TILZA privacy notice

1. Who is responsible for your data

The salon you book with is responsible for your data as its client. TILZA is a company that provides the salon's booking and management system; it keeps and handles your data for the salon, only on its instructions, and never uses it for itself.

TILZA is responsible for the salon search, for signing in to «My bookings» with your mobile number, for your «Beauty card» if you keep one there, for reviews, and for the site’s security records.

2. What is kept about you

• Your name and mobile number, your email if you give it, and your language.
• The names of the people you book for, if you book for more than one person.
• Who the booking is for: you, 18 or over; you, 13 to 17, with your parent’s or guardian’s name and number; or a child you are the parent or guardian of, with their name and your agreement for them.
• Your appointments: the services, time, branch, who serves you, the price and the status, your note if you write one, and that you asked for a quiet appointment if you do.
• If you book a visit at your home: your area, your address and anything you write to help find it. The owner, the managers and the front desk see them, and of the team only whoever visits you, to reach you; your booking link and «My bookings» show the area only. They are never written in the change history. Your address and what you wrote to help find it are deleted 30 days after the visit; the area stays with the booking until your data is deleted.
• If the salon sends you a «price change request»: the service, its price before and after and why, as the salon wrote it, and your answer, when you gave it and the language of the page you answered on. If your data is deleted, the reason is deleted, and the prices stay with your appointment, without your name or number.
• What you paid at the salon and your invoices, your loyalty card if the salon uses one, and your waiting-list request if you make one.
• If the salon uses «Bring a friend»: your own link if you ask for it, and the day of the wording you agreed to, that you share it only with people you know; who booked by your link; if you booked by someone’s link for the first time for yourself and ticked that you agree, that you came by their link; and each one’s reward as the salon gave it that day, with the bill it was used on. The reward is an amount or a percentage off, or a service free, at that salon only, never money or credit; no message about it goes to anyone, and whoever shared a link doesn’t see the name of who booked by it. If your data is deleted, your link stops and a reward not used isn’t given; the salon keeps who came by whose link and its rewards without your name or number.
• Notes the salon writes about you to serve you, such as what you prefer.
• Your allergies and health, if the salon keeps them: what you write yourself when you book, once you tick that you agree, or what you tell the salon and agreed to it keeping (or your parent or guardian agreed, if you are under 18), including your last patch test and its result, with your agreement: how, when and who recorded it.
• If the salon asks for the form before chemical services, such as colour: your answers about allergies, any earlier reaction, your last patch test and pregnancy or breastfeeding, the name you typed to sign it, when, and the words you agreed to, and who filled it in with you if it was filled in with you at the salon.
• The colour formulas the salon writes after your service, if it uses them: the shades, the products and the time, so it can give you the same colour again.
• The agreements you choose yourself, each in a box that starts empty: to the salon’s offers; to before-and-after photos of its work on you, kept encrypted in your file at the salon on TILZA; and to it posting photos of its work on you on its accounts and on its booking page, without your name or face. Each change to them is kept: when, in which words, from where, and how.
• If you agree to before-and-after photos: the photos themselves, the booking they were taken at, when, and who kept them. They are kept encrypted on TILZA, and deleted if you take your agreement back or your data is deleted. If you agreed to older words, under which the photos stayed on the salon’s own devices, the salon keeps no photos of you on TILZA until you agree to the new words.
• If you send a photo of your hair on your booking link before your appointment, for a service priced by hair length or thickness: the photo itself, when you sent it, and the words you agreed to and their language. It is kept encrypted on TILZA, and deleted after your visit or if the booking is cancelled, or when you or the salon delete it.
• If you agree to the salon posting photos of its work on you, and it puts one on its booking page: the photo, the service in it, and that it is yours, without your name or face. It is kept in TILZA until the salon deletes it, and deleted at once if you take your agreement back or your data is deleted.
• If you add your appointment to your phone’s wallet: that its card was made, its language, and for each Apple device that added it, the number Apple gives the device so the card’s updates reach it.
• If you were the salon’s client before it used TILZA, and it moved your data from the program it used before: your name, your number and your email if it had it, your past visits there (the day, the services, who served you and the price), and the day of your last visit, from which the time your data is kept is counted; and your upcoming appointments booked there (the day, the time, the services, who will serve you, the price and the booking number there), with the usual reminder before them if the salon chooses, and no message to you about the move. No notes, health information or photos are moved, and your birth date isn’t kept: it only tells whether you are under 18. Your agreement to offers is moved only if that program gave the day you agreed and the salon confirms you gave it to the salon.
• That you read this notice: when, on which page, and which version.
• Your requests about your data and the salon’s answers.

3. What TILZA keeps itself

• When you search «Near me», your location is sent for the search only and is not kept.
• If you use «My bookings»: your number, the code you received, kept encrypted for a few minutes, and your sign-in for 30 days or until you sign out.
• In «My bookings», we count the visits you booked yourself on TILZA and came to, at the salons that show your bookings there except a salon that turns this off, to show you your TILZA level: Silver, Gold, Platinum or Diamond. It is worked out each time you open the page and is not kept; no salon sees it, it gives no discount or credit, and nobody under 18 gets one.
• If you add a salon to «My favourite salons» in «My bookings»: only the salon, with your number. Nobody else sees them, the salon isn’t told you added it, and each stays until you remove it, your data at that salon is deleted, or a year passes after you last open «My bookings».
• If you review a visit: your stars and words, your private note for the salon if you write one, when you wrote and changed it, that you confirmed it is about your visit and your honest opinion, TILZA’s team’s check of it, and the salon’s reply. Others see it without your name or number, as the «Reviews policy» explains.
• If you keep a «Beauty card» in «My bookings»: what you write on it yourself about your allergies, your last patch test and its result, your colour formulas, your sizes, such as lashes and nails, the products you keep, and the looks you like, in words, with your number and your agreement to it being kept: when, in which words and language, and that you confirmed you are 18 or over. It is kept encrypted. And for each salon you share it with: the salon, the parts of it you chose to let it see, your agreement to it seeing them, with its words and time, how long it lasts (one day, or until you stop it), when and how it ended, and how many times the salon opened it and when last.
• To protect booking, reports and complaints from misuse: if the page refuses a suspicious booking, report or complaint, your device’s internet address is kept for up to 90 days.
• If you send a report from «Report a problem»: what you wrote, its kind, the page you sent it from, the salon if it is about one, and your number or email if you wrote one. Only TILZA’s team reads it; it doesn’t reach the salon, and your device’s internet address is not kept with it.
• If you send a complaint or suggestion from «Complaint or suggestion»: what you wrote, what it is about, what you want, the salon if it is about one, your booking if you sent it from its link, your name and number or email if you wrote them, and each step in it: the salon’s answer, your asking TILZA’s team to look at it and why if you wrote it, and TILZA’s team’s notes and answer to you. Your device’s internet address is not kept with it.
• If you reach the booking page from the salon’s Google profile, only the fact that you came from Google is recorded.
• When confirmation codes before booking are on: for each number confirmed with a code on a phone or computer, a coded form of a key kept in that browser is kept (never the key itself), and your browser keeps the key, so you aren’t asked for another code from it at any salon on TILZA. It is deleted a year after the last booking from it, or when your data is deleted.
• If a TILZA page stops working in your browser, TILZA’s team is told about the error: the page, the kind of error and your device’s short name only, without anything you typed or your data.
• TILZA’s pages use no tracking or advertising tools from any company. What they keep in your browser is only what your sign-in, confirming your number and your choices, such as dark mode, need.
• If you choose «Keep my name and number on this device for my next booking» when you book, your browser keeps your name and number, ready for your next booking at any salon on TILZA. They go out only with a booking you make, and are forgotten when you tap «Forget my name and number on this device» or clear your browser’s data.
• If you look for a time at a salon that uses «This week’s opportunities» and find no free time, it is counted as a number only: the day, the service, the branch, and where you looked (the booking page or TILZA’s search), without your name, number, your device’s internet address or anything else that identifies you. The salon sees only the numbers, and they are deleted after 90 days.
• If you open the booking page of a salon that uses «Booking step counts», the steps you reach are counted as numbers only, each step once each time the page is opened: opening the page, picking a service, picking a time and confirming the booking, with the day and the salon. Nothing that identifies you is counted with them: not your name, number, your device’s internet address or any number of your device. Nothing is kept in your browser for them, and they aren’t counted if your browser asks not to be tracked. The salon sees only its own page’s numbers, TILZA’s team sees their total for all salons, and they are deleted after 13 months.

4. Why it is kept

• To carry out the booking you asked for: to book you in, manage your appointments and contact you about them.
• Because the law requires it: invoices and payment records.
• Your allergies and health, and the form before chemical services: only with your agreement, so the salon can serve you safely, and so your agreement to the service is on record.
• Colour formulas: so the salon can give you the same colour on your next visit.
• The photo of your hair before your appointment: only with your agreement, so the salon can check the option you chose and you know the right price before you come; it is used for nothing else.
• To protect the booking page and your data from misuse.
• Reports: so TILZA’s team can follow them up and answer you on the report’s link.
• Complaints and suggestions: because the law on trading by modern technological means asks a platform for a place for complaints that can be followed, so the salon or TILZA’s team answers you on the complaint’s link, and every step in it stays kept.
• Reviews: because the law asks platforms that sell online to let their customers rate what they bought, and so others know how the service was.
• Favourite salons: because you chose to keep them, so you can find them and book again quickly; remove them whenever you like.
• «Bring a friend»: because you asked for your link or ticked that you want your gift, so the salon gives you the reward it promised, on its terms, and knows which reward is ready.
• Your beauty card: only with your agreement, so you can take what you choose of it, such as your allergies, formulas, sizes and the looks you like, to the salon you choose, which can then serve you safely without you telling it all again.
• The salon sends you offers only if you agree to them, and your data is never sold. If you agree, it may send you one when you’re late for your usual visit, which it knows only from your visits to it.
• The salon photographs its work on you for your file only if you agree, to follow how it turned out on you. It posts photos of its work on you, on its accounts or its booking page, only if you agree to that too, and without your name or face.

5. Who sees it

• The salon and its team, each as their work needs: a team member, for example, sees her own appointments.
• If the salon uses client badges, its owner, managers and reception see a badge next to your name, worked out from your bookings and payments at this salon only: “New”, “Regular”, “VIP” or “Frequent no-show”. No other salon sees it, the system never changes a price or stops a booking because of it, and nobody under 18 gets one.
• At the salon, only the owner, the managers, and whoever serves you on the day of your booking see your allergies and health, including the form before chemical services, and the before-and-after photos in your file. Reception doesn’t, and each time they are seen or changed is recorded in the salon’s history, without what they say.
• At the salon, only the owner, the managers and whoever serves you on the day of your booking open the photo of your hair before your appointment; reception sees that you sent it without opening it. Each time it is opened is recorded in the salon’s history, and TILZA’s team never sees it.
• Before your service, if the salon uses its summary before a visit, whoever serves you on the day of your booking, the owner and the managers see a short summary from your file at the salon: how many times you have visited and your last visit, your latest colour formula, what you like, and a reminder that it has a note about your health to read before the service, without what it says. Reception and TILZA’s team don’t see it.
• Photos of the work on the booking page are seen by anyone who opens it, without your name or face, and nothing on them says they are yours. Only the salon knows, and TILZA’s team can take down any photo reported to it.
• No salon sees your beauty card unless you share it with that salon yourself, by name, for as long as you choose: one day, or until you stop it. And it sees only the parts you choose for it: allergies and your last patch test, colour formulas, sizes, products, or the looks you like. There, only the owner, the managers and whoever serves you on the day of your booking see those parts; reception sees only that you shared it. Each time it is opened is recorded in the salon’s history, and «My bookings» shows you how many times each salon opened it and when last. Anything the salon copies from it into your file there becomes part of your data at the salon.
• TILZA, only to run the system and help the salon. TILZA’s team looks at the salon’s dashboard only when the salon’s owner allows it, for 24 hours at most and as a look only, without allergies and health, your photos, your colour formulas, your beauty card or your private note with your review, and TILZA keeps a record of what it opened, which the salon gets if it asks in writing, and a competent public authority with an official request.
• Others see your review without your name or number. The salon you reviewed sees your name and booking number with it, and only its owner and managers read your private note to it. TILZA’s team checks it without your name, which nobody at TILZA is shown except for a competent public authority’s request, and that is recorded.
• Your complaint or suggestion about a salon is read by the salon’s owner and managers: what you wrote, your name and number or email if you wrote them, and your visit if you sent it from your booking’s link, unless you chose that only TILZA’s team reads it. The salon doesn’t see TILZA’s team’s notes or its answer to you. TILZA’s team reads every complaint. The complaint’s link doesn’t show what you wrote, your name or your number.
• Companies working for TILZA, each only for its job and under contracts that require them to protect the data: Render for hosting and the database, GitHub for an encrypted daily backup, and when messages are turned on, Meta for WhatsApp, Twilio for text messages and Resend for email.
• When you open a map, your device loads it from OpenStreetMap or Stadia Maps, which receive your device’s internet address, as any site you open does.
• If you tap «Google Calendar» to add your appointment to your calendar, Google’s site opens with the appointment: the salon’s name and address, the time, the services and the booking number, without your name or number, or anyone else’s name. The calendar file is saved on your device only.
• If you add your appointment to your phone’s wallet, TILZA makes its card with the salon’s name, the branch and its address, the salon’s phone, the time, the booking number and its status, without your name, number or services. An Apple Wallet card stays on your device, and in iCloud if you use it, and your device asks TILZA for its latest version if the appointment moves or is cancelled. A Google Wallet card is kept by Google in your Google account, under Google’s privacy policy.
• If someone on the salon’s team turns on booking alerts on their phone or computer, the alert about your appointment passes encrypted through their browser’s alert service (from Apple, Google, Microsoft or Mozilla), which can’t read it. It holds only the time and the services, without your name or number.
• If the salon shows its branch’s rating on Google Maps, TILZA’s server asks Google for it without any data about you, so your device doesn’t contact Google to show it. If you tap «Google Maps», Google’s site opens.
• A public authority, when the law requires it.

6. Where it is kept

Your data is kept outside the UAE: on Render’s servers in Germany (European Union), where a strict data protection law applies. Some of the companies above work from other countries, such as the United States, under contracts that require them to protect it. Your data always travels to them encrypted.

7. How long it is kept

• Your data at the salon you book with: until you ask for it to be deleted, or until the time the salon chooses, 2 to 5 years (3 if it doesn't choose), has passed since your last booking or visit there without you coming back; then it is deleted on its own.
• Your allergies and health, including the form before chemical services: until you take back your agreement or ask for them to be deleted; then they are deleted.
• Before-and-after photos: until you take back your agreement, the salon deletes them, or your data is deleted.
• The photo of your hair before your appointment: until your visit is over or the booking is cancelled, or, if the salon doesn’t close the appointment, up to 6 hours after its end. It is deleted sooner if you or the salon delete it, or the salon stops using it.
• Your agreements and each change to them: as long as the salon has your data, as they are the proof of what you agreed to and took back.
• Invoices, payment records and your past appointments: at least 5 years, because the tax law requires it, even after your data is deleted, but without your name or number.
• If the salon leaves TILZA, it is paused there 11 days after its last day, and that day your data there is deleted as the salon itself deletes it, and your allergies and health are deleted whatever happens. Unless the salon chose to keep its clients so it can come back to TILZA with them: then your data stays there, paused, with nothing booked with it and nothing sent to you from it but what concerns your requests about your data; you can still ask the salon for a copy of it or for it to be deleted, as usual; and it is deleted when the salon erases it, when the keeping time it chose passes, or when its account closes, a year after the pause at most. If the salon comes back to TILZA, your data comes back with it as it was. Your review of it stays, isn’t shown while the salon is paused, and is deleted when its account closes. After it closes, only its invoices and their records stay, without your name or number, until the end of the eighth year after the year its account closed, to cover the time the tax law requires, and two more years while the salon waits for the Federal Tax Authority’s answer to a refund claim; then they are deleted.
• If a competent public authority, such as the Public Prosecution or a court, asks in writing for your number’s data, none of it is deleted until its request ends; then the usual time applies again.
• Reports: what you wrote in them and your number or email are cleared two years after the report is closed; only its number, kind and dates stay.
• Complaints and suggestions: what you wrote in them, your name and number or email, the salon’s answer and TILZA’s team’s answer and notes are cleared two years after it closes; only its number, kind, salon and dates stay. They aren’t cleared earlier if the salon deletes your data, as they are TILZA’s own record.
• Your review and your private note with it: until you delete it, or ask the salon to delete your data, when both are deleted with it. A review TILZA’s team removes for breaking the «Reviews policy» has its words and your note cleared after 180 days, leaving only its stars and why it was removed.
• Your appointment’s card in your phone’s wallet: TILZA forgets the card and the devices that added it 3 days after your appointment, and it stops updating. A Google Wallet card stays in your Google account until you delete it.
• Your beauty card: until you delete it in «My bookings», or two years pass without you or a salon you share it with opening it; then it is deleted. Sharing it with a salon ends when its time is up, when you stop it, when you delete the card, or when the salon is paused after leaving TILZA, and the record of the share stays, without anything on the card, for two years after it ends, as the proof of what you agreed to and when you stopped it.
• The site’s security records and the error log: up to 90 days. Backups: 30 days, then deleted.

8. Keeping your data safe

Your data travels encrypted, each team member sees only what their work needs, and every change and every download of client data is recorded in the salon’s history. Your allergies and health, before-and-after photos, the photo of your hair before your appointment and your beauty card are kept encrypted, with a key that is not kept in the database. If your data is breached in a way that could harm you, the salon and TILZA will tell you and inform the competent authority as the law requires.

9. If you are under 18

• The booking page asks who the booking is for, because the law protects people under 18.
• If you are 13 to 17, you can book for yourself and give your parent’s or guardian’s name and mobile number, for the salon to call if needed. Their name and number are kept with your booking, and your record at the salon says you are under 18.
• If you are under 13, please don’t book yourself: your parent or guardian books for you.
• When a parent or guardian books for a child under 18, the booking is in their name and number, the child’s name is kept with it, and so is the parent’s or guardian’s agreement: when, on which page, and which version of this notice. Once confirmation codes are on, the parent or guardian confirms their mobile number with a code, unless the salon already knows it or it was confirmed with a code on the same phone or computer before.
• Nobody under 18 gets offers from the salon or has photos of them posted, and their data is never used for advertising. Before-and-after photos in their file need their parent’s or guardian’s agreement at the salon.
• The allergies and health of anyone under 18 are kept only with their parent’s or guardian’s agreement. Their form before chemical services is filled in at the salon with their parent or guardian, who signs it.
• The beauty card is for people 18 or over only, and a salon that has recorded you as under 18 doesn’t see it.
• «Bring a friend» is for people 18 or over only: no link, gift or reward for anyone under 18.
• The hair photo before an appointment is for people 18 or over only, and is never asked for a child booked by their parent or guardian. If the salon records you as under 18, the photo of your hair is deleted at once.
• The parent or guardian can cancel the booking from its link, and ask for a copy of the child’s data, or for it to be corrected or deleted, as under «Your rights» below.
• If you see something that harms you or a child, send a report from «Report a problem» at the foot of the pages. You don’t need to write your number: follow your report from its link.

10. Your rights

• To know what is kept about you and why: this notice.
• To ask for a copy of your data: the salon sends you a link to an Excel file with everything it keeps about you, where you can also download the photos in your file, and the photo of your hair before your appointment, if it has any, which opens only with the mobile number it has for you and works for 7 days.
• To ask for anything wrong to be corrected.
• To ask for your data to be deleted: your name, number, email, notes, health, colour formulas, photos, agreements, loyalty card, your «Bring a friend» link, waiting-list requests, your reviews of the salon and the addresses of your visits at home are deleted, and your upcoming appointments are cancelled. Your past appointments and invoices stay, without your name or number, because the law requires invoices to be kept.
• To ask for your data to stop being used, or to be used less, and to stop offers at any time.
• To take back any agreement you gave, at any time: to offers, photos, posting them, or keeping what concerns your health, from your booking link, from «My bookings», or by telling the salon. Taking one back doesn’t change your booking.
• If you take back your agreement to keeping your allergies and health, they are deleted, with your forms before chemical services. If you take back your agreement to before-and-after photos, the photos in your file are deleted.
• To delete the photo of your hair before your appointment on your booking link whenever you like, so the salon no longer sees it.
• To change or delete your review at any time, from your booking link while it works or from «My bookings».
• You see, change and delete your beauty card yourself in «My bookings» whenever you like, change what each salon sees of it, and stop sharing it with any salon at any time, so it no longer sees it.

Ask from your booking link or waiting-list link, under «Your data and privacy», or from «My bookings» after a code to your mobile, or call the salon. The salon checks the number is yours before it sends you anything, and TILZA asks it to answer within 30 days.

If your request is not resolved, you can complain to the UAE’s data protection authority.

11. Changes to this notice

If this notice changes, we write the new date above with «What changed in this version», with links to the sections that changed, words added marked and words removed struck through, and ask you to read it again at your next booking. Earlier versions stay, with their dates, in «Earlier versions».

This notice is in Arabic and English; if they differ, the Arabic one applies.