Privacy Policy
- Status
- In effect
- Version
- 1.2
- Effective date
- 4 November 2026
Version 1.2. Effective date: the date this version is published on salonlog.com, shown at the top of the page.
What changed in version 1.2: If you pay by EFT, Billing shows SalonLog's bank details, and you send us your proof of payment on WhatsApp. A proof of payment for an EFT to SalonLog is fine to send. The cookie section now lists each essential cookie SalonLog uses and how long it lasts. None are for advertising or tracking.
See also:Terms of Service
1. Who is responsible
SalonLog is operated by Mbali Pearl Msweli trading as SalonLog, a sole proprietor in South Africa.
- For your account and contact-form information, SalonLog decides how it is used. SalonLog is the responsible party.
- For the information a salon records about its own team and its work, the salon owner is the responsible party. SalonLog processes that information on the salon's behalf, as its operator.
Information Officer: Mbali Pearl Msweli. Contact through the Contact SalonLog form, choosing "Privacy request", by email at salonlog26@gmail.com, or on +27 73 809 4340. The Information Officer's registration details from the Information Regulator will be added here once they are issued.
2. What we collect and why
| Information | Examples | Why we collect it |
|---|---|---|
| Account details | Name, email address, mobile number if you sign up with one, and a Google account identifier if you continue with Google | To create and secure your account, let you sign in and send account emails and text messages such as verification codes and password reset |
| Registration in progress | Your email address or mobile number, or a Google account identifier, while you finish registering | To let you finish registering and to stop the same details being registered twice. We delete it when your salon is created or you cancel, and in any case within 48 hours of the last time you proved who you are |
| Billing records | The plan, the salons it covers, the amount, the payment reference, the dates and the status of each payment | To record your payments and subscription, and to show them to you in Billing |
| Password | Chosen by you | To sign you in. Your password passes securely through SalonLog to our sign-in provider, which checks it. SalonLog does not store or record your password |
| Salon and branch details | Salon name, branch names | To run your salon's records |
| Team access | Receptionist names, usernames, mobile numbers | So the people you choose can sign in with the permissions you set |
| Employee details | Names, job roles, a mobile number if the salon chooses to add one, and pay arrangements such as a commission percentage | To record who did the work and calculate pay estimates, and to keep a contact number for staff in the salon's own records. Pay totals are calculated from the information entered; SalonLog does not pay anyone |
| Services, visits and payment-method records | Service performed, amount charged, cash, card or EFT, date and time | To keep the salon's records and show its reports. We do not keep client profiles |
| Sign-in and security records | Sign-in and sign-out times, an audit trail of changes, technical security logs | To keep accounts secure, prevent misuse and show who changed what |
| Agreement records | Which versions of these documents you accepted, and when | To prove what you agreed to |
| Contact-form messages | Your name, email address, reason and message | To reply to you |
| Error reports | Technical details of a fault, with personal details removed where possible | To find and fix problems |
Employee mobile numbers
A salon owner may choose to save an employee's mobile number. It is optional. It is kept only so the salon has a contact number for that employee in its own records. The salon owner is the responsible party for it, and SalonLog processes it on the salon's behalf, as its operator.
- Who can see it in the app: the salon owner, and a receptionist only if the owner gives them permission to add and edit employees, and then only for employees at their own branch. It is not shown on the employee list or in reports.
- How it is used: only as a contact number. SalonLog does not use it to sign anyone in, does not send text messages to it and does not use it for marketing. We will not start any new use of it unless the use is lawful and we have first updated this policy to describe it.
- How it is protected: in the same way as the salon's other records, described under "How we protect information".
- Correcting or removing it: the owner can change or clear the number on the employee's Edit form at any time. Archiving an employee does not remove it.
- An employee can ask the salon to see, correct or delete their number. See "Your rights".
- How long it is kept: while the account is open, unless it is cleared sooner. Our record of who changed what keeps a number that was saved, changed or cleared, and encrypted backups keep a copy until they are deleted automatically 45 days after they are made. If you close your account, it is deleted with your other salon records, as described under "How long we keep information".
3. Cookies and similar technology
SalonLog uses several essential cookies, and none for advertising or tracking. They are secure and cannot be read by page scripts. A sign-in cookie ends when your browser session ends. A renewal cookie and an activity cookie keep you signed in, and both end 10 hours after you sign in, when SalonLog signs you out. A device cookie remembers that this browser has signed in before, so you can still sign in if someone floods the sign-in page. It does not name you and ends 180 days after your last sign-in. While you register or sign in with Google, short-lived cookies link that step to your browser. The longest lasts 48 hours. Without these cookies you cannot stay signed in or finish registering.
SalonLog also keeps a few small settings in your browser, such as whether the menu is folded, whether you closed a message, and which page to return to after you sign in. They do not name you and are not sent to SalonLog.
We do not use advertising or tracking cookies.
4. Who helps us run SalonLog
| Provider | What it does | Where |
|---|---|---|
| Supabase | Database and sign-in | European Union (Ireland) |
| Railway | Runs the SalonLog application server | Outside South Africa |
| Vercel | Hosts the website | Outside South Africa |
| Resend | Sends account emails and contact-form messages | Outside South Africa |
| Cloudflare R2 | Stores encrypted backups | European Union |
| GitHub Actions | Runs the job that creates the encrypted backups | Outside South Africa |
| Sentry | Error monitoring | European Union (Germany) |
| SMSPortal | Sends the text-message codes used to sign up or recover access with a mobile number | South Africa |
| Lets you register and sign in with your Google account | Outside South Africa | |
| PayFast | Takes card and instant-payment payments for SalonLog subscriptions, on its own secure page | South Africa |
We share personal information with these providers only so they can provide their service to us. We do not sell personal information.
5. Paying for SalonLog
- PayFast. If you pay with PayFast, you enter your payment details on PayFast's own secure page. SalonLog never sees or keeps your card details.
- EFT. If you choose to pay by EFT, Billing shows SalonLog's bank details, and you send us your proof of payment on WhatsApp. We use WhatsApp only when you choose to do this. WhatsApp processes those messages under its own terms and privacy policy. When we check our bank for your payment, we see what the bank shows us, such as the name on the payment and your payment reference. We use it only to match the payment to your account.
- What we keep. We keep only the billing record we need for your payments and subscription history: the plan, the amount, the payment reference, the dates and the status of each payment.
- What we never keep. We never store your bank login details, card details or other payment credentials. We do not keep proof-of-payment images in SalonLog.
6. Information outside South Africa
Some of these providers process information outside South Africa. We use providers that commit to protecting it and transfer information only as the Protection of Personal Information Act (POPIA) allows.
7. How we protect information
- Information travels encrypted (HTTPS).
- Each salon can see only its own records.
- Sign-in is managed by a specialist provider.
- Backups are encrypted, and access to systems is limited.
No system is perfectly secure. If a security breach affects your personal information, we will tell you and the Information Regulator as the law requires.
8. How long we keep information
| Information | How long |
|---|---|
| Account and salon records, including the record of who changed what | While your account is open. If you close your account, they are deleted 30 days after you ask. Copies may remain in our encrypted backups for up to 45 more days, until those backups are deleted automatically |
| Encrypted backups | Each backup is deleted automatically 45 days after it is made |
| Billing and payment records | 5 years after each payment, or while your account is open if that is longer |
| Agreement records | Up to 5 years after the account closes, as proof of what was agreed |
| Contact-form messages | Up to 2 years in our support inbox |
| Error reports | For the period our error-monitoring provider keeps them |
We keep information for longer only where the law requires it.
9. Your rights
You may ask to:
- see the personal information we hold about you, or receive a copy of your salon's records;
- correct or delete it;
- close your account; or
- object to how it is used.
Use the Contact SalonLog form and choose your request, email salonlog26@gmail.com, or WhatsApp, send an SMS to or call +27 73 809 4340. A request made by telephone is recorded electronically, and you may ask for a copy of that record. We confirm it is you before we act on any request. Never send your password, a verification code, card details or your banking login details, and never send sensitive employee information through WhatsApp. A proof of payment for an EFT to SalonLog is fine to send. We will respond as soon as reasonably possible and within the time the law allows.
If you are an employee whose details a salon recorded, please ask that salon first. We will help the salon respond.
10. The Information Regulator
If you are unhappy with how we handle your personal information, you may complain to the Information Regulator of South Africa. Its website, inforegulator.org.za, explains how.
11. Age
SalonLog is for people aged 18 or older who run or work in a salon.
12. Changes to this policy
We will publish any update with its date and version number, and tell you about important changes.