Privacy & consent
How we handle your appointment data
We only collect what you submit in the booking form: name, phone, email (optional), service, package, date and message. No tracking cookies on the public site.
Why we need consent
By ticking the consent box you allow us to contact you about your appointment via phone/WhatsApp. Without it we cannot process the form — this is the DPDP-aligned check our site enforces on every submission.
Retention
Enquiries are auto-deleted after 90 days. Admin sessions expire in 7 days. Your patch-test record is kept for 6 months, then removed unless you re-consent.
Storage
Images you upload stay within your tenant prefix beauty-parlour/ in R2 and count toward the 500 MB tenant quota. No cross-tenant access.
Cookies
We use a single httpOnly session cookie for the admin dashboard. The public site uses only localStorage for your theme choice (demo-theme-beauty-parlour).