← Salon Azul

Trust & Privacy

This page is maintained by Salon Azul to answer common questions about how the booking site collects, uses, and protects your information. It describes currently enabled controls — it is not a certification or audit report.

What data we collect

When you book online we collect your name, phone number, and (optionally) your email address, along with the service, barber, and time you choose. We store appointment history so we can serve you and follow up.

We do not ask for payment details on this site; payment happens in-shop.

How we use it

Your contact information is used to confirm your booking, send a reminder before your appointment, and reach you if something changes. We do not sell or rent your information to third parties.

Who can access your data

Access to client and appointment records is restricted to the shop owner and the assigned barber, enforced server-side by row-level access rules in our database. Public visitors of this website cannot read client records.

Subprocessors

We rely on a small number of vendors to run the booking experience:

  • Supabase — database, authentication, and storage.
  • Twilio — SMS confirmation and reminder messages.
  • Lovable — application hosting and transactional email delivery.

Each vendor processes only the data needed to perform its function (for example, your phone number is shared with Twilio so we can SMS your reminder).

Retention and deletion

Appointment and client records are retained for the duration of our relationship with you. To request deletion of your record, contact us using the email below and we will remove your data, except where we must keep a record for legal or accounting reasons.

Cookies and analytics

The site uses only the cookies and local storage required to keep you signed in to the staff dashboard and to remember your language preference. We do not run third-party advertising trackers on the public booking pages.

Security controls in place

  • HTTPS for all traffic between your device and our servers.
  • Row-level access policies on every table containing client data.
  • Staff authentication required for the back-office dashboard.
  • Secrets and API keys stored server-side, never exposed in the browser.

Security is a shared responsibility: we protect the platform, and you help by keeping your account credentials confidential and reporting anything suspicious.

Contact & privacy requests

For privacy questions, deletion requests, or to report a suspected security issue, contact the shop directly. We aim to respond within a few business days.

This statement reflects current practices and may be updated. Check back for the latest version.