SaloninfraSaloninfra
← Back to site

Privacy Policy

1. Overview

This Privacy Policy explains how Digital Media Solutions OÜ ("Saloninfra", "we", "us"), the provider of the Saloninfra platform, handles personal data. We are registered in Estonia (registry code 10818411) at Meistri tn 16, 13517 Tallinn, Estonia. Privacy contact: [email protected].

We are committed to processing personal data lawfully, fairly and transparently, in line with the EU General Data Protection Regulation (GDPR) and Estonian data-protection law.

2. Controller & processor

Our role depends on whose data is involved:

  • We are the controller for data about visitors to our websites, prospective customers, and the business users who hold a Saloninfra account (for example, names, work contact details and account information). This policy describes that processing.
  • We are a processor for the personal data that our business customers (salons and other service businesses) put into the platform about their own clients. There, the business is the controller and decides why and how the data is used; we process it only on their documented instructions, under data-processing terms.

If you are a client of a salon that uses Saloninfra and you have a question about your data, please contact that salon directly — they decide how your data is used. We will support them in responding to you.

3. What we collect about you

When you use Saloninfra we collect account and contact details, your role and company membership, usage and device information needed to operate the service, billing data for your subscription (we do not store full card numbers — those stay with our payment processor), and any messages you send us via support.

Providing this data is required to use Saloninfra; without it we cannot create or operate your account. We do not make decisions about you based solely on automated processing that produces a legal or similarly significant effect — AI-assisted features generate suggestions, but a human in your team reviews and decides.

4. Why we use it (legal bases)

  • Performing the contract (Art. 6(1)(b) GDPR): operating your account, running the features you use, billing, support.
  • Legitimate interests (Art. 6(1)(f)): keeping the platform secure, preventing abuse, improving the product based on aggregated usage, and limited direct communication with you about features you already use.
  • Legal obligations (Art. 6(1)(c)): keeping accounting records, responding to lawful requests from authorities.
  • Consent (Art. 6(1)(a)): marketing emails about new features or other Saloninfra products, and non-essential cookies where applicable. You can withdraw consent at any time.

5. Sharing

We do not sell your personal data and we do not share it with advertisers. We share it only with:

  • Sub-processors that help us run the platform — hosting, transactional email and SMS, payment processing, and AI generation when AI features are used (categories in §7; current named list available on request).
  • Authorities when required by law.

6. Where data is stored

Your data is stored in the European Union. Some sub-processors process limited categories of data outside the EEA under appropriate transfer safeguards (EU Standard Contractual Clauses).

7. Sub-processors

We engage sub-processors in the following categories: cloud hosting and storage, edge / CDN, transactional email and SMS, AI generation (when AI features are used), payment processing, and optional federated login. The current named list of sub-processors is available on request to [email protected] and to customers in the in-app document area. When we add or replace a sub-processor we update that list; for material changes we notify the company manager in-app.

8. Retention

  • Account data: while your tenant is active; for 30 days after termination so you can export, then deletion subject to legal retention.
  • Billing records (our invoices to you): 7 years from issuance (Estonian accounting law).
  • Support correspondence: 3 years from the last interaction.
  • Server logs: typically 30–90 days, longer for security incidents under investigation.

9. Your rights

You have the right to access, correct, delete, restrict, port and object to processing of your personal data. You can exercise most of these from inside the app (profile + company settings); for anything you can't, contact [email protected]. You also have the right to complain to a supervisory authority (in Estonia: Andmekaitse Inspektsioon, aki.ee).

10. Security

We use industry-standard controls: encrypted transit (TLS) and backups, role-based access on the platform, logging of sensitive admin actions, and separated development / production environments. No system is perfectly secure; if a breach materially affects you we will notify you in line with Art. 33–34 GDPR.

11. Cookies & analytics

We use a small number of cookies and similar technologies on saloninfra.com and inside the Saloninfra app:

  • Strictly necessary cookies that keep you signed in, remember your tenant context, and protect against CSRF. These are set without consent because the service can't function without them.
  • Functional cookies that remember your preferences, such as the language you've chosen.
  • Analytics, only with your consent where required. Where we use analytics we use it in aggregate to understand which pages and features are visited — we do not build advertising profiles and we do not share data with ad networks.

You can clear cookies from your browser at any time. Disabling strictly-necessary cookies will break the app.

12. Marketing & your choices

You can opt out of our marketing emails at any time using the unsubscribe link in the email or by emailing [email protected]. We will still send essential service messages (about your account, billing, security, and platform changes that affect your tenant) — those are not marketing and we cannot turn them off while you have an account.

If you receive marketing from a salon that uses Saloninfra, you can manage or stop it using the unsubscribe link in that salon's message. That choice applies to that salon only — your relationship with other salons that use Saloninfra is not affected.

13. Changes

We may update this policy. The current version is always linked from inside the app. Material changes will be announced in-app and, where appropriate, by email to the company manager.

This policy is published in English and Estonian. In case of conflict between the two language versions, the English version prevails.