Who this notice applies to
This notice applies to business account holders, team members, customers who book or join a waitlist through the platform, and visitors to Braider Booking AI.
For business account, subscription, security and service-administration data, Braider Booking AI acts as a data controller. For customer booking data processed for an independent salon or braider, that business will usually be the controller and Braider Booking AI will act as its processor.
Information we use
For business users, this may include account and contact details, business profile information, services, staff, availability, subscription status, Stripe identifiers, support messages and account activity.
For customers, this may include name, email address, optional phone number, service selection, appointment and waitlist details, booking changes, reminder records and payment status or identifiers. Braider Booking AI does not store full payment-card details.
We also process limited technical and security information such as IP addresses, timestamps, browser or device information, authentication events and error logs. Microsoft Clarity loads in Consent Mode. Before analytics consent, it may process limited page-view and technical data in no-consent mode without setting Clarity analytics cookies. If a visitor chooses optional analytics, Clarity may additionally process website interaction data such as clicks, scrolling, device information and session playback data. Google Analytics 4 (GA4) is not loaded until optional analytics consent is given. After consent, GA4 may collect page views, traffic sources, device and engagement information and non-identifying conversion-event names to help us understand how people use the website.
Why we use it
We use personal information to operate accounts and workspaces, publish storefronts, manage bookings and waitlists, send transactional emails and reminders, provide payment integrations, deliver support, prevent abuse and fraud, investigate technical issues and meet legal obligations. Where a visitor gives optional analytics consent, we use Microsoft Clarity and Google Analytics 4 to understand website usage, measure sign-up interest and improve navigation, content and user experience. Advertising consent remains denied in our tag configuration.
Our lawful bases
Depending on the activity, we rely on contract, steps taken before entering a contract, legal obligation, and legitimate interests in operating, securing and improving the service. Where consent is required, for example for optional marketing or non-essential tracking, we will ask for it separately.
International transfers
Some service providers may process information outside the United Kingdom. Where UK data-protection law requires safeguards, we rely on an appropriate legal transfer mechanism made available by the relevant provider.
How long we keep information
We keep information only for as long as it is reasonably needed for the service, security, accounting, legal obligations, dispute resolution or enforcement of agreements. Retention periods vary by record type and by the lawful instructions of participating businesses.
Security
We use measures designed to protect personal information, including HTTPS, password hashing, secure session cookies, email verification, rate limiting, tenant separation, CSRF protection, signed links and controlled production deployment.
Your rights
Depending on the circumstances, you may have rights to access, correct, erase, restrict or object to processing, receive portable data, and withdraw consent where consent is the lawful basis.
To make a request, email braiderbookingai@gmail.com. We may need to verify your identity. Where a request concerns booking data controlled by a salon or braider, we may refer the request to that business.
Complaints
Please contact us first if you have a privacy concern. You may also complain to the UK Information Commissioner's Office at ico.org.uk.
Children
Business accounts are intended for adults acting for a business. Where a participating business offers services to children, that business remains responsible for any parental or guardian permissions required for its services.
Changes to this notice
We may update this notice when the service, our suppliers or our legal obligations change. The current version and effective date will always appear on this page.