Privacy Policy

The data controller is Private Entrepreneur Kolomiiets Viktor Mykolaiovych, Mykilsko-Slobidska St., 4B, 144, Kyiv, 02002, Ukraine. Contact: hello@beautica.io.

Our role depends on how you use Beautica:

Data you give us. Name, email address, phone number, business name and type, business address and locations, team members and roles, services and prices, photos, messages you send us, and your preferences.

Sign-in data. If you use Google, Apple or Facebook to sign in, we receive basic profile data such as your name, email address and profile picture, as permitted by your settings with that provider.

Booking and client data. Appointment details, services booked, staff chosen, notes, cancellation history and contact details of clients, entered by businesses or by clients when they book.

Payment data. Payments are handled by third-party payment providers. We receive confirmation of a payment, its amount, status and limited card details such as the last four digits, but we do not store full card numbers.

Data collected automatically. IP address, device and browser type, language, pages viewed, referring page, timestamps, and diagnostic and security logs. We collect this through cookies and similar technologies (see section 7).

Communication data. Records of email, WhatsApp or other notifications sent through the Service, and their delivery status.

We do not intentionally ask for special-category data such as health information. A business using Beautica, for instance a dental clinic, may record such information in notes. That business is responsible for doing so lawfully, and we process it only on its instructions.

We do not sell personal data, and we do not use client data held on behalf of businesses for our own advertising.

We require our service providers to protect data and to use it only for the services they provide to us.

We are based in Ukraine and our providers operate in various countries, including the EU and the United States. When we transfer personal data from the EEA, the UK or Switzerland to a country without an adequacy decision, we rely on safeguards such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum. You can request a copy of these safeguards at hello@beautica.io.

We keep personal data only as long as needed for the purposes above. In general, account data is kept while your account is active and deleted or anonymised within a reasonable period after you close it, usually within 90 days. Some records, such as invoices and payment records, are kept for as long as tax and accounting law requires. Backups are overwritten on a regular cycle. Client data held for a business is kept until the business deletes it or ends its account, subject to the same cycle.

We use cookies and similar technologies for three purposes: strictly necessary ones that keep you signed in and the Service secure; preference ones that remember your settings; and analytics ones that tell us how the site is used. Where the law requires consent, we ask for it before setting non-essential cookies, and you can withdraw it at any time. You can also block or delete cookies in your browser settings, though parts of the Service may stop working.

Our site does not respond to browser “Do Not Track” signals, but we honour the Global Privacy Control signal where the law requires.

EEA and UK (GDPR and UK GDPR). You have the right to access your data, correct it, delete it, restrict or object to processing, receive it in a portable format, and withdraw consent at any time without affecting earlier processing. You may also lodge a complaint with your local data protection authority, such as the ICO in the UK. In Ukraine, the supervisory authority is the Ukrainian Parliament Commissioner for Human Rights.

California (CCPA/CPRA). If you are a California resident, you have the right to know what personal information we collect, use and disclose, to request deletion and correction, to opt out of the sale or sharing of personal information, and not to be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioural advertising. In the last 12 months we collected the categories described in section 2 and disclosed them for business purposes to the recipients described in section 4.

To delete your data, follow the steps on our data deletion page. To exercise any other right, email hello@beautica.io. We may need to verify your identity, and we will respond within the time the law sets, normally within one month (45 days under the CCPA). An authorised agent may submit a request on your behalf with your written permission. If your data is held for a business, we will direct you to that business or help it respond.

We use technical and organisational measures to protect data, including encryption in transit, access controls based on roles, and monitoring. No system is completely secure, so we cannot guarantee absolute security. Please protect your credentials. If a breach affects your data we will notify you and the authorities as the law requires.

Beautica is not directed to children under 16, and we do not knowingly collect their data. If you think a child has given us data, contact us and we will delete it.

The Service may link to third-party websites and services. We do not control them and this policy does not apply to them. Please read their privacy policies.

We may update this policy as our Service or the law changes. We will post the new version here with a new “Last updated” date, and notify you of material changes by email or inside the Service.

Private Entrepreneur Kolomiiets Viktor Mykolaiovych
Mykilsko-Slobidska St., 4B, 144, Kyiv, 02002, Ukraine
Email: hello@beautica.io