Privacy Notice

1. Controller and contact

Lonsa is provided by Lonsa, a Dutch sole proprietorship registered at Kromme Englaan 28, 1404 BX Bussum, Nederland, Dutch Chamber of Commerce number 42136043, VAT identification number NL005523614B47. Telephone: +31 6 15 29 67 86. Lonsa is controller for website, account, contract, support, and security data. Contact privacy@lonsa.nl.

2. Data and purposes

Processing is based on contract, proportionate legitimate interests in security and reliability, legal obligations, and consent only for genuinely optional processing that requires it.

• Account identity, authentication, sessions, MFA, legal acceptance, and security events.
• Salon configuration, services, prices, schedules, closures, and user actions.
• Salon-customer name, WhatsApp/phone identifier, appointment, service, date, time, and limited conversation state processed for the salon.
• Opaque WhatsApp conversation tokens, button/list selections for service/date/time, and confirmation results. Technical deployment and session data may remain for the inactive Flow capability.
• Google and Meta account, Calendar, WABA, phone, any inactive Flow identifiers, and encrypted credential references.
• Necessary cookies, request/security logs, abuse signals, support correspondence, and error information.

3. Salon-customer data and prohibited data

The salon is generally controller for its customers; Lonsa is processor under the DPA. Lonsa is not designed for medical, health, biometric, or other special-category data, and users must not intentionally submit it.

4. Providers and transfers

Lonsa uses Vercel for application hosting, Render for Frankfurt PostgreSQL and workers, Resend for transactional email, Cloudflare for Turnstile, Meta for WhatsApp Cloud API and Embedded Signup, Google for optional sign-in and Calendar, and STRATO for DNS and business email. Applicable DPAs, adequacy decisions, and EU Standard Contractual Clauses protect transfers outside the EEA. Lonsa does not sell data or use it for targeted advertising.

5. Retention

Unverified accounts and expired capabilities are retained for 30 days; message and Flow payload content for 90 days; webhook PII for 90 days and non-PII deduplication references for 180 days; booking and customer PII for 24 months after the appointment or last relevant activity; completed jobs for 30 days; audit/security events for 12 months; support for 24 months; and runtime logs for no more than 30 days.

Deletion has a seven-day recovery period followed by erasure, with backup remnants for at most seven further days. Pseudonymized legal acceptance and deletion evidence is retained for five years for legal defence.

6. Cookies, security, and rights

Only necessary session/security storage and Turnstile are used; there are no advertising trackers or non-essential analytics. Controls include TLS, tenant isolation, access control, password hashing, encrypted provider credentials, replay prevention, redacted logs, paid-production backups, and tested deletion.

Depending on the circumstances, you may request access, correction, erasure, restriction, portability, or object. Lonsa normally responds within one month, may verify identity, and recognizes the right to complain to the Dutch Data Protection Authority. Lonsa makes no solely automated decisions with legal or similarly significant effects.