Privacy Policy for MyHairQue

1. Introduction

MyHairQue ("we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, share, and protect your information when you use the MyHairQue platform, website, or mobile application (collectively, the "Platform"). We comply fully with the General Data Protection Regulation (GDPR) and all applicable Belgian and EU data protection laws.

2. Data Controller

3. Information We Collect

3.1. Information You Provide Directly

When you create an account, make a booking, or interact with the Platform, we collect:

• Full name and email address
• Phone number
• Profile photo (optional)
• Account login credentials (stored securely, passwords are hashed)
• Reviews, ratings, and comments you submit
• Photos you upload (including "Before & After" transformation images)
• Messages sent through the in-app messaging system

3.2. Information Collected Automatically

When you use the Platform, we automatically collect:

• IP address and approximate location
• Browser type, device type, and operating system
• Pages visited, features used, and time spent on the Platform
• Cookies and similar tracking identifiers (see Section 11)

3.3. Payment Information

When you make a booking, payment data is processed by our third-party payment processor (Stripe). We collect:

• Transaction amount and booking reference
• We do NOT store your full credit card number, CVV, or bank details — these are handled exclusively by our PCI-compliant payment partner

4. Legal Basis for Processing (GDPR Article 6)

We process your personal data based on the following legal grounds:

• Contractual Necessity: To perform our contract with you (e.g., processing bookings, managing your account)
• Consent: Where you have given explicit consent (e.g., marketing communications, uploading photos)
• Legitimate Interest: To improve our services, prevent fraud, and ensure platform security
• Legal Obligation: To comply with applicable laws, tax requirements, and regulatory obligations

5. How We Use Your Information

We use the information we collect to:

• Process and manage your bookings and appointments
• Send appointment confirmations, reminders, and updates
• Manage your loyalty points and rewards
• Enable communication between Clients and Stylists via in-app messaging
• Display reviews, ratings, and user-generated content on the Platform
• Improve, personalize, and optimize the Platform experience
• Detect, investigate, and prevent fraud, abuse, or unauthorized access
• Comply with legal and regulatory obligations
• Send marketing communications (only with your consent — you can opt out at any time)

6. Information Sharing and Disclosure

We may share your personal data with:

• Stylists/Salons: Your name, contact information, and booking details are shared with the Stylist when you make a booking, to enable the performance of the service
• Payment Processors: Transaction data is shared with Stripe for secure payment processing
• Service Providers: Trusted third-party providers who help us operate the Platform (e.g., email delivery, hosting, analytics) under strict data processing agreements
• Law Enforcement: If required by law, court order, or to protect our rights, safety, or the safety of others
• Admin & Dispute Resolution: In-app messages and booking data may be reviewed by MyHairQue administrators for dispute resolution, fraud prevention, or Terms of Service enforcement

We do NOT sell, rent, or trade your personal information to third parties for their marketing purposes.

7. International Data Transfers

Your data is primarily stored and processed within the European Economic Area (EEA). If any data is transferred outside the EEA (e.g., to service providers), we ensure adequate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, in compliance with GDPR Article 46.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Account data is retained for as long as your account is active. After account deletion, we may retain certain data for up to 5 years to comply with legal obligations (e.g., tax and accounting requirements under Belgian law). Booking and transaction records are retained for the legally required retention period. You may request deletion of your account and associated data at any time (see Section 10).

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption of data in transit (TLS/SSL), secure password hashing, access controls, regular security assessments, and use of PCI-compliant payment processors. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

10. Your Rights Under GDPR

As a data subject in the EU, you have the following rights:

• Right of Access (Article 15): Request a copy of the personal data we hold about you
• Right to Rectification (Article 16): Request correction of inaccurate or incomplete data
• Right to Erasure (Article 17): Request deletion of your personal data ("right to be forgotten")
• Right to Restriction (Article 18): Request that we limit the processing of your data
• Right to Data Portability (Article 20): Receive your data in a structured, machine-readable format
• Right to Object (Article 21): Object to the processing of your data based on legitimate interest
• Right to Withdraw Consent: Withdraw consent at any time without affecting the lawfulness of prior processing
• Right to Lodge a Complaint: File a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données)

To exercise any of these rights, contact us at privacy@myhairque.com. We will respond within 30 days as required by GDPR.

11. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

• Essential Cookies: Required for the Platform to function (e.g., session management, authentication)
• Analytics Cookies: Help us understand how users interact with the Platform (e.g., page views, feature usage)
• Preference Cookies: Remember your settings (e.g., language, theme preferences)

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of the Platform.

12. Email Communications

We send transactional emails related to your account and bookings (e.g., confirmations, reminders, reschedule notifications). These are necessary for the performance of our service. We may also send promotional emails and newsletters, but only with your explicit consent. You can manage your notification preferences in your account settings or unsubscribe at any time using the link provided in every email.

13. Children's Privacy

The Platform is not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@myhairque.com and we will promptly delete the information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via email or an in-app notification. We encourage you to review this page periodically.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: