TILZA agreement with salons

Version of 18 October 2026 (fourth that day)Earlier: until 18 October 2026Draft

A draft awaiting a lawyer’s review before TILZA launches. TILZA hasn’t started yet: it takes no real salons and no money.

This is not the current version.Read the current version

What changed in this version

Compared with the version of 18 October 2026 (third that day).

In «What the salon commits to»: a new price is asked for before the service starts. When the client arrives, the salon checks the option of each service booked with one: a shorter one’s price comes down at once, and a longer one’s price is sent to the client, the service starting at it only once the client accepts. If the client doesn’t accept, the salon does the service at the booked price, or doesn’t do it, takes nothing for it and never records it against the client; if nothing is left in the booking to be done, it is cancelled as the salon’s.

The places that changed:

Changed4. What the salon commits to

Colours:Added~~Removed~~

This agreement is between TILZA and the salon that uses it, and sets out what each side provides and commits to. The salon’s owner accepts it in the salon dashboard, and it applies from the day they accept. Its two annexes are part of it: the «Data processing annex» and «The salon’s legal duties».

1. The parties

The company that runs TILZA: its legal name, licence number, issuing authority and address will appear here once its licence is issued.

And the salon: the licensed business whose owner accepts this agreement, under its legal name and licence number as entered in the salon dashboard.

How to contact TILZA, including a number answered by a person on its team, will appear here before launch.

2. What TILZA provides

A booking and management system: the calendar, clients, services, team, sales and invoices, reports and change history, a booking page for the salon, and its listing in TILZA’s search.
Every feature is optional: the salon turns it on or off in «Settings», except what the law requires, such as the privacy notice and invoices.
Messages to clients by WhatsApp, text message or email, once these work in TILZA.
Help using TILZA and solving its problems, from «Support» in the salon’s dashboard.

3. Fees and subscription

The salon pays TILZA no fee except under a written offer that lists every fee and says whether it includes VAT, and that the owner accepts before paying anything. No hidden fees.
The subscription is monthly, with no yearly contract and no hidden renewal. It renews each month on the day it started, the day the owner accepted this agreement. The owner can cancel it whenever they want, with one month’s notice, as in «Term and ending».
The salon can download its data whenever it wants, free of charge.
TILZA takes no money from the salon’s clients and holds none of their money. If the salon later offers paying online, it will be through a licensed payment company that pays the salon directly, under a separate agreement.

Changed

4. What the salon commits to

To be licensed and keep its licence valid, enter its legal name, licence number and issuing authority as TILZA asks, and tell TILZA straight away if its licence expires or is suspended.
To keep its details in TILZA true and up to date: service names in Arabic, prices including VAT if it is registered, durations, hours, branches and team.
To show in TILZA its real prices, the ones it charges at the salon, with no hidden fees: each of a service’s options has its exact price and time; a service it can price only once it sees the client is priced “after a consultation”, at the consultation’s own price or free; and a service still priced “from” is priced at its lowest real option.
To charge the client no more than the price booked, unless the client accepts a «price change request» on the client’s own phone before ~~removed text: the salon provides the~~added text: that service ~~removed text: at the new price~~added text: starts, and never to ask for that answer on the salon’s device. ~~removed text: If~~ added text: To check, when the client ~~removed text: doesn’t accept,~~ added text: arrives, the option of each service booked with one: if it is shorter or finer, its price comes down to the right option’s at once; if it ~~removed text: charges no more than~~added text: is longer or thicker, the added text: salon sends the client the right option’s price ~~removed text: booked~~added text: before starting it, and ~~removed text: nothing if~~ added text: starts it at the added text: new price only once the client added text: accepts. If the client doesn’t ~~removed text: go on with~~ added text: accept, the salon either does the service~~removed text: ,~~ added text: at the price booked, or doesn’t do it and takes nothing for it except a consultation price shown before booking~~removed text: .~~added text: , and never records it against the client as a late cancellation or a no-show. If nothing is left in the booking to be done, the booking is cancelled as the salon’s, and the client is told.
If it is registered for VAT, to enter its TRN, legal name and address as on its registration certificate, and update them if they change. TILZA’s team checks the TRN on the Federal Tax Authority’s website; if the team can’t confirm it, tax invoices and the words “prices include VAT” stop until the salon corrects it. The salon stays responsible for its tax details being correct and for its VAT.
To show in TILZA only the services each branch’s licensed activity covers, at the prices of its approved list of services and prices where it has one, and to offer massage or spa only at a branch whose licence covers them.
To deliver booked services as shown, warrant them as the Consumer Protection Law requires, and answer and deal with its clients’ complaints seriously.
To write its services’ guarantee in TILZA: within how many days of the appointment it accepts a client’s word, and what it does when a service isn’t right (redoes it free, or redoes it or refunds, as the client chooses). It keeps to the guarantee the client saw before booking and on the bill. Until it writes one, TILZA shows the law’s words: if a service has a fault, the salon redoes it or refunds, and the salon keeps to them. It writes nothing in a guarantee that takes it back, such as “no guarantee” or “non-refundable”.
To honour confirmed appointments. If it has to cancel or move one, to tell the client as soon as possible and refund in full anything they paid in advance.
If the salon turns on «Off-peak offers», to hold for each offer a valid permit from the competent authority in its emirate covering the discount, its days and its times, enter its number, issuer and dates as they are on it, and stop the offer if the permit is cancelled. To charge a client the discounted price they booked at, even if it stops the offer later. TILZA shows the offer as the salon entered it; the salon is responsible for its permit and for the offer being right.
If the salon turns on «Home visits», to send no one from its team to a client’s home except in an emirate that allows it, with the permit it asks for; to hold for each branch a valid permit from the competent authority, enter its number, issuer and dates as they are on it, and delete it if it is cancelled; to send only those the permit covers and the law allows; and to use a client’s address for that visit only. If its team hasn’t reached a client’s home 15 minutes after the time, the client may say so on their booking link, and the salon may record it: the appointment is cancelled as the salon’s miss, the salon takes nothing from the client for it and never records that they didn’t come, and it refunds in full anything they paid for it in advance. TILZA shows home visits only at the branches whose emirate allows them, as the salon entered them; the salon is responsible for its permit and for its team in clients’ homes.
To send offers only to clients who agreed to them, from a number registered to the salon and its trade licence and never a personal one, publish a photo or video of a client or of anyone on its team only with their agreement, and keep health details only with the person’s agreement.
To protect its team’s accounts: no shared passwords, each person given only the role they need, and the account of anyone who leaves turned off. Its team uses two-step verification in the roles TILZA requires it of, and we recommend it for the rest of the team.
Not to use TILZA for anything unlawful, and not to show in it any medical treatment, such as laser, Botox, fillers, injections, thread lifts, permanent make-up, chemical peels or cupping, even if it is licensed for one: only a licensed health facility may give them, and advertising them needs the health authority’s permit, so TILZA doesn’t show them, book them or send offers for them.
To meet its duties in «The salon’s legal duties».

5. What TILZA commits to

To run the platform with care, protect it with suitable security measures, and keep an encrypted daily backup.
To process the data of the salon’s clients and team only as the «Data processing annex» says.
To tell the salon in advance of any important change that affects its work, and of any planned downtime.
Never to contact the salon’s clients to market anything, or to show them other salons using its data.
Never to make a page for a salon that didn’t ask to join itself, show it in search, or take its name, photos or prices from Google, Instagram or anywhere else without its permission. A salon’s page shows to clients only once its owner accepts this agreement.

6. Data

The data of the salon, its clients and its team belongs to the salon, which is responsible for it under the Personal Data Protection Law; TILZA processes it for the salon.
If the salon turns on «Compare your salon with salons in your city», its numbers go into its city’s averages without its name or its clients’ details. A city average shows only once at least 5 other salons take part, so no salon’s numbers can be told.
If the salon turns on «Beauty cards», it sees a client’s card, which TILZA keeps for her in «My bookings», only while she shares it with the salon, and only the owner, the managers and whoever serves her on the day of her booking open it, not reception. The card is the client’s and TILZA is responsible for it, so the salon keeps no copy of it. Anything the salon writes from it into her file there, such as her allergies or her colour formula, becomes the salon’s data and responsibility, and what concerns her health needs her agreement to the salon, as for allergies and health.

7. Names and content

The salon’s name, logo, photos and content stay its own, and it allows TILZA to use them only to show the salon and its booking page in TILZA, for as long as this agreement lasts.
TILZA shows only what the salon entered itself or allowed. When the agreement ends, its page and its place in search stop.
The salon confirms it has the right to use every photo or content it uploads, and that the people in its photos agreed to them being published.
This agreement gives the salon no right in TILZA’s system or design other than using them while the agreement lasts, and the salon may not copy, sell or take them apart.

8. Reviews

The «Reviews policy» applies to the salon’s reviews on TILZA. TILZA is responsible for reviews: it checks and publishes them, and removes what breaks the policy.
TILZA’s reviews of the salon always show, because the law requires them, and the salon can’t turn them off or hide them, or remove or edit a review.
The salon can reply to a review publicly and politely, and its reply is checked before it is published. It can also object to a review, saying why.
The salon gives no discount, gift or anything else for a review, pressures nobody to review or to change or delete a review, doesn’t ask only for positive reviews, and doesn’t write a review, or ask anyone to write one, about a visit that didn’t happen.
The salon sees the name and booking number of whoever reviewed it only to understand what happened and reply, and doesn’t punish them for their review, for example by refusing their booking, treating them worse or pressuring them.
If the owner shows a branch’s rating on Google Maps, they pick only that same branch’s page on Google, and TILZA checks it is at the branch’s location. The rating shows as Google gives it, with Google’s name and link; TILZA doesn’t keep it, and asks Google for it with the branch’s page number only, without any client’s data. It may stop showing if Google’s service doesn’t work or TILZA reaches its monthly limit.

9. Confidentiality

Each side keeps confidential what it learns about the other that isn’t public, and uses it only to carry out this agreement, except where the law requires otherwise.

10. Responsibility

Each side is responsible for its own breaches of this agreement, as UAE law provides.
The salon is responsible for its services, its details and how it deals with its clients, and compensates TILZA for what TILZA bears because the salon broke the law or this agreement.
Reports, the monthly sales report among them with any share of sales it works out, are calculated only from what was recorded in TILZA. The salon checks them before relying on them or sending them to anyone, such as a mall, a bank or a partner, and is responsible for what it sends and for keeping its contracts with them. TILZA does not send reports for the salon, does not pay or collect anything between the salon and them, and is not a party to the salon’s contracts with them.
The VAT return summary and the tax registration alerts are there to help and are not tax advice: the summary is worked out only from the tax invoices TILZA issued, and TILZA does not know the salon’s sales outside it or its purchases. The salon files its returns, pays its tax and decides on its registrations itself or through its accountant and tax adviser, and TILZA files no return for it.
Neither side is responsible for a delay caused by events beyond its control, as long as it tells the other side and works to limit the effect.

11. Pausing a salon

TILZA pauses the salon’s booking page and its listing in search at once only for a legal reason or at its request: if its licence expires or is suspended, the law or an authority requires it, it misuses TILZA in a way that harms its clients or others, or the salon itself asks. TILZA tells the salon why in the salon dashboard, and opens the page again once the reason is gone.
TILZA pauses it for no other reason; instead, it ends the agreement with 30 days’ notice, as in «Term and ending».
While it is paused, the salon dashboard keeps working, bookings made before stay, and the salon can download its data.

12. Stopping a feature

TILZA may stop an optional feature for all salons or for one salon, such as offers or showing in search, if it is misused, draws complaints, or needs fixing. The salon sees why under the feature in Settings.
The salon’s own choice is kept, and the feature comes back as the salon chose it when the stop ends. The stop and its end are recorded in the change history.
TILZA never turns a feature on for the salon without its choice, and never stops what the law requires or what protects the salon and its clients, such as the change history.

13. Term and ending

The agreement starts on the day the owner accepts it and lasts until either side ends it.
The salon can end it whenever it wants with the «Cancel subscription» button in «Settings» › «Your salon’s subscription», with one month’s notice: its last day on TILZA is a month after the day it asks, everything works as usual until then, and it pays nothing for any time after it. It can take the end back until the last day.
TILZA can end it with at least 30 days’ notice to the salon, saying why. Before the last day, it pauses the salon’s booking page only for a legal reason, as in «Pausing a salon».
The salon’s owners are emailed when an end is asked or taken back or its last day changes, and reminded 30 days, 7 days and 1 day before the last day.
After the last day, TILZA takes no new bookings for the salon and doesn’t show it in search, and its booking page still shows its phone number. The salon finishes, free, in TILZA its bookings up to 30 days after the last day; so in the notice month, no booking later than that is taken online.
The salon tells its clients who have bookings after the last day, and TILZA helps with a list of them and a message to them once messages work in TILZA. The salon can download its data, free, until the end of those 30 days.
Then TILZA closes the salon’s account and deletes its data as in the «Data processing annex», except what the law requires to be kept, such as tax invoices and their records, kept for 5 years, which is kept only as long as required and then deleted.

14. Changes to this agreement

TILZA publishes each new version of this agreement with its date and «What changed in this version», with links to the sections that changed, words added marked and words removed struck through. Every earlier version stays, with its dates, in «Earlier versions».

A big change, one that changes what the salon or TILZA commits to, either side’s rights, or what the salon pays, is announced to the salon in the salon dashboard at least 30 days before it starts, and until that day the salon stays on the version it accepted. The owner can accept the new version before it starts; if they don’t accept it, they can cancel the subscription, and the salon stays on the version it accepted until its last day, with no fee the change brings.

A small change that changes none of these, such as correcting a word or making a sentence clearer, starts on the day it is published. A change that the law or an authority requires starts when they require it, and TILZA tells the salon when it is published.

Either way, the owner is asked to accept the new version in the salon dashboard.

15. Law and language

This agreement is governed by the laws of the United Arab Emirates. The parties first try to settle any disagreement amicably; otherwise the competent UAE courts hear it.
The agreement is in Arabic and English; if they differ, the Arabic applies.

Annex 1

Data processing annex

This annex is part of the agreement, and sets out how TILZA processes the data of the salon’s clients and team for the salon.

1. Roles

The salon is responsible for its clients’ and team’s data (the controller), and TILZA processes it for the salon (the processor), under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.
TILZA is responsible itself for the data of people who search TILZA or use «My bookings», for the «Beauty card» a client keeps there and shares with the salon, for reviews, and for the platform’s security records, as the «Privacy notice» and the «Reviews policy» explain.

2. The data and whose it is

Clients, including people under 18 and their parents or guardians: name, mobile, email and language, appointments, sales and invoices, notes, colour formulas, loyalty card and badges, agreements and requests, allergies and health with the person’s agreement, including the last patch test and the form before chemical services with its signature, and before-and-after photos in the client’s file with her agreement.
The salon’s team and owners: name, mobile and email, sign-ins and roles, hours and time off, commission and tips, health card and hepatitis B dates, their agreement to their photos being posted, their devices’ alert addresses if they turn booking alerts on there, and what they tick in the hygiene log and when, deleted 400 days after its day.
Appointment cards in the phone’s wallet, if a client adds one: the card’s number and language, and the number of each Apple device that added it so its updates reach it, deleted 3 days after the appointment.
Photos of the salon’s work it puts on its booking page: the photo and the service, and the client or team member in it, with their agreement.
Records of changes, downloads and sign-ins, and «Support» requests and their pictures.

3. Purpose and duration

TILZA processes this data only to provide its services to the salon, for as long as the agreement lasts, and then as «End of processing» says.

4. Instructions

TILZA processes the data only on the salon’s instructions: its use of TILZA and its settings, and what it asks in writing. If TILZA believes an instruction breaks the law, it tells the salon before acting on it.

5. Confidentiality

Only those on TILZA’s team who need the data to run the platform or help the salon can see it, and they are bound to confidentiality.

6. TILZA’s team looking at the salon’s dashboard

TILZA’s team looks at the salon’s dashboard only when the owner allows it from «Support», for 24 hours at most, and the owner can stop it sooner at any time.
It is a look only: the team changes nothing, doesn’t see allergies and health, health card dates or a client’s file of formulas and photos, and opens no files and downloads nothing.
Everything the team looks at is recorded, and the salon sees it in «Support» and the «Change history».
TILZA keeps what is written in «Support» requests for 2 years after a request closes, and the pictures sent with them for 30 days after it closes, then deletes them. The error log keeps nothing anyone typed and no client data, and is deleted after 90 days.

7. Security

Data is encrypted in transit.
Allergies and health, and before-and-after photos, are encrypted with a key that isn’t kept in the database, seen only by those who need them, and every view of them is recorded.
Each person at the salon has a role, and sees only what their work needs.
Two-step verification is available on every salon account, and TILZA requires it of the roles it sets for every salon (the salon sees them under «Security»); signing in with a fingerprint or face counts as both steps. Sign-out is automatic after a time the salon sets.
Every change and every download of client data is recorded in the salon’s history.
An encrypted daily backup is kept for 30 days, then deleted.

8. Companies working for TILZA

Render: hosting and the database, in Frankfurt, Germany (European Union).
GitHub: keeping the encrypted daily backup.
When messages are turned on: Meta for WhatsApp, Twilio for text messages and Resend for email.
When wallet cards are turned on: Apple and Google for appointment cards in Apple Wallet and Google Wallet, without the client’s name, number or services.
Booking alerts to the team’s devices pass encrypted through each device’s browser alert service (Apple, Google, Microsoft or Mozilla), which can’t read them, and they hold no client’s name or number.

Each of them is bound by a contract that protects the data. TILZA tells the salon 30 days before adding or changing one, and the salon can object; if its objection isn’t resolved, it can end the agreement at no charge.

9. Where the data is kept

The data is currently kept outside the UAE, in Germany, and some of it reaches the companies above in other countries, including the United States, under contracts that require them to protect it and as the law allows. TILZA tells the salon before any change in where it is kept.

10. Breaches

If TILZA learns of a breach that may affect the salon’s data, it tells the salon without delay, and within 24 hours of learning of it at most, with what it knows: what happened, roughly which data and people are affected, what it has done and what it advises. It helps the salon tell the competent authority and its clients as the law requires.

11. Helping the salon

TILZA gives the salon tools to answer its clients’ requests about their data: a copy, a correction or deletion. If TILZA receives a request about the salon’s data, it passes it to the salon within 5 working days. It helps the salon with any data protection impact assessment or request from a competent authority.

12. Requests from public authorities

If a competent public authority, such as the Public Prosecution or a court, asks TILZA in writing for the salon’s data, TILZA gives only what the request covers and as the law requires, and records what it gave, to whom and when. It tells the salon what of its data was given, unless the law or the request itself forbids it. None of the data the request covers is deleted while the request is open.

13. Records and information

TILZA keeps a record of its processing, and gives the salon the information it needs to check TILZA meets this annex, when the salon asks in writing.

14. No use beyond the salon

TILZA never uses the salon’s data for itself, never sells it, never shows its clients other salons, and never trains any AI system with it.

15. End of processing

When the agreement ends, the salon can download its data for 30 days; then TILZA deletes it from its systems, and from backups when their 30 days are up, except what the law requires to be kept, such as invoices, which is kept only as long as required.

Annex 2

The salon’s legal duties

These duties are the salon’s own under the laws of the UAE and its emirate. TILZA may remind it of some of them, but meeting them is the salon’s responsibility.

The duties

A valid trade licence, whose type (women’s or men’s) matches who works at the salon.
VAT: registering once it reaches the threshold, prices including VAT, tax invoices and returns on time, and e-invoicing once it is required of the salon.
Corporate tax: registering, filing and paying on time.
Arabic in prices, invoices and everything shown to clients, and the same price for cash or card.
Health cards for workers and the hepatitis B vaccine, where the authorities require them.
Sterilised tools, single-use tools used once, no wax stick dipped back into the pot, and cleanliness as the municipality requires. TILZA’s hygiene log helps with this and doesn’t replace it; what is recorded in it is the salon’s and its team’s responsibility.
Medical treatments, such as laser, Botox, fillers and injections, given only in a licensed health facility, and advertising them only with the health authority’s permit.
Clear, real prices with no hidden fees, and the client knowing the final price before the service starts (Consumer Protection Law).
Service guarantee: the salon warrants its service free of faults for a period suited to it, the client knows the guarantee’s terms before booking, and the salon redoes the service or refunds as its guarantee says (Consumer Protection Law and its Executive Regulations).
Only services within the licensed activity, prices as on the approved list of services and prices where the emirate requires one, and massage and spa offered only under a licence that covers them.
Permits where required: for offers and discounts, for working after midnight, and for services at home.
Clients’ agreement to offers and marketing messages and the hours they are sent, and clients’ and the team’s agreement before they are photographed or their photos and videos are posted.
Protecting its clients’ and team’s data, as the one responsible for it.
Workers’ contracts, their pay through the Wage Protection System, and working and rest hours.

Read the current version Earlier versions