Privacy Policy
- Status
- In effect
- Version
- 1.0 (early access)
- Effective date
- 6 October 2026
Version 1.0 (early access). Effective date: the date this policy is first published on salonlog.com, shown at the top of the page.
See also:Terms of Use
1. Who is responsible
SalonLog is operated by Mbali Pearl Msweli trading as SalonLog, a sole proprietor in South Africa.
- For your account and contact-form information, SalonLog decides how it is used. SalonLog is the responsible party.
- For the information a salon records about its own team and its work, the salon owner is the responsible party. SalonLog processes that information on the salon's behalf, as its operator.
Information Officer: Mbali Pearl Msweli. Contact through the Contact SalonLog form, choosing "Privacy request", or on +27 73 809 4340. The Information Officer's registration details from the Information Regulator will be added here once they are issued.
2. What we collect and why
| Information | Examples | Why we collect it |
|---|---|---|
| Account details | Name, email address, mobile number if you sign up with one | To create and secure your account, let you sign in and send account emails such as verification and password reset |
| Password | Chosen by you | To sign you in. Your password passes securely through SalonLog to our sign-in provider, which checks it. SalonLog does not store or record your password |
| Salon and branch details | Salon name, branch names | To run your salon's records |
| Team access | Receptionist names, usernames, mobile numbers | So the people you choose can sign in with the permissions you set |
| Employee details | Names and pay arrangements such as a commission percentage | To record who did the work and calculate pay estimates. Pay totals are calculated from the information entered; SalonLog does not pay anyone |
| Services, visits and payment-method records | Service performed, amount charged, cash, card or EFT, date and time | To keep the salon's records and show its reports. We do not keep client profiles |
| Sign-in and security records | Sign-in and sign-out times, an audit trail of changes, technical security logs | To keep accounts secure, prevent misuse and show who changed what |
| Agreement records | Which versions of these documents you accepted, and when | To prove what you agreed to |
| Contact-form messages | Your name, email address, reason and message | To reply to you |
| Error reports | Technical details of a fault, with personal details removed where possible | To find and fix problems |
3. Cookies and similar technology
SalonLog uses one essential sign-in cookie. It is secure, cannot be read by page scripts, and is a session cookie, so it ends when your browser session ends. Without it you cannot stay signed in.
SalonLog may also store a small setting in your browser, such as whether you dismissed the "Add SalonLog to your phone" message.
We do not use advertising or tracking cookies.
4. Who helps us run SalonLog
| Provider | What it does | Where |
|---|---|---|
| Supabase | Database and sign-in | European Union (Ireland) |
| Railway | Runs the SalonLog application server | Outside South Africa |
| Vercel | Hosts the website | Outside South Africa |
| Resend | Sends account emails and contact-form messages | Outside South Africa |
| Cloudflare R2 | Stores encrypted backups | European Union |
| GitHub Actions | Runs the job that creates the encrypted backups | Outside South Africa |
| Sentry | Error monitoring | European Union (Germany) |
We share personal information with these providers only so they can provide their service to us. We do not sell personal information.
5. Information outside South Africa
Some of these providers process information outside South Africa. We use providers that commit to protecting it and transfer information only as the Protection of Personal Information Act (POPIA) allows.
6. How we protect information
- Information travels encrypted (HTTPS).
- Each salon can see only its own records.
- Sign-in is managed by a specialist provider.
- Backups are encrypted, and access to systems is limited.
No system is perfectly secure. If a security breach affects your personal information, we will tell you and the Information Regulator as the law requires.
7. How long we keep information
| Information | How long |
|---|---|
| Account and salon records, including the record of who changed what | While your account is open. If you close your account, they are deleted 30 days after you ask |
| Encrypted backups | Each backup is deleted automatically 45 days after it is made |
| Agreement records | Up to 5 years after the account closes, as proof of what was agreed |
| Contact-form messages | Up to 2 years in our support inbox |
| Error reports | For the period our error-monitoring provider keeps them |
We keep information for longer only where the law requires it.
8. Your rights
You may ask to:
- see the personal information we hold about you, or receive a copy of your salon's records;
- correct or delete it;
- close your account; or
- object to how it is used.
Use the Contact SalonLog form and choose "Privacy request", or WhatsApp or call +27 73 809 4340. Never send your password or sensitive employee information through WhatsApp. We may need to confirm your identity first. We will respond as soon as reasonably possible and within the time the law allows.
If you are an employee whose details a salon recorded, please ask that salon first. We will help the salon respond.
9. The Information Regulator
If you are unhappy with how we handle your personal information, you may complain to the Information Regulator of South Africa. Its website, inforegulator.org.za, explains how.
10. Age
SalonLog is for people aged 18 or older who run or work in a salon.
11. Changes to this policy
We will publish any update with its date and version number, and tell you about important changes.