Privacy policy
Who's responsible
Coiffed is a trading name of WoofBook App Ltd, a company registered in England and Wales with company number 17157714. Our registered office is at Flat 2102, Legacy Point, 4 Victoria Road, London, W3 6FH. WoofBook App Ltd is registered with the UK Information Commissioner's Office (ICO) as a data controller under registration number ZC123885. For anything about this policy or your personal data, contact hello@coiffed.app.
For a salon's own account details we are the data controller. For a salon's client records, the salon is the controller and we are its processor: we only handle that data to run the service on the salon's instructions. If you're a salon client with a question about your record, ask your salon first. They hold it and control it.
What we hold, and why
About salons: the owner's name and email, the salon name, opening hours, team members and levels, service menu and prices, message settings and templates. We need these to provide the service (contract). Billing is handled by Stripe; we hold a Stripe customer reference and the state of the subscription, not card numbers.
About salon clients, on the salon's behalf: name, phone, email, notes the salon adds (such as allergies or preferences), appointment history, what was done at each visit including colour formulas, payments and deposits, ratings and comments a client leaves, and whether they've opted out of rebooking emails. Where a card is saved for deposits or no-shows, it's stored by Stripe on the salon's own Stripe account. We hold only the card brand and last four digits so the salon can recognise it.
Emails we send for salons: reminders, review requests and rebooking nudges, in the salon's name. We keep a log of what was sent, to whom and when, so the salon can see it and so nothing is sent twice.
Technical: ordinary server logs (IP address, time, what was requested) kept briefly for security and debugging. We don't run analytics or advertising trackers on the app or the website.
Cookies
The app keeps you signed in using a token stored in your browser. That's the only thing we store on your device, and it does nothing but keep you signed in. The website sets no cookies.
Who else sees it
Only companies that help us run the service, under contract, and only what they need:
- Fly.io hosts the application and database in London.
- Vercel serves the app and website.
- Stripe processes payments and subscriptions. Stripe is a controller in its own right for the payment data it holds.
- Amazon Web Services (SES) delivers the emails we send, from EU infrastructure.
- Cloudflare provides our domain and routes email sent to us.
We don't sell data, we don't share client lists, and we don't let anyone use them for their own marketing.
Where it's kept
In the UK and EU. Stripe and AWS may process some data outside the UK under recognised safeguards (the UK addendum to the EU standard contractual clauses).
How long
- Salon and client data: for as long as the salon has an account, then deleted within 90 days of closure.
- Payment records: as long as tax law requires, currently six years.
- Backups: rolling, kept for seven days.
- Server logs: up to 30 days.
Your rights
You can ask what we hold about you, ask for it to be corrected or deleted, ask for a copy, or object to how it's used. Email hello@coiffed.app and we'll respond within a month. If you're a salon client, we'll usually pass the request to your salon, since they control your record, and help them answer it. You can also complain to the Information Commissioner's Office at ico.org.uk.
Rebooking emails
Every rebooking email carries an unsubscribe link. One click stops them, and appointment reminders for anything you've actually booked still come through, because those are about your booking rather than marketing.
Changes
If we change this policy in a way that matters, salons get an email at least 30 days ahead. The date at the top always shows the current version.