Privacy notice

Who we are

Cliendra Nails is provided by Bryn Morgan, sole trader, trading as "Cliendra" ("we", "us"). You can contact us at support@cliendra.com.

Our two roles

• Your clients' information (names, contact details, appointments, notes, photos and payments you record): you are the data controller and we are your data processor. We only use it to run the service for you.
• Your own account information: we are the data controller.

What we hold about you

• Your email address, name and business name, and your phone number if you add it.
• Your password, which is stored in scrambled (hashed) form by our login provider. Nobody at Cliendra can see it.
• Basic technical records (such as IP address and sign-in times) used to keep the service secure.

Why we use it

• To provide the service you signed up for (our contract with you).
• To keep the service secure and working (our legitimate interests).
• To email you about your account, such as confirming your address or resetting your password.

We don't sell your data and we don't send marketing emails without your permission.

Who helps us run the service

• Supabase: database, sign-in and photo storage (servers in Ireland, EU).
• Vercel: hosts the website.
• Resend: sends our emails.

Some of these companies are based in the United States. Where data leaves the UK, it is protected by the safeguards UK data protection law requires.

How long we keep it

We keep your data while your account is open. If you ask us to close your account, we delete your account, the information in it and your photos within 30 days. Our database provider keeps daily backup copies for 7 days, after which they are overwritten.

Cookies

We only use the cookies needed to keep you signed in. There are no advertising or tracking cookies.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, or to object to how we use it. Email support@cliendra.com. You can also complain to the Information Commissioner's Office (ico.org.uk).

Your responsibilities for your clients' data

As the controller of your clients' information, you need a lawful reason to hold it and should tell your clients how you use it. Please don't record health information (for example allergies or medical conditions) unless you have your client's explicit consent.