Privacy policy.

Who is responsible for your information

Serene Nails is the data controller. You can contact us by telephone on 0151 345 5525 or by post at 329 Aigburth Road, Aigburth, Liverpool, L17 0BL.

Information we collect

• Account details, including your name, email address, phone number, and user ID.
• Booking and salon records, including services, appointment times, booking notes, guest names, visit history, loyalty progress, and cash checkout totals.
• Optional care information you choose to provide, such as allergies or sensitivities.
• Content you send, including support messages, inspiration photos or videos, and appointment references.
• Technical information needed to operate and secure the service, including sign-in provider details, push-notification tokens, device identifiers, App Check signals, and basic request logs.
• Website performance information collected in aggregate to help us keep the site reliable.

We receive most information directly from you. If you use Sign in with Apple or Google, we also receive the account details that provider is authorised to share with us.

Why we use it

• To create and secure your account, manage appointments, provide salon services, maintain loyalty progress, and respond to support requests. We do this to perform our contract with you and take steps you request before a booking.
• To prevent abuse, diagnose faults, maintain records, and protect customers and the salon. We do this for our legitimate interests in running a safe, reliable service and, where applicable, to meet legal obligations.
• To send appointment and support notifications when you choose to enable them. You can turn notifications off in iOS Settings.
• To use optional allergy or sensitivity notes when providing your requested service. We rely on your explicit consent for this health-related information. You can withdraw consent by removing the notes and saving your preferences.

We do not sell personal information, use it for third-party advertising, or track you across other companies' apps and websites.

Automated support

If you give permission in the app, your message, appointment reference, and selected attachments may be processed by Serene Nails' automated support service, hosted on Google Firebase, to prepare a response. You can decline and ask for a person instead, and you can revoke permission from Account at any time.

Automated support cannot complete a cancellation, reschedule, or other account-changing action without asking you to confirm it. It does not make decisions that have legal or similarly significant effects.

Who we share information with

We use carefully selected providers only where needed to operate the service:

• Google Firebase for authentication, database hosting, file storage, server functions, app integrity checks, push-token management, and automated support hosting.
• Apple for Sign in with Apple and Apple Push Notification service.
• Google for Google Sign-In when you choose that option.
• Vercel for website hosting, reliability, and aggregate performance data.
• Transactional communications and professional advisers where needed to deliver messages, comply with law, or protect legal rights.

Providers must protect personal information to standards consistent with this policy and may process it only for the services they provide to us. Some providers may process information outside the UK. Where that happens, we rely on an adequacy decision or appropriate contractual safeguards.

How long we keep it

• Account, preference, and active booking information is kept while your account is active and while needed to provide the service.
• Booking and financial records may be kept for up to six years where needed for tax, accounting, dispute, or legal obligations.
• Support messages and customer uploads are normally deleted within 12 months after the relevant conversation or appointment is resolved, unless they are needed for an active complaint, safety issue, or legal claim.
• Push tokens are kept until they expire, are replaced, or the associated account is deleted.

An in-app deletion request starts a seven-day deletion process. We remove or anonymise information that is no longer required, while retaining the minimum records we must keep by law.

Your choices and rights

Depending on the circumstances, you may ask us for access to your information, correction, deletion, restriction, objection, or a portable copy. You can prepare an export and start account deletion from Account in the iPhone app. You can also contact us using the details above.

You may withdraw consent at any time. This does not affect processing that was lawful before withdrawal. You may complain to the UK Information Commissioner's Office at ico.org.uk.

Security, children, and changes

We use access controls, encrypted connections, app-integrity checks, and service-provider safeguards designed to protect personal information. No internet service can guarantee absolute security.

The online account service is not directed at children under 13. A parent or guardian should contact us before providing information for a child.

We review this policy when our services or providers change. We will update the date above and provide an appropriate notice before using information for a materially different purpose.