Privacy Rules & Personal Data Protection Policy (Privacy Policy)

As part of booking afro hairstyling services and managing professional calendars, BraidBooker applies the strict principle of data minimisation (GDPR) and collects only the following categories:

• Identity and contact data: First name, last name, email address (to send the booking receipt, the summary and the .ics calendar invitation) and mobile phone number (used exclusively for transactional SMS notifications related to the appointment).

• Authentication data: Secure session identifier and, when signing in with Google Sign-In (OAuth 2.0), your verified email address, your display name and your public profile photo if you choose to share it.

• Service location data: For an appointment at a private salon, no personal address of the client is requested. For a home service, only the street and the municipality are requested at booking, in order to confirm that the service is offered in the selected city.

• Financial transaction data: Payments in Euros (€ EUR) are processed by our payment provider, Stripe. BraidBooker never stores your full bank card numbers on its own servers.

When you choose the “Continue with Google” option on BraidBooker:

• Limited access (OAuth scopes): BraidBooker only requests access to the standard identification scopes (openid, email, profile) in order to authenticate you without a password and link your bookings to your account.

• Exclusive purpose: The information from your Google account (email address, name and avatar) is used exclusively to create your user session on BraidBooker, pre-fill your booking profile and send you your appointment confirmations.

• No resale and no advertising profiling: BraidBooker never sells, rents or transfers your Google data to data brokers, advertising networks or unauthorised third parties.

• Declaration of Limited Use (Google API Services): BraidBooker's use and transfer to any other application of information received from Google APIs strictly complies with the Google API Services User Data Policy, including the limited use requirements (Limited Use requirements).

• Service at a private salon: BraidBooker protects the privacy of clients and afro hair braiders. The client's personal address is never required for a service at the salon.

• Home service in 2 steps: No intimate code (door code, intercom, building, floor) is requested at payment. These access details are transmitted to your afro hair braider only 2 hours before the start of the appointment (H-2) for her journey, and are then hidden once the service is finished.

• Retention period: Account data is kept as long as your account is active. Data related to bookings and payment invoicing is kept in accordance with European legal accounting obligations.

• Your rights (Access, Rectification, Deletion): In accordance with the General Data Protection Regulation (GDPR), you have at any time a right of access, modification, portability and complete deletion of your account and your personal data.

• Immediate deletion procedure: To revoke OAuth access or request the complete deletion of your personal data from our servers, simply send a request to support@braidbooker.com. Every request is processed within 48 working hours.