Privacy Policy
Last updated: 7 October 2026
This Privacy Policy explains how Gestyn SNC ("GESTYN", "we", "us") collects, uses and protects personal data when you use our salon management software and our website.
1. Who we are and our role
GESTYN is operated by Gestyn SNC, Allée du Verger 14, 1763 Granges-Paccot, Switzerland. For any question about this policy or your data, contact us at support@gestyn.ch.
For the data you enter about your own clients (appointments, contact details, notes), your salon is the controller and GESTYN acts as a processor on your behalf. For your account, salon and billing data, GESTYN is the controller.
2. What data we collect
We collect the following categories of personal data:
- Account and salon data — your name, email address, hashed password, language, and your salon's profile, services, team and settings.
- Client data you enter — your clients' names, contact details, appointments, purchases, notes and consent choices.
- Billing data — plan, subscription status, invoices and payment references. We never store full card numbers.
- Technical data — IP address, browser type and the logs needed to operate and secure the service.
- Website statistics — when you visit our public website we record the page, the website or campaign that sent you (domain and campaign tags only), the country derived from your device's time zone, and your browser, operating system and device type. No cookies are set and nothing is stored on your device; your IP address is never stored. Visits are recognised for one day only, through a salted hash whose daily key is deleted at the end of that day.
3. How and why we use data
We process personal data to provide and secure the service, manage your subscription and invoices, send service messages and appointment reminders, provide support, and comply with our legal obligations.
Under the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR), our legal bases are the performance of our contract with you, your consent where required, our legitimate interest in operating and improving the service, and compliance with the law.
We count visits to our public website to understand which pages are useful and how people find us, based on our legitimate interest. These statistics are anonymous: they use no cookies, store no IP address and cannot be linked to you after the day of your visit. Devices signed in to the app are not counted.
4. Where your data is stored
Your salon's data is hosted on servers located in Switzerland.
5. Service providers (sub-processors)
We rely on a small number of providers, who process data only on our instructions and only as far as their task requires:
- Hosting and infrastructure — servers in Switzerland.
- Email delivery — to send account messages, appointment reminders and the campaigns you choose to send.
- Telnyx, Inc. (United States) — to deliver SMS reminders, codes and SMS campaigns, when your settings use SMS.
- Stripe Payments Europe, Ltd. (Ireland) and its affiliates — to process card payments of your subscription, and online payments (deposits, gift cards, shop orders) on the Stripe account your salon connects.
6. International transfers
When a provider processes data outside Switzerland or the EU/EEA, such as Telnyx in the United States, we ensure an adequate level of protection through recognised safeguards such as the standard contractual clauses approved by the FDPIC and the European Commission.
7. How long we keep data
We keep personal data while your account is active and as long as needed to provide the service. Invoicing and accounting records are kept for the period required by Swiss law (currently ten years). When you delete data or close your account, we delete or anonymise it within a reasonable period, subject to legal retention obligations.
Anonymous website statistics are kept for 25 months.
8. Your rights
Depending on where you live, you may have the right to access, correct or delete your personal data, to restrict or object to its processing, and to data portability.
Salon owners can export their clients and their complete salon data at any time from the app, and can ask us to delete their account and data.
To exercise your rights, contact support@gestyn.ch. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or with your local supervisory authority.
9. Security
We protect data with encryption in transit, hashed passwords, access controls enforced on our servers, a web application firewall, sign-in protection and regular backups. No method of transmission or storage is completely secure, but we work hard to protect your data.
10. Children
GESTYN is intended for businesses and is not directed at children.
11. Changes to this policy
We may update this policy from time to time. We will publish the updated version on this page and change the date above.
12. Contact
Gestyn SNC, Allée du Verger 14, 1763 Granges-Paccot, Switzerland — support@gestyn.ch.