Glam Platform Privacy Policy

Welcome to the Glam Platform ("we," "our," or "us"), operated and engineered by BERALYTICS SYSTEMS. The Glam Platform is an enterprise-grade luxury salon and atelier management operating system delivering client experience portals, multi-outlet reservation dispatch, real-time master stylist allocation, WhatsApp OTP verification, prepaid VIP privilege club memberships, and automated GST billing engines.

We are deeply committed to protecting the privacy, confidentiality, and data sovereignty of both salon clients ("Guests") and salon personnel ("Staff"). This Privacy Policy explains our data collection, processing, and protection practices in compliance with applicable legislation, including the Digital Personal Data Protection Act, 2023 (DPDP Act) and international data governance standards.

1. Information We Collect

To provide high-precision atelier scheduling, prevent reservation fraud, and maintain statutory compliance, we collect the following categories of information:

• Guest Contact & Identification Data: Full Name, 10-digit Mobile Phone Number, optional Email Address, and generated unique Guest Customer Code. For guest reservations, no permanent account creation or password is required.
• Reservation & Appointment Telemetry: Selected signature rituals, service durations, assigned creative master artists, requested date and chair slot times, appointment notes, and lifecycle status transitions (Scheduled, Confirmed, In Service, Settled, or Cancelled).
• Anti-Spam Verification Data: For walk-in and web reservations, our platform utilizes official WhatsApp One-Time Password (OTP) verification. We store cryptographic verification timestamps and verification status exclusively to prevent automated slot denial and booking spam.
• Financial, Billing & GST Records: Itemized invoice details, subtotal charges, applicable GST calculations (CGST, SGST, IGST under inclusive or exclusive pricing models), payment tenders (Card, UPI, Cash, or Prepaid Atelier Wallet), invoice numbers, and settled receipts.
• VIP Privilege Club & Wallet Data: Guest tier status (Standard, Silver, Gold, Platinum, Crown VIP), prepaid wallet balance, privilege loyalty point balances, and historical ritual quota redemption logs.
• Consultation & Care Preferences: Optional client beauty notes, formula archives, beverage preferences, and allergy safety alerts recorded to deliver bespoke coiffure craftsmanship.
• Operational Staff & Stylist Records: Staff full names, contact information, branch allocations, designations, performance ratings, and role-based operational credentials.
• Technical & Session Identifiers: Chosen outlet location preferences, device browser headers, IP addresses, and secure session state cookies utilized solely to maintain reservation flow integrity.

2. Architecture & Strict Multi-Outlet Data Isolation

The Glam Platform is architectured with strict tenant and multi-outlet isolation principles:

• Branch-Level Isolation: Each salon location operates with isolated database scopes (WHERE outlet_id = ?). Guest profiles, appointment calendars, and billing registers of one outlet are strictly compartmentalized and inaccessible by other branches.
• Role-Based Access Control (RBAC): Front-desk concierges, master stylists, and branch administrators access only the data necessary to execute their specific responsibilities. Administrative privacy masking ensures guest phone numbers and sensitive telemetry are protected against unauthorized export.
• Zero Default Outlet Assumption: The public experience portal presents an active outlet selection directory, guaranteeing that service offerings, custom branch pricing, and master artist availability accurately reflect the client's chosen location.

3. How We Use Your Information

We process collected data exclusively for legitimate business and operational purposes:

• To schedule, confirm, modify, and manage chair reservations with assigned master stylists.
• To transmit automated booking confirmations, WhatsApp OTP codes, and digital tax receipts.
• To compute accurate tax invoices in compliance with national Goods and Services Tax (GST) regulations.
• To manage prepaid atelier wallet balances, apply authorized tier discounts, and log VIP privilege quotas.
• To mitigate fraud, eliminate appointment slot squatting, and secure platform access.
• To analyze operational efficiency and service utilization to enhance atelier service standards.

4. Communication & Messaging Policy

We maintain a strict anti-spam policy regarding customer communications:

• Transactional Notifications: WhatsApp and SMS communications are reserved for transactional alerts—such as OTP verification, instant reservation confirmation, rescheduling notices, and digital invoices.
• No Unsolicited Marketing: We do not conduct automated promotional bombardment or cold-calling. Clients may opt out of non-essential concierge reminders at any time.

5. Information Sharing & Third Parties

We never sell, rent, monetise, or trade your personal data with third-party advertisers or data brokers. Information is shared solely with vetted sub-processors essential to platform operation:

• Messaging Gateways: Official Meta / WhatsApp Business API providers for secure transactional OTP and booking delivery.
• Payment Processors: PCI-DSS certified payment aggregators for digital POS and UPI settlements. Raw payment card credentials are never stored on Glam Platform servers.
• Cloud Infrastructure: High-security ISO/IEC 27001 certified cloud database servers with dedicated encryption at rest and in transit.
• Legal & Regulatory Mandates: Disclosures made only when legally obligated by statutory tax authorities, judicial orders, or governing law enforcement agencies.

6. Data Security & Cryptographic Protection

We deploy defense-in-depth security measures to protect salon records:

• Transport Encryption: All client and administrative traffic is strictly encrypted using TLS 1.3 / HTTPS.
• Password Hashing: Staff and user passwords are cryptographically salted and hashed using bcrypt (cost factor 12).
• Session Integrity: Secure HTTP-only cookies, anti-CSRF guards, and automated session timeouts.
• Statutory Retention: Tax invoices and accounting logs are retained for statutory audit durations as mandated by financial regulations, after which data is securely archived or permanently anonymized.

7. Your Rights under the DPDP Act

Under the Digital Personal Data Protection Act, 2023 and applicable privacy frameworks, salon clients and platform users have the right to:

• Access & Summary: Request an overview of personal information and transaction records maintained by your home atelier.
• Correction & Updating: Correct inaccurate or out-of-date personal contact details via the salon front desk or client portal.
• Data Erasure: Request the deletion of non-statutory guest records when no active reservations, wallet balances, or statutory tax audit dependencies exist.
• Grievance Redressal: Submit inquiries or grievances to our dedicated Data Protection Officer.

8. Contact & Grievance Redressal

If you have questions, feedback, or compliance inquiries concerning this Privacy Policy or the Glam Platform data practices, please reach out to our team: