Last updated 8 August 2026
This explains what MySalonHub does with personal information, who is responsible for it, and how to get it changed or deleted. It's written to be read rather than skimmed past, so it's plain English.
When you book a treatment, the salon decides what to collect and what to do with it. MySalonHub is the software they use to hold it — we don't sell it, mine it, or use it to advertise to you. Consultation forms are visible only to the salon you filled one in for. If you want your details changed or removed, ask the salon; if you can't get anywhere, email us at hello@mysalonhub.co.uk and we'll act.
Data protection law splits responsibility into two roles, and MySalonHub sits in a different one depending on whose data it is.
If you are a client — you booked an appointment, filled in a consultation form, left a review — the salon is the data controller. They chose to collect it and they decide how it's used. MySalonHub is their processor: we store and transmit it on their instructions and for no other purpose.
If you run a salon, we are the controller of your account: your name, email, password, subscription and billing status. That's our own relationship with you, not something a salon instructed us to hold.
| Information | Why | Lawful basis |
|---|---|---|
| Your name, phone number and email when you book | So the salon knows who's coming and can contact you if something changes | Performance of a contract — you asked for the appointment |
| Consultation form answers, including allergies, medication, pregnancy and medical conditions | So the treatment is safe to carry out on you | Your explicit consent, given by ticking the box on the form. This is special category data and gets the extra protection that goes with it. |
| Appointment history and amounts paid | The salon's diary and their business records | Contract, and the salon's legal obligation to keep accounts |
| Card details for deposits | Taking a deposit | Contract. Note that card numbers never reach MySalonHub — see below. |
| Your account email and password, if you make one | Logging in and seeing your own bookings | Contract |
| Salon owner name, email, password, subscription status | Running the service and billing for it | Contract |
MySalonHub never sees or stores card numbers. Deposits are taken by Stripe, who are certified to the card industry's security standard, and the money goes directly to the salon's own Stripe account — it doesn't pass through us. What we keep is a reference number for the payment, the amount, and the last four digits and expiry of a saved card so you can recognise it.
Booking confirmations, reminders and cancellation notices are service messages about an appointment you made, so they aren't marketing and you'll keep getting them for as long as you have bookings.
Review requests are different, and every one carries an unsubscribe link that works in one click, with no login and no confirmation step. Unsubscribing stops review requests only — your confirmations and reminders carry on.
We use a small number of suppliers to run the service. Each is bound by contract to process data only on our instructions.
| Supplier | What for | Where |
|---|---|---|
| Render | Hosting and the database | Frankfurt, EU |
| Stripe | Deposits and subscriptions | EU / US |
| Resend | Sending email | EU / US |
| Backblaze | Encrypted off-site backups | EU |
| Apple and Google | Push notifications to salon devices | EU / US |
Push notifications are deliberately sent empty: the notification wakes the app, which then asks our server what to show. That means no client's name passes through Apple's or Google's servers.
Where a supplier processes data outside the UK, that transfer is covered by the UK's International Data Transfer Addendum or an adequacy decision. We do not sell personal data, and we do not share it with advertisers.
You can ask for a copy of what's held about you, have it corrected, have it deleted, restrict or object to how it's used, and have it sent to you in a portable format. Where we've relied on your consent — the consultation form — you can withdraw it at any time, and withdrawing it is as easy as giving it.
For anything to do with a salon's records of you, ask that salon first: they are the controller and they hold the decision. If they don't respond, or you'd rather come to us, email hello@mysalonhub.co.uk and we will act on it directly. We respond within one month.
If you're unhappy with how we or a salon has handled your information you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd rather you told us first so we can put it right.
Traffic is encrypted in transit. Passwords are stored as salted hashes and are never recoverable — not by us either. Backups are encrypted and held separately from the live system. Each salon's data is isolated: a salon can only ever reach its own clients, its own diary and its own forms, and this is enforced on the server on every single request rather than by hiding buttons in the interface.
MySalonHub sets one cookie, which keeps you logged in. It is strictly necessary for the service to work, contains no tracking identifier, and is not shared with anyone. There are no analytics cookies, no advertising cookies and no third-party trackers, which is why you aren't being shown a consent banner.
MySalonHub isn't intended for under-18s to sign up to directly. Salons may treat younger clients where the treatment allows it and a parent or guardian consents; in that case the parent or guardian gives the consultation consent, and the salon is responsible for holding that record.
If we change anything that materially affects you, we'll say so on this page and update the date at the top. Salon owners will get an email as well.
MySalonHub — hello@mysalonhub.co.uk