Privacy policy

Who we are

GetSalonPOS (“we”) provides hosted point-of-sale and booking software for hair salons, sold in the United States, the United Arab Emirates and Pakistan. This policy covers this website and the GetSalonPOS software. For privacy requests use the data request page.

What we collect

• Forms on this site: name, phone or WhatsApp number, email, salon name, city, number of chairs, your message, the page you were on and campaign parameters (such as utm_source) if you arrived from an ad or link.
• Essential storage: your chosen country, theme, colour palette, accessibility settings and cookie choice, stored in your browser.
• Analytics and marketing: only if you allow them in the cookie panel.
• In the software: your business data and the client data you enter. For client data, you (the salon) decide what is collected; we process it on your behalf.

How we use it

To reply to your enquiry, book demos, provide and support the software, bill subscriptions, keep the service secure, and — with consent where required — measure and improve our marketing. We do not sell personal data and we never contact your salon's clients.

Who we share it with

Service providers that help us run the business: hosting, our CRM (GoHighLevel), team notifications (Discord), spam protection (Cloudflare Turnstile), and, if you allow analytics, our analytics provider. Each processes data only for us. We may disclose data where the law requires.

How long we keep it

Enquiries: up to 24 months after our last contact. Customer accounts: for the life of the subscription and 30 days after cancellation, then deleted, except records we must keep for tax and accounting.

Your rights

Depending on where you live you may have the right to access, correct, delete or export your data, to object to or restrict processing, to withdraw consent, and to opt out of the “sale” or “sharing” of personal data (we do neither). California residents have rights under the CCPA/CPRA; UAE residents under the Federal Personal Data Protection Law; we apply the same standard everywhere. Make a request on the data request page.

Security

HTTPS everywhere, role-based access, daily backups and audit logs. No system is perfectly secure; we will notify you of a breach affecting your data as the law requires. See security & your data.

Children

This site and the software are for businesses and are not directed at children under 16.

International transfers

Data may be processed in countries other than yours, with safeguards appropriate to the transfer.

Changes and contact

We will update this page when practices change and show the date at the top. Questions: use the privacy option on the data request page.