Deleting your data

1. First: which of the three are you?

The route to having something erased depends on who holds the data. Find the line below that applies to you and follow it.

2. You are a customer of a hair salon

Go to your salon. Not to us.

Your name, your appointments, your colour formulas and your receipts belong to the salon: the salon decides why they are kept. We hold them on the salon’s instructions and may do nothing with them that the salon has not asked for — including erasing them because you ask us to. This is written out in the privacy statement under “Two roles”.

If your salon has a customer portal, you can file the request there yourself; it arrives in the salon’s back office as a deletion request. Otherwise, call or e-mail the salon directly.

If you get no response, let us know. We cannot erase the data for you, but we can point out to the salon that a request is waiting.

3. You have an account in the app

The HairConnect app is for a salon’s staff. Your account was created by your owner in the back office, under Salon → Users, and that is where it is deleted. One action on their part and the account is gone: you can no longer sign in, and the device key that received notifications is revoked.

If you want your account gone and your owner cannot or will not do it, e-mail us. We will then remove it ourselves and tell the salon that it has been done.

• Whatever sits on your own device disappears the moment you delete the app. The app keeps the calendar of the days you have looked at in a file inside the app itself, so that you still see it when the network drops. That file belongs to the app and goes with it; nothing is left behind in your photos or your files.
• The app sends nothing to an advertising network and carries no measurement script. If you switch notifications on, your device receives a key from Apple or Google and we keep that key so we can send you a notification — nothing beyond the key is attached to it.
• The camera is used only at the moment you scan a barcode. No image is stored and no image goes to our server: what the app passes on is the number printed on the packaging.

4. Your salon is leaving HairConnect

E-mail us from the address your salon is known to us by. Ask for deletion and say which salon it concerns.

Take your data with you first. The back office has an export under Settings that puts your customers, appointments, receipts and stock into readable files. Do that before the request: after erasure we can return nothing, and that is precisely what erasure ought to mean.

Within thirty days we delete everything belonging to your salon: the customers, the appointments, the receipts, the stock, the photos, the settings and your staff accounts. The backups too, which in turn expire within thirty-five days.

5. What does stay, and why

One thing we cannot erase, even if you ask: the invoices we issued to your salon.

That is not our choice. HairConnect is sold by a Bulgarian company, and Bulgarian accounting law (Закон за счетоводството, article 12) requires us to keep invoices for ten years, counted from 1 January of the year following the financial year. Erasing an invoice on request would make our books wrong.

Such an invoice carries your salon’s name, address, VAT number and the amount. Nothing about your customers appears on it.

Beyond that, nothing remains. Your salon’s audit log, which cannot be altered after the fact, goes with the rest.

6. How to ask, and what you get back

An e-mail is enough. There is no form, no account and no waiting on a telephone.

We confirm receipt, carry it out, and tell you when it is done. If it takes longer than thirty days, we say why before those thirty days are up.

If we ask you something first, it is to be sure the request comes from you — not to hold it up. We never ask for a copy of your identity card for something an e-mail from the known address can settle just as well.

If you believe we handled your request badly, you can lodge a complaint with the supervisory authority. In Belgium that is the Data Protection Authority; in Bulgaria, where the company is established, the Комисия за защита на личните данни.