Privacy Policy

1. Who we are and our role

GESTYN is operated by [Company legal name], [Address], Switzerland. For any question about this policy or your data, contact us at [privacy@gestyn.ch].

For the data you enter about your own clients (appointments, contact details, notes), your salon is the data controller and GESTYN acts as a processor on your behalf. For your account, salon and billing data, GESTYN is the controller.

2. What data we collect

We collect the following categories of personal data:

• Account & salon data — your name, email, hashed password, language, and your salon's profile, services, staff and settings.
• Client data you enter — your clients' names, contact details, appointments, purchases and notes.
• Billing data — plan, subscription status, invoices and payment references (we never store full card numbers).
• Technical data — IP address, browser type and basic logs needed to operate and secure the service.

3. How and why we use data

We process personal data to provide and secure the service, manage your subscription and invoicing, send service and appointment-reminder messages, provide support, and comply with legal obligations.

Under the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU GDPR, our legal bases are the performance of our contract with you, your consent where required, our legitimate interests in operating and improving the service, and compliance with law.

4. Where your data is stored

Your data is hosted on servers located in Switzerland.

5. Service providers (sub-processors)

We rely on a small number of providers to operate GESTYN — for example email delivery, SMS reminders and payment processing ([list providers]). They process data only on our instructions and under appropriate safeguards.

6. How long we keep data

We keep personal data while your account is active and as needed to provide the service. Invoicing and accounting records are retained for the period required by Swiss law (currently ten years). When you delete data or close your account, we delete or anonymise it within a reasonable period, subject to legal retention.

7. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability.

Salon owners can export their full salon dataset at any time from the app and can request deletion of their account and data.

To exercise your rights, contact [privacy@gestyn.ch]. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local supervisory authority.

8. International transfers

If a provider processes data outside Switzerland or the EU/EEA, we ensure an adequate level of protection through recognised safeguards such as standard contractual clauses.

9. Security

We protect data with encryption in transit, hashed passwords, access controls and regular backups. No method of transmission or storage is completely secure, but we work hard to protect your data.

10. Children

GESTYN is intended for businesses and is not directed at children.

11. Changes to this policy

We may update this policy from time to time. We will post the updated version here and adjust the "last updated" date above.

12. Contact

[Company legal name], [Address], Switzerland — [privacy@gestyn.ch].