Privacy Policy

Who we are

LuxonSalon is a premium unisex salon. The salon is operated by Acme Technologies Private Limited, which is the entity that collects and is responsible for the personal data described in this policy.

Our website is luxonsalon.com and we operate in India. Complaints about how your data is handled go to the grievance officer named in the grievance officer section of this page.

Where booking is offered and which clock applies

Online booking is offered to customers in India only. There is no overseas timezone handling and no booking from outside India. Every appointment time, reminder time and the 24-hour free-cancellation cutoff are decided on the Asia/Kolkata clock.

Where your data is kept

Personal data is hosted, serviced and registered in India. It is processed in the Indian region and is not replicated to another jurisdiction.

• Personal, authentication and payment data are held in the product’s relational database, which is the single source of truth.
• A separate read-only mirror holds public content only: published services, packages and stylist listings, the same information anyone sees on the website. No customer record reaches that mirror.
• Images you may see on the site (gallery, stylist photos, service images, package banners) are files held in Google Cloud Storage in the same Google Cloud project.
• Encrypted nightly backups of the database, the public mirror and the media files are written to a separate Google Cloud Storage bucket from the media bucket. Backup objects are never publicly readable. Backups are kept 30 days.
• Every browser and API request is carried over TLS; data at rest is encrypted by the provider.

What we collect and why

Your data is collected for booking, payment, notification and salon-service purposes only. Marketing messages require a marketing consent you have recorded.

Consent is a timestamped checkbox recorded when you sign up or book. Marketing consent is separate for email, SMS and WhatsApp.

• Your account identity (email, phone, password credential, Google sign-in subject, account status) to sign you in, secure your account and contact you about your booking.
• Your salon profile (full name, phone, email, gender, birthday, hair type, allergies or sensitivities, preferred stylist, free-text notes) to give you the service you asked for and brief the stylist correctly.
• Your appointments (the visit, the services in it, the stylist, times, amounts, applied coupon or package credit) to take, change, perform and price the visit.
• Your payments and refunds (amount, method type, status, provider reference) to take payment, refund you and keep the accounting record.
• Your GST invoices (billed-to details, tax split, invoice number) as the legal tax document for your purchase.
• Your consent records, notification choices and the log of messages sent to you, to prove the consent you gave, send what you asked for and respect what you turned off.
• Your data requests and their outcome, and the record of a completed deletion, to answer your request and prove it was carried out.
• Audit and access records (who on the team touched a record, and who viewed a sensitive note) for accountability and dispute handling.

Sensitive information

Allergies, sensitivities and hair type are treated as sensitive. They are masked by default on screen. They are visible only to the stylist assigned to that booking, and to reception, the owner or a manager for that booking.

Every view is recorded: who viewed, their role, the time, the customer record and the fields viewed. They are excluded from every CSV export, and staff reports never include sensitive notes, whatever the role of the person who runs them.

Marketing consent and message channels

Consent is taken as separate, unchecked opt-ins per channel: one for email, one for SMS and one for WhatsApp. Each is recorded with its timestamp and its source: the website, the front desk or the booking wizard.

SMS and WhatsApp messages are sent only through DLT-registered sender identities and approved templates. Marketing messages go only to numbers with recorded marketing consent. A number without marketing consent receives transactional messages only: confirmations, reminders, invoices and service notices.

You can withdraw a marketing consent at any time from your account. Withdrawal stops marketing immediately, keeps the transactional messages that the service requires, and flags your profile for owner review. Sign-in continues to work.

Cookies and analytics

A cookie banner records your cookie choice and holds analytics scripts back until you choose.

Analytics are de-identified. Records carry an internal reference and never your name, phone number, email address, notes or any payment detail.

Who else sees your data

Outbound calls to these providers are made from our servers, never from your browser, except the Google Maps embed on the contact page and the WhatsApp deep link. No personal data is sold.

• Razorpay receives the payment amount, the order reference and the payment result, to take your payment and process refunds. A card number, CVV or UPI credential is never posted to, stored by or logged by LuxonSalon.
• MSG91 receives your phone number and the message content needed to deliver an SMS or one-time code.
• The WhatsApp Business Cloud API receives your phone number and the message content needed to deliver the message.
• Our email provider receives your email address and the message content needed to deliver the email, including your invoice.
• Google Maps receives nothing about you; the map on the contact page is a map embed.

Your data rights

From your account you can request a copy of your data. The owner reviews and approves the request, and you receive a machine-readable archive of your profile, appointments, payments, invoices, wallet, loyalty and consent records.

Deletion requests are raised from your account, reviewed by the owner, and then completed. Once completed, your profile and booking history are anonymised: your name, phone number, email address and notes are replaced. Booking and invoice totals stay for accounting.

A deletion request moves from requested to in review, then approved, then completed, or it is rejected. Only the owner approves. A restore from backup never reverses a completed deletion: anonymisation is applied again from the deletion record before any restored data becomes reachable.

How long we keep your data

We keep your customer profile and your booking history for 5 years after your last visit. After that we anonymise them: your name, phone number, email address and notes are replaced, and the link to your visits is kept only for accounting.

A deletion request cannot remove tax records. Invoices, payments and refunds must be kept for 8 years under Indian tax law. A deletion request anonymises your profile and booking history, and does not erase those records before their period ends.

Children and minimum age

You must be 18 or over to hold an account and to pay online. A person under 18 can be booked only as a guest, by a parent or guardian who accepts our terms and stays as the payer named on the invoice.

Security

These measures protect your data.

• TLS for every browser and API request.
• Provider-managed encryption at rest for the database and the storage buckets, with backups in a bucket separate from media. Nightly backups are kept 30 days, recovery is targeted within 4 hours, and a restore drill runs every 90 days.
• Role-based access inside the salon: staff see only what their role allows.
• Every staff action on a record, and every view of a sensitive note, is logged.
• Payments, invoices, refunds, wallet, loyalty, consent, audit and sensitive notes are never kept in your browser. Sign-in sessions are carried in a single secure, httpOnly cookie with a fixed lifetime; signing out clears it.

Grievance officer

Complaints about how your data is handled go to the grievance officer. Write to the email below or use the contact page, and the officer will acknowledge your complaint and reply in writing.

Changes to this policy

When this policy changes, the publication date changes with it, and a material change to how data is used is announced on the website before it takes effect. The effective date and the last updated date appear at the top of this page.

The cancellation and refund terms are published alongside this policy on the policies page.