communicate promotional offers (only with consent)
• To enable salon partners to manage their business, staff, and services
• To analyze usage trends and improve Platform performance
• To detect and prevent fraud, abuse, or unauthorized access
• To comply with legal obligations

4. Sharing of Information

We do not sell or rent your personal data to third parties. We may share data in the following circumstances:

• Salon Partners: Your name, contact details, and booking preferences are shared with the salon you book with, solely for service fulfillment.
• Payment Processors: Payment data is securely shared with third-party gateways (e.g., Razorpay) for transaction processing.
• Service Providers: We may engage cloud hosting, analytics, and communication service providers who act as data processors on our behalf.
• Legal Compliance: We may disclose your data when required by law, regulation, court order, or government authority.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred as part of the business.

5. Payments

Hair X uses third-party payment gateways (such as Razorpay) to process payments. We do not collect or store any credit/debit card numbers, CVVs, or banking credentials on our servers. All payment-related data is handled directly by the payment processor under their own terms and privacy policies.

6. Cookies and Tracking Technologies

We may use cookies, local storage, and similar technologies to:

• Maintain user sessions and login state
• Analyze traffic and usage behavior
• Personalize content and service suggestions

You may manage cookie preferences through your browser settings. Disabling cookies may affect Platform functionality.

7. Data Retention

• We retain personal data only for as long as necessary to fulfill the purposes outlined in this Policy, or as required by applicable laws.
• Inactive user accounts may be deleted after a reasonable period of inactivity, subject to prior notice.
• Salon partner data will be retained as long as the partner relationship remains active.
• Upon account deletion, your data will be permanently removed from our active systems, although some data may persist in backups for a limited period.

8. Data Security

We take reasonable technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure password hashing and token-based authentication
• Role-based access controls
• Regular security audits and updates

Despite these efforts, no system is entirely immune from breaches. In the event of a data breach, we will notify affected users and relevant authorities as required by law.

9. Your Privacy Rights

Subject to applicable law, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your account and data
• Withdraw consent for marketing communications
• Object to or restrict the processing of your data

To exercise your rights, please contact us at support@hairxsalon.com. We will respond within 30 days.

10. Children's Privacy

Our Platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through our Platform, please contact us immediately.

11. Third-Party Services

Our Platform may contain links to or integrations with third-party services (e.g., Google Sign-In, social media platforms, analytics tools). We are not responsible for the privacy practices of these services.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "Effective Date." Continued use of the Platform constitutes acceptance of the revised Policy.

13. Contact Us & Privacy Complaints

For privacy-related queries or complaints:

If you are not satisfied with our response, you may escalate your complaint to the relevant data protection authority or the Cyber Appellate Tribunal under the Information Technology Act, 2000.

14. Applicable Law

This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising from this Policy shall be subject to the exclusive jurisdiction of the courts in Jatni, Odisha, India.