Company Name:Shay Khas Salon Female Owner / Legal entity: 7005123091 Registered address:RGHB3727 Email:hello@shinailconcierge.com Phone:0112098276 We act as the Data Controller within the meaning of the GDPR.
2. Categories of Personal Data Collected Depending on how you interact with the Website and our services, we may collect the following categories of personal data: 2.1 Identification & Contact Data
First name and last name
Email address
Phone number
Country/city (if provided)
Any information you provide in messages/forms
2.2 Appointment & Service Data
Appointment date/time, service type, preferred specialist
Notes you provide related to your appointment (e.g., preferences, allergies or sensitivities if you choose to share them)
2.3 Payment Data (if applicable)
Payment status and transaction references
We do not store full card details; payments are handled by payment providers (if online payments are offered)
2.4 Technical & Usage Data
IP address
Browser type and version
Device type and operating system
Referrer URL
Pages visited, session duration
2.5 Marketing & Communication Data (if applicable)
Marketing preferences
Newsletter/lead form submissions
Interaction with ads/campaigns (if used)
2.6 Cookie & Tracking Data
Cookies
Analytics identifiers
Pixels (if used)
2.7 Account & Payment Information Depending on the use of the mobile application and services, we may additionally collect the following personal data: First name and last name Phone number Email address Linked account identifiers (such as Google or Apple account, if used for authentication) Payment methods stored within the payment system (processed by payment providers; full card details are not stored by us) Billing or service address (if provided)
3. Purposes of Processing Personal data is processed for the following purposes:
Managing appointment requests, bookings, confirmations, rescheduling and cancellations
Providing nail salon and spa services
Customer support and responding to inquiries
Sending service-related messages (e.g., reminders, changes, important notices)
Processing payments and deposits (if applicable)
Improving Website performance and security
Analytics and performance measurement
Marketing communications (only where permitted by law and/or with consent)
Compliance with legal obligations (e.g., accounting/tax)
3.1 Service Provision within the ShiNail Concierge Personal data may also be processed for the following additional purposes: Providing services offered by the ShiNail Concierge establishment Managing user accounts within the mobile application Enabling booking and management of appointments and services Performing financial transactions and payment processing within the mobile application related to service reservations
4. Legal Basis for Processing We process personal data based on the following legal grounds (GDPR Art. 6):
Consent (Art. 6(1)(a))
Performance of a contract or pre-contractual steps (Art. 6(1)(b)) (e.g., booking and providing services)
Legal obligations (Art. 6(1)(c))
Legitimate interests (Art. 6(1)(f)), including:
Service improvement and business operation
Fraud prevention and payment security
Website security
5. Marketing (if used) If you opt in (or where otherwise permitted), we may send marketing communications about offers and updates. You can withdraw consent or opt out at any time. If we use advertising platforms (e.g., Meta, Google), they may use cookies/pixels to measure performance and deliver ads. Where required, these technologies are enabled only after consent via a cookie banner.
6. Cookies & Tracking Technologies We use cookies and similar technologies for Website functionality, analytics and (if used) marketing. Information about cookies and how to manage preferences is provided via the cookie consent banner and/or a separate Cookie Policy page (if available). Users may manage cookie preferences at any time.
7. Data Recipients & Processors Personal data may be shared with trusted third parties, including:
Hosting and infrastructure providers
Appointment/booking tools (if used)
CRM and communication tools (email/SMS/WhatsApp service providers, if used)
Analytics providers (if used)
Payment providers (if applicable)
Advertising platforms (if used)
Where required, processors act under appropriate data processing agreements.
8. International Data Transfers Personal data may be transferred outside the EEA or the UK. Where applicable, we use appropriate safeguards such as Standard Contractual Clauses (SCCs), adequacy decisions, and contractual/technical safeguards.
9. Data Retention We retain personal data only as long as necessary for the purposes described above:
Appointment and customer communications: for a reasonable period to manage the relationship and handle disputes, then deleted or anonymised
Marketing data: until you opt out/withdraw consent
Payment/transaction records: as required by applicable accounting/tax laws
Analytics: retained according to configuration and/or aggregated/anonymised
10. Automated Decision-Making We do not engage in fully automated decision-making that produces legal or similarly significant effects. 11. Data Subject Rights Under GDPR and UK GDPR, users have the right to:
Access personal data
Rectify inaccurate data
Request erasure
Restrict processing
Object to processing
Withdraw consent (where processing is based on consent)
Data portability
Lodge a complaint with a supervisory authority
Requests may be submitted to: hello@shinailconcierge.com 11.1 Additional User Rights Within the Platform Users of the mobile application or website may also have the ability to: Edit and update their account data Delete their account and associated personal data (subject to legal retention requirements) Access information about available specialists Access publicly available professional information about service providers (masters) working with the establishment View available services provided by the ShiNail Concierge establishment
12. Do Not Track & Opt-Out Some browsers offer a “Do Not Track” feature. We currently do not respond to DNT signals, but users may control cookies and marketing preferences manually.
13. Data Security Measures We apply appropriate technical and organisational measures, including secure hosting, access control, data minimisation and encryption where applicable.
14. Children’s Privacy The Website is not intended for individuals under the age of 18. We do not knowingly collect data from minors.
15. Changes to This Policy This Privacy Policy may be updated periodically. The current version will always be available on the Website.
Last updated: 20 January 2026 This Privacy Policy describes how Shay Khas Salon Female (“Company”, “we”, “us”, “our”) collects, uses, stores, shares and protects personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the UK GDPR, and other applicable data protection laws. This Privacy Policy applies to the websitehttps://shinailconcierge.com/ (the “Website”) and our nail salon and spa services, appointment booking, customer communications and related activities.