Privacy Policy
Website booking privacy notice
This notice explains how booking details submitted on Rita beauty parlour's website are used. It is separate from promotional consent.
Who handles your booking data
Rita beauty parlour manages your appointment. Elite Salon Alliance supplies the website and booking technology. Booking records are available to authorised salon staff and platform personnel for service operation and support.
Details collected and why
- Your name and mobile number: identify your appointment and contact you about it.
- Selected services, preferred date and time: check availability and schedule your appointment.
- Optional notes: handle requests you choose to share. Do not include identity documents, payment credentials, medical details or a child's personal data.
Booking contact details may also be saved as an enquiry in the salon's customer-management records, unless you are already a client. This does not itself add promotional consent.
The booking form does not collect payment-card details or take a payment. Your browser also sends technical request information, such as an IP address, for delivery and operation of the website.
Communications and service providers
Booking details may be handled by the platform's hosting and appointment-messaging providers where needed to operate the service or send confirmations and updates. Sending this booking does not itself opt you into promotional campaigns; promotional preferences are handled separately.
Storage and retention
Booking records are stored in the salon's platform records. This form does not automatically delete a booking after the appointment. Retention and authorised deletion requests are handled by the salon and platform, subject to applicable record-keeping requirements. Ask the salon about the retention period for your record.
Privacy requests, withdrawal and grievances
Contact meenatanwar155@gmail.com or 08130074511 or the salon website to request information about your booking data, correct it, request deletion, withdraw permission for further consent-based processing, or raise a privacy grievance. Include only the information needed to locate your booking; the salon may need to verify that the record belongs to you. Requests are reviewed subject to applicable legal and record-keeping requirements. Withdrawing permission may prevent the salon from continuing to handle the appointment; it does not undo processing already completed.
If your grievance is not resolved, you may use remedies available under applicable Indian law, including the Digital Personal Data Protection framework where applicable. This notice does not certify legal compliance or replace those rights.
Booking for children
Online booking is intended for adults. A parent or guardian should contact the salon directly to arrange a child's appointment.
Privacy Policy
This Privacy Policy applies to Rita beauty parlour ("we", "us", "the Salon"), including our website, in-salon billing system, and any customer mobile/web application made available to you, which are powered by the ESA (Elite Salon Alliance) technology platform operated by Elite Salon Alliance ("ESA", "Platform Provider"). ESA processes personal data solely on our instructions, as our data processor, for the purposes described below.
1. Introduction & Scope
This Privacy Policy explains how we collect, use, store, share, and protect personal data of clients, prospective clients, and website/app visitors ("you") when you visit our website, book an appointment, use our in-salon billing counter, or use the customer app to view receipts, packages, coupons, or offers.
This Policy is drafted to align with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025, the Information Technology Act, 2000 and rules made thereunder, and the Consumer Protection (E-Commerce) Rules, 2020, as applicable to service providers operating in India.
2. Who We Are (Data Fiduciary & Data Processor)
For the purposes of the DPDP Act, Rita beauty parlour is the Data Fiduciary — we determine the purpose and means of processing your personal data collected through this website, our billing counter, and the customer app. We are the party responsible and accountable to you, and to the Data Protection Board of India, for how your personal data is used.
ESA (operating as "Elite Salon Alliance" / "Elite Alliance"), as the technology platform provider, acts as our Data Processor only: it hosts our website, operates the point-of-sale (POS) terminal software, runs marketing/campaign tools on our behalf, and provides the customer app infrastructure, strictly under our instructions and this Policy. ESA does not sell your personal data, does not use it for its own independent marketing or commercial purposes, and does not determine why or how your data is processed — those decisions rest with us as the Salon.
Platform-only safeguard: ESA is a technology infrastructure provider to the Salon and is not itself responsible for the Salon's service delivery, pricing, offers, or its compliance with applicable law in operating its business. Any misuse of your personal data by the Salon or its staff outside the purposes stated in this Policy is the Salon's responsibility, not ESA's. ESA's obligations are limited to processing your data securely and only as instructed by the Salon, and to notifying the Salon promptly of any data breach on the platform so the Salon can meet its own notification duties under the DPDP Act.
3. Personal Data We Collect
| Category | Examples | Collected via |
|---|---|---|
| Identity & contact data | Name, phone number, email address, gender, date of birth (optional, for birthday offers) | Website booking form, in-salon registration, customer app sign-up |
| Transaction & billing data | Services availed, billing receipts, amounts paid, payment mode, invoice history, GST details (if applicable) | POS terminal at billing counter |
| Package & loyalty data | Prepaid packages purchased, package balance/usage, loyalty points, coupon and offer redemption history | POS terminal, customer app |
| Appointment data | Booking date/time, preferred stylist, service history | Website, customer app, front-desk booking |
| Communication data | Messages, feedback, complaints, WhatsApp/SMS opt-ins | Website contact forms, WhatsApp/SMS marketing module |
| Technical data | IP address, browser/device type, app usage analytics, cookies | Website, customer app (automatically) |
| Sensitive data (where relevant) | Skin/hair condition notes recorded by stylists for service quality (only where you voluntarily share this) | In-salon consultation |
We do not knowingly collect government ID numbers, financial account/card numbers, biometric data, or health records beyond general service-consultation notes described above.
4. How We Use Your Personal Data
To create and manage your booking and billing records, and issue digital receipts through the customer app.
To manage prepaid packages, membership tiers, loyalty points, coupons, and promotional offers.
To send appointment reminders, offers, and marketing communications via SMS, WhatsApp, email, or app notifications, where you have consented.
To improve service quality, staff training, and stylist allocation.
To operate, secure, and maintain the website, POS system, and customer app.
To comply with applicable tax, accounting, and legal record-keeping obligations.
To respond to your queries, feedback, or complaints.
5. Legal Basis for Processing
We process your personal data on the basis of:
Your consent — for marketing communications, offers, and optional profile details (e.g., birthday, hair/skin preferences). Consent is collected through clear affirmative action (a checkbox or opt-in) and can be withdrawn at any time as described in Section 8.
Performance of a contract — for booking, billing, and package/loyalty administration necessary to provide services you have requested.
Legitimate/certain permitted uses recognised under the DPDP Act — such as maintaining transaction and billing records for accounting and legal compliance.
6. How We Share Your Data
We do not sell your personal data. We share it only in the following circumstances:
With ESA (Data Processor), to the extent necessary to operate the website, POS, marketing module, and customer app.
With payment processors/payment gateways, solely to process billing transactions.
With SMS/WhatsApp/email service providers, solely to deliver reminders and offers you have opted into.
With regulators or law enforcement, where required under applicable Indian law.
With a successor entity, in the event of a merger, acquisition, or sale of the salon business, subject to equivalent privacy protections.
We do not share your data with other unaffiliated salons unless you have separately and explicitly opted into a cross-salon loyalty/alliance programme, in which case a supplementary notice describing that sharing will be provided to you at the time of opt-in.
7. Data Storage & Security
Your data is stored on servers operated by ESA on our behalf, located in India. We require ESA to maintain reasonable security safeguards, including encryption in transit, access controls, and audit logging, consistent with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the DPDP Act's security obligations.
No method of transmission or storage is 100% secure. In the event of a personal data breach that is likely to affect you, we, as the Data Fiduciary, will notify you and the Data Protection Board of India as required under the DPDP Rules, 2025. ESA, as our Data Processor, is contractually required to notify us promptly of any breach affecting the platform so that we can meet this obligation; ESA's own liability for a breach is limited to breaches directly caused by its systems and is governed separately under our platform agreement with ESA.
8. Your Rights as a Data Principal
Under the DPDP Act, you have the right to:
Access a summary of the personal data we hold about you and the processing activities undertaken.
Correct or update inaccurate or incomplete personal data.
Erase personal data that is no longer necessary for the purpose it was collected, subject to our legal retention obligations (see Section 9).
Withdraw consent for marketing communications and optional data processing at any time, as easily as you gave it. Withdrawal does not affect processing already carried out, or processing necessary for services already availed.
Nominate another individual to exercise these rights on your behalf in the event of death or incapacity.
Grievance redressal — raise a complaint with our Grievance Officer (Section 12) and, if unresolved, escalate to the Data Protection Board of India.
To exercise any of these rights, contact us using the details in Section 13. We will respond within the timelines prescribed under applicable law.
9. Data Retention
We retain billing and transaction records for the period required under applicable tax and accounting laws (typically 8 years). Marketing and profile data is retained until you withdraw consent or your account has been inactive for 24 months, after which it is deleted or anonymised, unless a longer retention period is required by law.
10. Children's Data
Our services are not directed at individuals under 18 years of age. Where a parent or guardian books a service for a minor, the parent/guardian's consent is treated as authorising the limited processing necessary to deliver that service, and we do not use a minor's data for behavioural monitoring, tracking, or targeted advertising.
11. Cookies & Website Analytics
Our website uses cookies and similar technologies to remember your preferences, enable online booking, and understand site usage through analytics tools. You can control cookies through your browser settings; disabling cookies may limit some website functionality.
12. Grievance Officer
In accordance with the Information Technology Act, 2000 and the DPDP Act, the following Grievance Officer/Data Protection contact is designated for this salon:
Name: Rita beauty parlour — Salon Owner
Designation: Owner / Grievance Officer
Email: meenatanwar155@gmail.com
Phone: 08130074511
Address: Saraikhuza market faridabad, Faridabad, Haryana, 121002
13. Contact Us
For any questions about this Privacy Policy or your personal data, contact us at meenatanwar155@gmail.com or 08130074511, or visit us at Saraikhuza market faridabad, Faridabad, Haryana, 121002.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last Updated" date at the top of this page indicates when this Policy was last revised. Material changes will be notified to you via the website or customer app.
15. Governing Law
This Privacy Policy is governed by the laws of India, and courts at Faridabad shall have exclusive jurisdiction over any disputes arising from it.