Data Processing Agreement

Parties

This agreement is between the salon, as controller of its clients’ data, and PLACEHOLDER_LEGAL_NAME (Aurafade), as processor. Account data of the owner and staff is not the subject of this agreement. That data is covered by the privacy policy, where Aurafade is controller.

Subject and term

The subject is hosting and showing to authorised staff the personal data needed for bookings, client records, and running the salon. The term is the subscription, including the trial, plus the 30-day hold after the account is deleted.

Instructions

Using the product is the instruction to process the data for the service. We do not process it for another purpose. If a binding legal order arrives, we tell the salon where the law allows.

Security and sub-processors

Data is separated by salon membership. Sub-processors: Google Firebase/Cloud, Cloudflare (Turnstile), Lemon Squeezy (payment records), and Meta WhatsApp only if that channel is later enabled. A new sub-processor stays within the purposes in this list.

Help and deletion

The salon may ask for reasonable help to answer a client’s request. When the subscription and the hold end, the salon’s client data is permanently deleted. A record is kept longer only where the law requires it.

Transfers and audit

Salon data is processed in Firestore eur3 (European Union: Belgium and the Netherlands), files in Cloud Storage us-east1 (United States), callable functions in europe-west1 (Belgium, EU), and scheduled jobs and Firestore triggers in europe-west4 (Netherlands, EU). Processing takes place within the European Union, in Belgium and the Netherlands. Transfers to the United States use the sub-processor’s standard contractual clauses. Once a year the salon may send a written questionnaire under a duty of confidence. An on-site audit is arranged with reasonable notice and without stopping the service.

Liability

The processor is liable for its own breach to the extent the applicable law requires. The salon keeps the controller’s duties to inform clients and to have a lawful basis.

Version

Effective 2026-10-28. Version 2026-11-02.1. Notices: PLACEHOLDER_KVKK_EMAIL and PLACEHOLDER_SUPPORT_EMAIL.