Your information

Privacy Policy

Effective 22 August 2026

This policy explains how Ella Vera Lounge Spa in Al Ain handles information when you use our booking website or iPhone app.

Information we collect

When you make or manage an appointment, we collect the information you provide: your name, mobile number, email address, selected service and specialist, appointment date and time, reminder preference, and any optional booking note. If you create an account, we also keep your account profile and a protected, non-reversible password record; we do not store your password as readable text. Ella Vera Circle records eligible visits, points, universal stamps, issued rewards, reward use and related booking references so your balance can be restored across signed-in devices.

If you submit a review, we collect the ratings and comment you provide. Your first name, ratings, comment, and the related service and specialist may be displayed publicly; your phone number, email address, customer number, and booking reference are never included in the public review. A non-contact, one-way opaque reviewer identifier is attached to public reviews only so another customer can hide reviews from the same reviewer on her own device.

Our hosting and security systems may also process limited technical information, such as IP address, request time, and browser or device connection information, to deliver the service, prevent abuse, and investigate errors. The app does not request access to your contacts, photos, precise location, microphone, or camera.

How we use information

• To create, confirm, change, or cancel requested appointments.
• To show the correct booking to the selected specialist and to salon management.
• To send booking confirmations, welcome messages, receipts, and requested reminders.
• To maintain a signed-in customer account, calculate loyalty progress, issue earned rewards, and prevent duplicate or unauthorized redemptions.
• To process and moderate customer reviews, respond to reports, let customers hide reviewers on their own devices, and improve salon service.
• To protect the booking service, prevent duplicate appointments, and respond to support requests.

We do not sell personal information, serve third-party advertising, or use booking information to track you across other companies’ apps or websites.

Who processes information

Authorized Ella Vera managers can access booking details needed to operate the salon. The assigned specialist can see the customer’s name and booking details, but the specialist workspace excludes customer phone numbers, email addresses, and notes.

Cloudflare provides website hosting, security, and database infrastructure. Resend processes transactional email delivery. We require service providers that handle information for us to protect it and use it only to provide their contracted service.

Device storage

The iPhone app saves your optional profile details, booking references, private booking-management tokens, an opaque guest installation key, and any reviewer identifiers you choose to block on your device so you can return to bookings and keep those reviews hidden. The website may use browser storage for the same display and blocked-reviewer preferences, local appointment history, and the isolated localhost demo. On the production website, signed-in account and loyalty records are stored in Ella Vera’s protected server database and the browser receives a secure session cookie. Removing the app or clearing the browser’s site data removes local copies and signs the browser out, but it does not automatically delete salon booking, account, or loyalty records.

Retention and deletion

We keep booking, receipt, and review records for as long as reasonably needed to provide the service, maintain salon and accounting records, resolve disputes, and meet legal or security requirements. When staff block an abusive review author from the service, Ella Vera may retain non-reversible security fingerprints of account, guest, email, and phone identifiers to enforce that decision; these fingerprints are not displayed publicly. When information is no longer needed, we delete it or make it non-identifying. You may ask us to access, correct, or delete your information. We will honor verified requests unless we must keep particular records for legal, accounting, fraud-prevention, or security reasons.

Your choices

You can book without creating a customer account. Reminder preferences are optional. You can cancel eligible upcoming appointments from the device used to book, block or report a public reviewer, and reset your on-device blocked-reviewer list. Signed-in customers can permanently delete their account from the account screen; you can also request a copy, correction, or deletion of your personal information by email.

Security and changes

We use HTTPS, access controls, restricted staff roles, and protected booking tokens. No method of storage or transmission is completely secure. If this policy changes materially, we will update the effective date and publish the revised version here.