Privacy policy
This page explains what personal data brity processes when you visit www.brity.app, book at a salon, join a waitlist or work with brity, and what your rights are.
Who is responsible
The controller of the data brity processes for its own purposes is the publisher of brity (details in the legal notice):
Horion Consulting (brity), Rue Léopold 32, 5500 Dinant, Belgique, 0757.817.943. Legal notice
For any question or request about your data: privacy@brity.app.
Data protection officer — Gregory Horion (privacy@brity.app)
Two roles: controller and processor
brity decides (controller)
for site visitors, the professionals’ and clients’ waitlists, sign-in and accounts, support, security and the tools a professional connects herself (calendar, Instagram, e-invoicing).
brity acts for the salon (processor)
for the client file of a salon or a professional: your appointments, your file, the team’s notes, payments at the salon, messages and reviews. The referral programme, cashback and the draw belong to the brand where you book (for example The Moment): the brand decides, brity computes them on its behalf. The salon (or the brand) is then the controller; brity uses this data only on its instructions, under contract. For a request about this data, contact the salon, or write to us: we pass it on.
Data processing agreement — [À COMPLÉTER : conditions de traitement des données (art. 28 RGPD), acceptées par chaque salon à son inscription — en rédaction]
What we process, why and for how long
| Purpose | Data | Legal basis | brity’s role | Retention |
|---|---|---|---|---|
| Show the site, protect it and find salons near you | IP address and technical data (processed by the host, not kept by brity), approximate location rounded to about 1 km (never stored), your recent searches in your browser. | Legitimate interest | Controller | Location: the time of the request, or of the tab if you agree to share it. Host’s technical logs: [TO BE DEFINED: retention period]. |
| Measure the site’s audience | Page views, referrer, device type (Cloudflare Web Analytics, no cookie, no profile). | Consent | Controller | Aggregated statistics: [TO BE DEFINED: retention period]. Your choice is kept 6 months. |
| Professionals’ waitlist: prepare the launch, give you your place and your invitations | Name, trade, salon or status, city, phone, e-mail, Instagram account (if you give it), your simulated page (« Simulate your page »: trade, name, place, hours, services, prices, WhatsApp if you give it), questionnaire answers, referral code, addresses of the friends you invite (hashed if they unsubscribe), proof of your consent (text and version). | Consent | Controller | Until you open on brity, unsubscribe or ask for erasure, at most [TO BE DEFINED: retention period]. Sign-in and confirmation codes: 10 minutes; an unconfirmed simulated page is erased after 10 minutes. |
| Clients’ waitlist: let you know when brity opens near you | First name, e-mail, phone (optional), postcode, city, your professional or salon (optional), proof of your consent. | Consent | Controller | Until you sign up, unsubscribe or ask for erasure, at most [TO BE DEFINED: retention period]. Confirmation link: 7 days. |
| Sign you in and manage your account | Phone or e-mail, first and last name, one-time code (OTP), passkey if you create one, sessions. | Contract | Controller | Code: 10 minutes, 5 attempts. Session: 90 days. Account: while active, then [TO BE DEFINED: period after last use]. Deletion: at your request, in the app (Profile › Delete my account); your receipts no longer carry your name (your file is anonymised), and invoices are kept for 10 years exactly as issued, with the buyer’s name and address: legal obligation. |
| Book, move and cancel your appointments; the professionals’ calendar | Appointments (salon, professional, services, date, price frozen at booking), contact details, booking source, slot waitlist, recurring appointments. | Contract | Processor for the salon | Set by the salon: [TO BE DEFINED: retention period]. |
| The salon’s client file: follow-up, internal notes, origin | Visit history, internal nickname, the team’s notes (dated, signed, visible to the salon team, never to you), archiving, origin of the file (brought by the network or a professional’s own client) and its justified corrections. | Legitimate interest | Processor for the salon | While you are a client of the salon, then [TO BE DEFINED: retention period]. A note can be deleted by its author or an administrator. |
| Referral, cashback, vouchers and network points | Referral tree over two levels, vouchers, cashback, points movements, the funder of each loyalty euro, discounts frozen at each checkout. | Contract, Legal obligation | Processor for the salon | Sponsor vouchers: 8 weeks (salon setting); cashback to give: 6 months; network points: 12 months. Movements are kept append-only so we can explain every balance and correct a mistake: [TO BE DEFINED: retention period]. |
| Sunday draw and announcement of the winner | Frozen tickets (one per confirmed appointment of the week), result, reveal at the scan; your first name in an Instagram story if you left the box ticked; a photo only if you agree at the salon (with the version of the text you accepted). | Contract, Consent | Processor for the salon | Draws and tickets: [TO BE DEFINED: retention period]. Consent for the first name and photo: until you withdraw it. |
| Appointment confirmations, reminders and changes (SMS, e-mail, WhatsApp) | Number or address, message content, sending log (status, cost), SMS opt-outs. | Contract | Processor for the salon | Sending log: [TO BE DEFINED: retention period]. |
| brity assistant on WhatsApp and Instagram: finding a slot, booking, moving or cancelling an appointment, leaving a review | Your WhatsApp number (or your WhatsApp / Instagram ID), your profile name, the content of your messages and what you send (shared location, button choices), delivery and read statuses, your consent and your STOP request, the check of your number by code. Nothing is kept and the AI is never called before you accept. Replies are written with the Claude AI; an appointment is only booked, moved or cancelled when you press the button yourself. | Consent, Contract | Controller | Message text: 30 days, then erased (only the technical record, without text, remains). Consent and STOP: [TO BE DEFINED: retention period]. |
| Salon offers by SMS or e-mail, “book again” reminder | Your consent per channel (date, where you gave it), STOP links (stored hashed), date of the last reminder. | Consent, Legitimate interest | Processor for the salon | Until you withdraw your consent (STOP link, your profile). Proof of consent and withdrawal: [TO BE DEFINED: retention period]. |
| Last-minute alerts, deals and reminders (Web Push and app) | The Web Push subscription of your browser, or the notification ID of your phone (app); your consent, your usual appointment days and times to choose who to notify. The message holds at most a first name, a day, a time, sometimes the name of a service and the path of the screen to open: never an amount, a phone number or an e-mail address. | Consent | Processor for the salon | Until you withdraw your consent, sign out or delete your account, or your browser or phone expires the subscription (10 devices at most per account). |
| The app’s features on your phone (camera, photos, location, contacts) | Camera: scanning a client’s QR code (professionals) and taking photos of your work. Photos: those you pick for your page (professionals). Location: only when you search near you, rounded to about 1 km before it leaves your phone. Contacts: only when you choose to read them, read-only; names and numbers (500 at most) are used to find friends on brity or to import your clients (professionals; nothing is imported unless you tick it). Each permission is asked when you use it and can be withdrawn in your phone’s settings. | Consent | Controller | Location: the time of the search, never stored. Contacts: the time of the comparison, nothing is kept, except those you import into your client file. Photos: as long as you keep them on your page. |
| Deposits, gift cards, checkout and refunds | Amounts, status, payment reference; for a saved card, only its brand and last 4 digits. brity never sees or keeps your card number. | Contract, Legal obligation | Processor for the salon | Statutory accounting retention period: 10 years. Invoices are kept exactly as issued, with the buyer’s name and address: they are neither changed nor deleted, even after your account is deleted. Receipts are kept but no longer carry your name. |
| Verified reviews and Google reviews on the salon page | Rating, comment, the salon’s reply, invitation link (30 days, hashed); public Google reviews read through the official API when the salon set it up. | Legitimate interest | Processor for the salon | While the review is published or until you ask for its removal: [TO BE DEFINED: retention period]. |
| The professional’s tools: Google or Outlook calendar, iCal feed, Instagram portfolio, import of her Planity page | Connection tokens (encrypted), busy slots and synced appointments, chosen Instagram posts, public information from her page (services, opening hours). | Contract, Consent | Controller | Until she disconnects the tool; the import keeps only what she approves. |
| E-invoices (Peppol) of salons that connect Super PDP; salon subscriptions (coming) | Legal identity of the business (name, company number, VAT, address), encrypted connection tokens, invoices. | Contract, Legal obligation | Processor for the salon | Tokens: until disconnection. Invoices: 10 years as issued (statutory retention period). |
| Help, support tickets and ideas board | Your questions to the help assistant (answers generated by Workers AI), tickets and messages, page and browser of a bug report, ideas and votes (published only after review, without names). | Contract, Legitimate interest | Controller | [TO BE DEFINED: period after the ticket is closed]. |
| Security, abuse prevention and error tracking | Attempt limits, log of support access (“sign in as”, 1 hour at most, audited), error reports without IP address or cookies, e-mails and phone numbers masked (Sentry). | Legitimate interest, Legal obligation | Controller | [TO BE DEFINED: retention period]. |
Legal bases
- Contract —
- needed to provide the service you ask for (account, booking, loyalty programme).
- Consent —
- you gave your consent, separately, and you can withdraw it at any time without affecting what was done before.
- Legitimate interest —
- a reasonable interest (security, running the salon, improving the service), weighed against your rights; you can object.
- Legal obligation —
- a law requires it (accounting, invoicing, answering authorities).
Who receives your data
Your data is neither sold nor rented. It is available to the salon where you book (its team, according to their role), to the people at brity who need it for the service and support, and to the technical providers below, under contract, only for what they need. It may also be disclosed to authorities when the law requires it.
| Recipient | Role | Location and safeguards |
|---|---|---|
| Cloudflare, Inc. | Hosting of the site and the apps, databases, files, sending e-mails, bot protection, help assistant (Workers AI), audience measurement (with your consent). | Data stored in the EU; processing at the network edge, including outside the EU: European Commission standard contractual clauses [TO BE CHECKED: signed DPA and Data Privacy Framework]. |
| Prelude | Sending SMS (sign-in codes, confirmations, reminders, accepted offers). | [TO BE CHECKED: processing location and safeguards]. |
| Functional Software, Inc. (Sentry) | Tracking technical errors, without IP address or cookies, with e-mails, phone numbers and personal links masked. | EU data region (Germany); US company: standard contractual clauses [TO BE CHECKED]. |
| Mollie B.V. | Payments of the salons that use it (deposits, gift cards, saved cards) and settlement of network balances (not enabled yet). | European Union (Netherlands). |
| Stripe | Payments of the salons that chose it (their own Stripe account or Stripe Connect). | European Union (Ireland) and United States: standard contractual clauses [TO BE CHECKED]. |
| Super PDP | Sending and receiving e-invoices (Peppol network), for the salons that connect it. | [TO BE CHECKED: European Union]. |
| Google Calendar connected by a professional, the salon’s Google reviews (Places API). | [TO BE CHECKED: processing location and safeguards]. | |
| Microsoft | Outlook calendar connected by a professional. | [TO BE CHECKED: processing location and safeguards]. |
| Meta Platforms Ireland (WhatsApp, Instagram) | WhatsApp Business and Instagram messaging: receiving and sending the assistant’s messages and appointment messages. A professional’s Instagram portfolio (reading her posts), deletion requests coming from Instagram. | Meta Platforms Ireland Ltd (EU); possible processing in the United States by Meta Platforms, Inc.: EU–US Data Privacy Framework and standard contractual clauses [TO BE CHECKED: signed WhatsApp Business terms]. |
| Anthropic (Claude) | Claude AI of the WhatsApp and Instagram assistant: understands your messages and writes the replies. Your messages are not used to train its models. | United States: European Commission standard contractual clauses [TO BE CHECKED: signed DPA, retention at Anthropic]. |
| Web Push | Your browser’s notification service (Google, Mozilla, Apple…): it delivers the alerts you accepted, encrypted. | Depends on your browser. |
| Expo, Apple (APNs), Google (FCM) | Delivery of the app’s notifications: Expo, then Apple (APNs) and Google (FCM). The message (a first name, a day, a time, sometimes the name of a service) goes through their servers in the clear. | United States (Expo); Apple and Google: the European Commission’s standard contractual clauses [TO BE CHECKED: Expo’s terms]. |
| Salons | The salon or professional you book with, and their team according to their role. | The salon, controller of its client file. |
Transfers outside the European Union
brity’s databases, files and queues are created in Cloudflare’s European jurisdiction. Some providers are companies based outside the EU (notably in the United States): a transfer only happens with a safeguard provided by the GDPR, such as an adequacy decision (including the EU–US Data Privacy Framework) or the European Commission’s standard contractual clauses. You can ask for a copy at privacy@brity.app.
Security
Encrypted connection (HTTPS), one-time codes, encrypted connection tokens and keys, personal links stored hashed, access limited by role (client, professional, manager, administrator), support access limited to one hour and logged, and error tracking without personal data. No measure is infallible: if a data breach presents a risk, we notify the authority and, where needed, the people concerned.
Your rights
At any time, you can:
- access your data and receive a copy;
- have it corrected;
- have it erased, unless the law requires us to keep it (invoices, for example);
- have its use restricted while a dispute is checked;
- receive it in a machine-readable format, or have it sent to another service;
- object to processing based on legitimate interest, and at any time to direct marketing;
- withdraw your consent: STOP link in an SMS, your profile settings, the Cookies page, disconnecting Instagram or your calendar.
Write to privacy@brity.app from your account’s address or with your account’s phone number. We answer within one month, which can be extended by two months for a complex request (we will tell you). If we have reasonable doubts about your identity, we may ask you to confirm it. For your data at a salon, we pass your request on to the salon and help it answer.
Lodging a complaint
If you think your data is not handled properly, you can lodge a complaint with the Belgian supervisory authority:
Data Protection Authority (APD / GBA)Address — Rue de la Presse 35 / Drukpersstraat 35, 1000 Bruxelles / BrusselWebsite — www.dataprotectionauthority.beAutomated decisions
The Sunday draw picks a ticket at random among the week’s appointments; displayed prices, discounts and cashback are computed by rules set by the salon, the same for everyone. No decision with a legal effect on you is based on profiling. On WhatsApp and Instagram, the assistant suggests slots, but only your press of a button books, moves or cancels an appointment; you can ask to talk to a person at any time.
Minors
brity is not meant for children. In Belgium, a person under 13 cannot consent alone to an online service: their account, bookings and consents must go through a parent. If you think a child gave us data without consent, write to us: we delete it. [TO BE DEFINED: minimum age to create an account].
When a professional links her professional or creator Instagram account, brity reads her recent posts (images and carousels, no videos). Only the posts she picks are kept: the image (copied to brity, because Instagram links expire), the caption and the link to the post. Her connection token is encrypted and only used to read her posts. Nothing else is read, published or shared.
Why: to show her work in her public portfolio, labelled « via Instagram ».
How to remove everything: in the professional space, My public profile, by disconnecting Instagram; or in Instagram, Settings › Websites and apps, by removing brity. The linked account, the posts and their copies are then deleted from brity. You can also ask Instagram (Meta) for deletion: brity receives the request, deletes everything and gives you a status page with a confirmation code.
Cookies
The site only uses the cookies it needs, and audience measurement only with your consent. The details and your choice are on the Cookies page. Cookies
Changes
We will update this policy when brity changes (new service, new provider). The date at the top of the page shows the latest version; for an important change, we let you know in the app or by e-mail.