How we handle your data

Last updated: 7 May 2026 · Effective immediately

This Privacy Policy describes how Join Future Solutions W.L.L. (“HiSalon”, “we”, “us”, or “our”) collects, uses, shares, and protects information when you use the HiSalon platform, website, mobile applications, and related services (collectively, the “Services”). By using the Services you agree to the practices described below.

1. Who we are

HiSalon is a salon management platform operated by Join Future Solutions W.L.L., a company registered in the Kingdom of Bahrain. The Services are offered to two distinct groups of users:

• Salon operators — the businesses that subscribe to HiSalon to run their salon, spa, barbershop, or nail studio.
• End customers — the individuals who book appointments at those salons through the HiSalon booking site.

For data submitted by end customers in the course of a booking, the relevant salon operator is the data controller and HiSalon acts as a data processor on their behalf. For data we collect directly (e.g. to operate the platform, communicate with salon operators, or improve the Services), HiSalon is the data controller.

2. Information we collect

2.1 Information from salon operators

• Business information: legal name, commercial registration, billing address, tax identifiers.
• Account information: contact name, email, phone number, login credentials.
• Configuration data: services, prices, staff records, schedules, branding.
• Payment information: processed by our payment partners; we do not store full card numbers.

2.2 Information from end customers

• Identity: name, phone number, email address (optional).
• Appointment data: services booked, staff selected, date and time, notes.
• Communication preferences: opt-in to SMS and WhatsApp notifications.
• Loyalty: points earned and redeemed at the salons you visit.

2.3 Information collected automatically

• Device and browser metadata, IP address, approximate location derived from IP.
• Usage logs: pages visited, actions taken, errors encountered.
• Cookies and similar storage strictly necessary to keep you signed in and remember preferences (language, theme).

3. How we use information

• To provide, operate, and maintain the Services.
• To process bookings, send confirmations, reminders, and receipts.
• To process payments and prevent fraud.
• To respond to support requests.
• To improve the Services through aggregated analytics.
• To comply with legal obligations.

We do not sell personal information.

4. WhatsApp & Meta integration

HiSalon integrates with the WhatsApp Business Platform, operated by Meta Platforms, Inc., to deliver booking confirmations, reminders, and salon-initiated messages on behalf of salon operators. When a salon connects its WhatsApp Business account to HiSalon:

• The salon authorises HiSalon, as its Tech Provider, to send and receive messages through Meta’s API on its behalf.
• Message content (e.g. booking details) and recipient phone numbers are transmitted to Meta in order to deliver the message.
• End customers receive messages only from the salon they booked with; HiSalon never sends marketing messages on its own behalf to end customers.
• Customers may opt out of WhatsApp notifications at any time by replying “STOP” or contacting the salon.

Meta’s use of message data is governed by the WhatsApp Business Policy and Meta’s privacy policy.

5. When we share information

We share information only in the following circumstances:

• With salons: end-customer booking data is shared with the salon you booked at, so they can deliver the service.
• With service providers who help us operate the Services under written data-processing agreements:
  • Cloud hosting: Amazon Web Services (AWS) — data stored in the EU (Frankfurt, eu-central-1).
  • Content delivery and DNS: Cloudflare, Inc.
  • Messaging: Meta Platforms, Inc. (WhatsApp Business Platform) and SMS aggregators.
  • Email: transactional email providers.
  • AI features: OpenAI, used for narrowly scoped, non-identifying tasks such as service category classification.
  • Payment processing: licensed payment partners in the GCC (we do not store full payment card details).
• For legal reasons: when required by law, court order, or to protect the rights, safety, and property of HiSalon, our users, or the public.
• In a corporate transaction: in the event of a merger, acquisition, or sale of assets, with notice to affected users.

6. Storage & security

Production data is hosted on AWS infrastructure in the European Union (Frankfurt, eu-central-1), behind Cloudflare. We apply industry-standard safeguards including encryption in transit (HTTPS/TLS), encrypted backups, scoped access via SSO and least privilege, and continuous logging. No system is perfectly secure; if we ever experience a breach affecting your information we will notify you without undue delay, in line with applicable law.

7. Retention

• Salon-operator account data is retained for the lifetime of the subscription plus a reasonable wind-down period.
• End-customer booking data is retained for as long as the salon you booked at retains it, or for 3 years after the last booking, whichever is shorter.
• Operational logs and analytics are retained for up to 12 months.
• Backups containing deleted data may persist for up to 90 days before they roll off automatically.
• We retain certain records longer where required by law (e.g. invoicing, tax).

8. Your rights

You may, subject to applicable law:

• Access the personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Request deletion of your information — see our Data Deletion page for the process.
• Object to or restrict certain processing.
• Receive a copy of your information in a portable format.
• Withdraw consent for optional processing at any time.

To exercise these rights, email [email protected]. If you booked through a salon, please contact that salon as well — they are the data controller for their own customer records.

9. Children

The Services are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided information to us, please contact us so we can delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top. Material changes will be notified through the Services or by email to salon operators.