Privacy policy

This policy explains what personal information Yasante collects, why, and your rights. Yasante is responsible for your information as data controller. We follow UK data protection law (the UK GDPR and the Data Protection Act 2018).

1. What we collect

Account details: your name, email address (which we confirm by emailing you a code), phone number if you add one, and password (stored only in scrambled form).

Your hair profile, if you fill it in: things like texture, length, density, porosity, area and budget, and photos you choose to add. You can leave any of it blank.

What you post: looks, captions, comments, reviews, collections, your product shelf and check-ins.

Bookings: the stylist, service, times, deposit status, attendance, cancellations and reviews. If you are a stylist: your page, services, prices, hours, area, address (shown to a client only once their appointment is confirmed), portfolio, verification checks such as your phone number, a proof-of-work photo and any insurance certificate you upload, and your booking numbers.

Device and usage: a push notification token for your phone, basic technical logs (such as IP address and errors) kept for security, and, only if you turn on usage analytics, the actions you take in the app (such as viewing a look or starting a booking).

2. Why we use it, and our lawful basis

To run your account and the service you asked for, including bookings, notifications and your page: this is necessary for our contract with you.

To keep Yasante safe: preventing fraud and misuse, checking stylists, handling reports and appeals, and keeping attendance records so stylists can trust requests. This is our legitimate interest in running a safe marketplace.

To improve Yasante with usage analytics, and to personalise what you see from your hair profile: only with your consent, which you can change at any time in Settings, Privacy and data.

To meet legal obligations, such as responding to lawful requests and keeping records the law requires.

We don't sell your personal information, and we don't use it for advertising.

3. Who sees what

Other people on Yasante see what you post publicly and your public profile. A stylist sees the details of requests you send her, including your attendance record. A client sees a stylist's address only once their appointment is confirmed. Looks and stylist pages you post publicly can also be seen on yasante.com.

We use a small number of service providers who process information on our behalf and under contract: Amazon Web Services (hosting, in the EU), IONOS (sending account emails, such as sign-up codes and password reset links, in the EU), Expo (sending push notifications), Google Firebase Cloud Messaging and Apple Push Notification service (delivering notifications to your phone). Where information leaves the UK, it is protected by the safeguards UK law requires, such as adequacy regulations or approved contract terms.

4. How long we keep it

We keep your information while your account is open. When you delete your account, we delete your profile, hair profile, looks, comments, collections and shelf. Stylists keep a record of appointments they had with you, without your name, for their business records. Security logs are kept for up to 90 days. Backups are overwritten within 7 days.

5. Your rights

You can ask to see, correct, download or delete your information, object to or restrict how we use it, and withdraw consent at any time. You can download your data and delete your account yourself in Settings, Privacy and data. For anything else, email privacy@yasante.com. We'll reply within one month.

If you're unhappy with how we've handled your information, please tell us first. You can also complain to the Information Commissioner's Office (ico.org.uk).

6. Children

Yasante is for people aged 18 and over. We don't knowingly collect information from children.

7. Security

Information is sent encrypted, sign-in tokens are kept in your phone's secure storage, private photos such as proof-of-work photos are never publicly reachable, and access to our systems is restricted to the people who need it.

8. Changes

If we change this policy in a way that matters, we'll tell you in the app. The version and date are at the top of this page.

9. Contact

privacy@yasante.com