Privacy Policy

SiteManor builds a website for your salon in about a minute and hands you a dashboard where bookings, inquiries, leads and walk-in QR codes land in one place. This policy explains what personal information we handle to make that work, who we share it with, how long we keep it and what you can ask us to do with it.

No advertising networks, no data sales, no selling access to your client list. We make money from monthly subscription fees, not from anyone's personal information.

SiteManor ("we", "us", "our") operates the website builder, the dashboard and the hosted salon websites. Depending on whose information it is, we act in one of two roles:

• About salon owners and their teams: we decide how account information is processed, so we are the data controller. This covers the person who signs up, the plan they pay for and the settings they change.
• About your clients: when someone books a slot, sends an inquiry or leaves a message through a website or QR code that belongs to a salon, that salon's owner decides why and how the information is used, and we process it on their instructions as a data processor.

If you are a client of a salon that runs on SiteManor and want your information removed, the fastest route is the salon itself — the owner can see and delete the record from their dashboard. You can also contact us and we will forward the request.

We only collect what a feature on this page actually uses:

• Account details. Your name, email address, a password stored as a hash, the salon or business name you give us, and the plan you are on.
• Salon content you add. The description you type when generating a site, plus any services, prices, opening hours, photos, gallery images and testimonials you upload or edit afterwards.
• Booking and inquiry submissions. The details a client enters on your booking or inquiry form — usually name, contact details, chosen service, preferred date and time, and any note they add. These are stored so the dashboard can show them.
• Technical and usage information. Device, browser and IP details, the pages visited and the referring site, so we can keep the service working, spot abuse and see which parts of the product need work.
• Payment information. Card details are handled by our payment provider; we keep the invoice, amount, date and plan, not the card number itself.

We do not ask for, or knowingly collect, sensitive categories of information such as health data. Please do not paste anything like that into a service description or a booking note.

• Generate and host your salon website, and keep it in sync with the services, prices and photos you edit.
• Deliver bookings, inquiries and leads to your dashboard the moment a client submits them.
• Send messages you asked for: welcome and password emails, receipts, plan and renewal notices, and replies when you write to us.
• Keep the service safe — detect spam, abuse, credential stuffing and fraudulent sign-ups, and enforce the rules in our Terms.
• Improve the product using aggregate, de-identified statistics about how features are used.
• Answer support questions and resolve disputes when a salon owner or a client raises one.

Where data-protection law asks us to name a reason, these are ours:

• Contract. Processing that is needed to give you the service you signed up for — hosting your site, showing bookings, running your plan.
• Legitimate interests. Keeping the platform secure, preventing abuse, measuring usage in aggregate and replying to enquiries.
• Consent. Optional cookies and non-essential emails; you can withdraw either at any time without affecting the service.
• Legal obligation. Keeping financial records and responding to valid legal requests.

We share information with a small set of suppliers who run parts of the platform, and only to the extent each one needs:

• Hosting and storage providers, who keep the websites and dashboard data running.
• Email delivery, so receipts and password emails actually arrive.
• Payment processing, which handles card details on our behalf under its own policy.
• Website analytics in aggregate form, to understand which features are used.

We may also disclose information to professional advisers, or to a buyer as part of a sale or reorganisation, and to authorities when we are legally required to. Each of those cases is limited to what the situation demands.

We do not sell personal information, and we do not rent your client list to anyone.

A salon website built on SiteManor is a public website: anyone with the address can read it, and search engines can index it. The same is true of a booking page reached by scanning a salon's QR code — the page itself is open to whoever has the code or the link, which is exactly what makes walk-in booking frictionless.

That is a design choice worth knowing about before you publish. Anything you type into a service description, gallery or testimonial becomes visible to the world, so keep personal information about your clients out of the content you publish. Dashboard data — bookings, inquiries, leads — sits behind your login and is not public.

Our own dashboard uses the cookies and storage needed to keep you signed in, remember your choices and protect the account. Those are strictly necessary and are always on.

Anything optional — for example usage measurement — loads only after you accept, and you can change that decision or clear cookies from your browser settings at any time. Salon websites generated on SiteManor can set their own cookies too; the salon owner is responsible for explaining those to their visitors.

Account information stays while your account is open. Bookings, inquiries and leads stay in your dashboard until you delete them, because deleting a record is the salon owner's call, not ours.

When an account is closed we remove what we can and keep only what we must — for example invoices for tax purposes — for the period the law requires. Backups are rotated on a short cycle, so anything deleted disappears from them within a few weeks.

Your information is processed on infrastructure operated for us in the countries where our suppliers run their data centres, which may not be the country you live in. Where that means data leaves its home region, we rely on the transfer safeguards our suppliers maintain with us. We do not move information anywhere it is not needed to deliver the service.

Traffic between a client's phone and a salon website travels over encrypted HTTPS, and custom domains issued on the Pro plan and above get SSL automatically. Access to production systems is limited to the people who need it for their job, with credentials kept separate from customer data, and we watch for suspicious activity.

No method of transmission or storage is perfectly secure, so we also ask you to use a strong, unique password for your dashboard and to revoke team access when someone leaves the salon. If we ever become aware of a breach that puts your information at real risk, we will tell affected account holders and explain what we are doing about it.

Wherever you live, you can ask us to give you a copy of the information we hold about you, fix anything wrong, delete it, hand it to another service in a usable format, stop certain uses, or withdraw a consent you gave. If we are processing on the basis of consent you can withdraw it without losing access to the service.

Write to hello@sitemanor.com from the address on your account and tell us what you want. We may ask you to confirm who you are before we act, we answer within thirty days, and we do not charge for a reasonable request. If a response does not satisfy you, you can raise the matter with your local data-protection authority.

Salon owners: you have the same rights over your own account information, and you are the one who can delete a client's booking or inquiry record from the dashboard.

Your website and booking forms collect information on your behalf, so you carry obligations we cannot carry for you:

• Tell visitors what you collect and why, with a privacy notice of your own on your site.
• Ask for consent where the law in your area requires it, including for marketing messages.
• Use client details for the appointment they gave them for — not for anything they did not agree to.
• Honour access and deletion requests from your clients; you can do it from your dashboard.
• Keep the services, prices and opening hours you publish accurate and current.

We give you the tools — forms, a booking page, a QR code, a dashboard — but the decisions about your clients' information stay with you.

The service is a business tool for salon owners and is not directed at children. We do not knowingly collect information from anyone under the age of majority. If you believe a child has given us personal information, write to us and we will remove it.

If we change this page we will update the date at the top, and if a change materially affects how we use information we will tell account holders by email before it takes effect. The version above the line is the one that applies today.

Questions, requests, or something you would like us to explain more plainly: hello@sitemanor.com. Please include your salon name or the email on your account so we can find the right record quickly.