1. Who we are
Zumos is salon management and online booking software. The company responsible for Zumos is:
- Company: [company name to be added], trading as Zumos
- Registered in England and Wales, company number [company number to be added]
- Registered address: [registered address to be added]
- Email: [contact email to be added]
- ICO registration: [ICO registration number to be added]
2. Two different roles
Salon owners and their staff. When a business signs up to Zumos, we are the controller of the account data we collect about that business and its users.
Salon clients who book online. When you book an appointment with a salon that uses Zumos, that salon is the controller of your data and decides how it is used. Zumos acts as the salon's processor, storing and handling your booking on the salon's behalf under our data processing agreement. For questions about your booking data, contact the salon directly; we will pass on any request we receive.
3. What we collect
Business account holders
- Name, email address and password (stored only in encrypted, hashed form)
- Business details: business name, address, phone number, opening hours, services and prices
- Team member names, working hours and leave entered by the business
- Plan, trial and subscription status, and any referral code used
- Technical data needed to keep you signed in and the service secure, such as IP address and browser type
Clients booking with a salon
- Name, email address and mobile number
- Appointment details: service, team member, date, time, price and any notes you add
- Whether you agreed to receive news and offers from that salon
- Notes and history the salon adds to your client record
Sales partners (employees)
- Name, email address, referral code, referred salons and commission payslips
4. Why we use it and our lawful basis
- To provide the service — creating your account, running your calendar and booking page (contract).
- To manage trials, billing and referrals (contract, and legal obligation for tax and accounting records).
- To keep Zumos secure, prevent misuse and fix problems (legitimate interests).
- To send service messages such as sign-in links and password resets (contract).
- Marketing — we only send marketing emails where you have agreed or where the law otherwise allows, and you can opt out at any time.
We do not sell personal data and we do not use it for advertising profiling.
5. Who we share it with
We use a small number of trusted suppliers to run Zumos. They may only use the data to provide their service to us:
- Lovable and its infrastructure providers — website hosting, database, sign-in and email delivery
- Google — if you choose "Continue with Google" to sign in, and to load the fonts used on this website
If a salon adds its own payment link, payments are made directly to the salon through its chosen payment provider. Zumos does not receive or store your card details. We may also share data where required by law or to protect our rights.
6. International transfers
Some of our suppliers may process data outside the UK. Where they do, we rely on UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
7. How long we keep it
- Business account data is kept while the account is open and deleted within 90 days of the account closing.
- Client booking data is kept for as long as the salon keeps its account, or until the salon deletes it. Salons can export their client list at any time.
- Billing, commission and payslip records are kept for 6 years to meet UK tax requirements.
8. How we protect it
Data is sent over encrypted connections and stored with access controls so each business can only see its own records. Passwords are never stored in readable form. Access by our team is limited to what is needed to support the service.
9. Your rights
You have the right to:
- ask for a copy of your personal data
- have inaccurate data corrected
- have your data deleted
- restrict or object to how we use it
- receive your data in a portable format
- withdraw consent at any time, where we rely on consent
To use any of these rights, email [contact email to be added]. We will reply within one month. If your request is about a booking with a salon, we may pass it to that salon, as they control that data.
10. Complaints
Please contact us first so we can try to help. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
11. Cookies
We only use storage that is strictly necessary to run the service. See our cookie policy.
12. Children
Zumos business accounts are for people aged 18 or over.
13. Changes to this policy
We will update this page if anything changes and show the new date at the top. Significant changes will be emailed to account holders.