Privacy Policy | Schön Salon Kanakapura - Data Protection & Privacy Information

Your privacy matters. Understanding how we collect, use, and protect your personal information.

PRIVACY Overview

At Schön Salon, we are committed to protecting the privacy and security of our clients' personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data when you visit our salons in Kanakapura and Malavalli, or use our services.

In this policy, "processes" or "processing" means collecting, recording, organizing, storing, updating, using, disclosing, transferring, or otherwise handling personal data. "We," "our," or "Schön Salon" refers to our salon business operating in Kanakapura (Men & Women, and Women & Kids locations) and Malavalli (Men & Women location).

This Privacy Policy is designed to comply with the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

Last Updated: October 2025

If you have any questions about this policy or how we handle your personal information, please contact us using the details provided at the end of this document.

CONSENT & Legal Basis

Under the Digital Personal Data Protection Act, 2023 (DPDPA), we process your personal data only when we have a valid legal basis. We act as a "Data Fiduciary" responsible for determining the purpose and means of processing your personal data.

We process your personal data on the following legal grounds:

Your Consent: We obtain your free, specific, informed, and unambiguous consent before collecting or processing your personal data for specific purposes such as appointment bookings, service customization, and marketing communications.
Contractual Necessity: To provide salon services you have requested, process payments, and fulfill our contractual obligations to you.
Legal Compliance: To comply with applicable laws, regulations, court orders, and government requests, including tax and financial regulations.
Legitimate Interests: For our legitimate business purposes such as improving our services, maintaining security, and preventing fraud, provided your rights and interests do not override these purposes.

Your Right to Withdraw Consent

You have the right to withdraw your consent at any time by contacting us. However, withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. Please note that withdrawing consent may limit our ability to provide certain services to you.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on our website at www.schonsalon.in, and we will notify you of significant changes through appropriate means.

INFORMATION WE Collect

We collect personal information that you voluntarily provide to us when you visit our salon, book appointments, use our services, or interact with us. The type of information we collect depends on your relationship with us and includes:

Personal Information:

Name, phone number, email address, and postal address
Date of birth, gender, and age (for age-appropriate services)
Appointment history, service preferences, and booking details

Sensitive Personal Information (collected only with explicit consent):

Health information, allergies, skin sensitivities, or medical conditions relevant to salon services
Photographs or videos of hairstyles, makeup, or beauty treatments (with your prior written consent for portfolio or marketing use)

Financial Information:

Payment card information, UPI details, bank account information, and transaction history
Billing and invoice information (retained for tax and accounting purposes)

Technical and Usage Information:

Website usage data, IP address, browser type, device information, and cookies (when you visit www.schonsalon.in)
Marketing communication engagement (email opens, clicks)

How We Collect Information

We collect information directly from you through appointment bookings (phone, online, or in-person), consultation forms, feedback surveys, membership registrations, and when you interact with our website or social media channels.

Your Rights Regarding Your Data

Under the DPDPA 2023, you have the right to access, correct, update, or request deletion of your personal data at any time. You may also withdraw consent, change communication preferences, or request restriction of processing.

For any data-related concerns or to file a complaint, you can contact the Data Protection Board of India or reach out to us directly using the contact details provided in this policy.

HOW WE USE Your Information

We use your personal information only for specified, explicit, and legitimate purposes. We process your data for the following purposes:

Service Delivery:

To book, confirm, modify, or cancel appointments at our Kanakapura or Malavalli locations
To provide personalized salon services based on your preferences, allergies, and service history
To maintain your service records and provide continuity of care
To process membership programs and loyalty benefits

Communication and Customer Service:

To send appointment reminders, confirmations, and updates via SMS, email, or phone
To respond to your queries, feedback, and service requests
To notify you about service changes, special offers, or new treatments (with your consent)

Payment Processing and Financial Management:

To process payments, issue receipts, and maintain billing records
To validate transactions, prevent fraud, and ensure payment security
To comply with tax regulations and maintain financial records as required by Indian law

Marketing and Promotions (only with your consent):

To send promotional offers, seasonal discounts, and information about new services
To share beauty tips, hair care advice, and wellness content
To showcase your photos/videos in our portfolio or social media (only with separate written consent)

Business Operations and Improvement:

To analyze service trends, customer preferences, and business performance
To improve our services, website functionality, and customer experience
To conduct customer satisfaction surveys and collect feedback

Legal Compliance and Security:

To comply with applicable laws, regulations, legal processes, and government requests
To prevent fraud, unauthorized access, and security breaches
To protect the rights, property, and safety of Schön Salon, our clients, and staff

We Never Sell Your Personal Information

Schön Salon will never sell, rent, or trade your personal information to third parties for their marketing purposes. Your data is used exclusively to serve you better and improve your salon experience.

DATA SHARING & Disclosure

Schön Salon does not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

Service Providers and Data Processors:

Payment processors and banks for processing transactions (UPI, card payments, net banking)
SMS and email service providers for sending appointment reminders and communications
Cloud storage providers for secure data backup (servers located in India)
IT support and website hosting services

All third-party service providers are contractually bound to protect your data, use it only for specified purposes, and comply with Indian data protection laws. We conduct regular assessments of their security practices.

Legal and Regulatory Authorities:

Government authorities, tax departments, and regulatory bodies when required by law
Law enforcement agencies, courts, or tribunals in response to legal processes
Data Protection Board of India or other regulatory bodies for compliance purposes

Business Transfers:

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the new entity. We will notify you via email and/or prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

With Your Consent:

We may share your information with third parties when you explicitly consent. For example, if you agree to participate in a promotional campaign with our partners, or consent to have your photos/videos featured in our marketing materials or social media.

Cross-Border Data Transfer

We primarily store and process your data within India. If we need to transfer your data outside India, we will do so only with your explicit consent or where permitted by law, and ensure adequate safeguards are in place to protect your information as required by the DPDPA 2023.

COOKIES & Technology

Our website (www.schonsalon.in) uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content.

What are Cookies?

Cookies are small text files stored on your device (computer, smartphone, or tablet) that help websites remember your preferences and improve functionality. Cookies cannot access other files on your device, run programs, or deliver viruses.

Types of Cookies We Use:

Essential Cookies: Necessary for website functionality, appointment booking, and secure access to your account
Performance Cookies: Help us understand how visitors use our website through analytics (e.g., Google Analytics)
Functional Cookies: Remember your preferences, language settings, and location
Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness (only with your consent)

Managing Cookies:

You can control and manage cookies through your browser settings. You may refuse or delete cookies, but this may limit your ability to use certain features of our website. Most browsers allow you to:

• View and delete cookies
• Block third-party cookies
• Block cookies from specific websites
• Block all cookies
• Delete all cookies when you close your browser

Third-Party Links

Our website may contain links to third-party websites, social media platforms, or external services. Once you leave our website, we are not responsible for the privacy practices or content of these external sites. We encourage you to read the privacy policies of any third-party websites you visit.

DATA Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal, accounting, or reporting requirements.

Retention Periods:

Active Customer Data: Retained while you are an active customer and for 3 years after your last visit for service continuity and follow-up care
Financial and Tax Records: Retained for 7 years as required by Indian Income Tax Act, 1961, and GST regulations
Marketing Communications: Retained until you withdraw consent or opt out of marketing communications
CCTV and Security Footage: Retained for 30-90 days unless required for security investigations or legal proceedings
Website Analytics: Anonymized data retained for 26 months for business analysis

Secure Deletion:

When personal data is no longer required, we securely delete or anonymize it in accordance with our data retention and disposal procedures. We conduct regular reviews of our data holdings to ensure compliance with our retention policy.

Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal data at any time, subject to legal obligations we may have to retain certain information. Contact us to submit a deletion request, and we will process it within 30 days.

YOUR Rights

Under the Digital Personal Data Protection Act, 2023 (DPDPA), you have several important rights regarding your personal data. As a Data Principal, you are entitled to:

1. Right to Access

You have the right to obtain confirmation about whether we are processing your personal data and to access your data. You can request a copy of the personal information we hold about you.

2. Right to Correction

If you believe any personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request correction or completion of your data at no charge.

3. Right to Erasure and Data Portability

You can request deletion of your personal data or transfer of your data to another service provider, subject to legal retention requirements.

4. Right to Withdraw Consent

You may withdraw your consent for processing personal data at any time. To opt out of marketing communications, click "unsubscribe" in our emails or contact us directly.

5. Right to Nominate

You have the right to nominate another person who may exercise your rights in the event of your death or incapacity.

6. Right to Grievance Redressal

You have the right to file a complaint with us or with the Data Protection Board of India if you believe your data rights have been violated.

How to Exercise Your Rights

To exercise any of these rights, please contact us at info@schonsalon.in or call +91 9008090689. We will respond to your request within 30 days.

We may require proof of identity to verify your request and protect your personal information from unauthorized access.

DATA SECURITY & Protection

We are committed to maintaining the highest standards of data security and privacy. We implement comprehensive technical, physical, and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.

Security Measures We Implement:

Data Encryption: All sensitive data transmitted over the internet is encrypted using industry-standard SSL/TLS protocols
Access Controls: Strict role-based access controls ensure only authorized personnel can access personal data on a need-to-know basis
Secure Storage: Personal data is stored on secure servers with regular backups, firewall protection, and intrusion detection systems
Physical Security: Our salon premises have controlled access, and physical records are stored in locked cabinets
Employee Training: All staff members receive regular training on data protection, privacy practices, and confidentiality obligations
Regular Audits: We conduct periodic security audits and vulnerability assessments to identify and address potential risks
Incident Response: We have established procedures for detecting, reporting, and responding to data breaches in compliance with Indian law

Data Breach Notification

In the unlikely event of a data breach that may affect your personal information, we will notify you and the Data Protection Board of India as required by law. We will take immediate steps to contain the breach and minimize any potential harm.

While we implement robust security measures, please note that no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your information using industry best practices.

CONTACT Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

Schön Salon

Data Privacy Officer

Email:info@schonsalon.in

Phone:+91 9008090689

Website:www.schonsalon.in

Locations:

Kanakapura (Men & Women)

Kanakapura (Women & Kids)

Malavalli (Men & Women)

Hours:

Monday - Saturday: 9:00 AM - 8:00 PM

Sunday: 10:00 AM - 6:00 PM

Filing a Complaint with the Data Protection Board of India

If you are not satisfied with our response to your privacy concerns or believe we have violated your data protection rights, you have the right to lodge a complaint with the Data Protection Board of India. For more information, visit the official website of the Data Protection Board once operational.

Response Time

We are committed to addressing your privacy concerns promptly. We will acknowledge receipt of your inquiry within 3 business days and provide a substantive response within 30 days. For complex requests, we may need additional time and will keep you informed of our progress.

This Privacy Policy is effective as of October 2025 and is subject to updates. Please review this policy periodically for any changes. Continued use of our services after policy updates constitutes acceptance of the revised terms.