Information We Collect
Personal Identification Info
Name, email address, mobile phone number, profile avatar, and verified user role (Customer or Service Provider).
Precise Location Data (Optional)
GPS coordinates when granted to display nearby salons, map directions, and distance calculations. You can revoke location access anytime in browser/OS Settings.
Transaction & Appointment Records
Booked service details, appointment dates/times, payment receipts, salon notes, and booking reference numbers.
Device & Usage Analytics
IP address, device browser/OS model, platform performance telemetry, and notification tokens for reliable delivery.
How We Use & Process Your Data
Booking & Service Delivery
To facilitate appointments, sync with your Google/Apple Calendar, and send automated email and SMS booking reminders.
Payment Processing & Security
All credit/debit card numbers are tokenized and processed directly by Stripe (PCI-DSS Level 1) and PayPal. BookAura never accesses or stores your raw card CVV or full card numbers.
Customer Support & Dispute Handling
To investigate customer inquiries, verify refund eligibility, and facilitate clear communication between clients and studios.
Data Sharing & Third-Party Protections
Zero Sale of Personal Data
We NEVER sell, rent, or trade your personal data, location history, or contact details to third-party advertisers or data brokers.
Service Provider Disclosure
When you book an appointment, only necessary details (your name, phone number, and service notes) are shared with the specific salon you booked.
Security & Encryption Standards
AES-256 Bit Encryption
All user data at rest is encrypted with military-grade AES-256 standards. All data in transit is protected using TLS 1.3 encryption.
Automated Threat Detection
24/7 automated monitoring against unauthorized account access, credential stuffing, and brute force attacks.
Your Legal Rights (GDPR, CCPA & UK DPA)
Right to Access & Portability
You can request a complete copy of all your personal data and booking history at any time by contacting our privacy officer.
Right to Erasure (Right to be Forgotten)
You can permanently delete your account and all associated personal data directly from Profile > Settings, or by emailing privacy@bookaura.net.
Need data export or account erasure?
You can reach our Data Protection team directly at privacy@bookaura.net to exercise your right to access or erasure.