This policy explains, in concrete terms, how Beauty Manager — a platform operated by Răzvan Ivan, Romania, available at https://www.beautymanager.net — processes your personal data. We do not speak about “data in general”: we say which categories we take, why, on what basis, how long they stay with us, who else may see them and what you can ask for. If you do not agree, do not create an account and do not use the services that require data.
Updated: 6 September 2026
For platform account data (salon or client registration, sign-in, email/phone confirmation, password reset, subscription, technical access logs, messages to platform support), the controller is Beauty Manager, represented by Răzvan Ivan. You can write to the addresses on the Contact page or by WhatsApp / SMS, not by voice call.
Each registered salon is, in principle, a separate controller for its clients’ data: bookings, records, journal notes, messages the salon sends, cover photos, companies, team and takings. Beauty Manager provides the application; the salon decides what it writes about its clients and why. If a salon asks you for data at reception or sends you a message, ask the salon, not only the platform.
When a salon uses the application to keep client records, Beauty Manager may act as a processor for those technical operations: storage, backups, display in the interface. The salon remains responsible for the legal basis towards the end client.
We collect only what is needed for the platform to work and stay safe. We do not sell client lists and we do not buy third-party marketing databases to profile you.
Without these processing operations we cannot create the account, let you book, bill the subscription or keep the application safe. The main basis is performance of the contract (the Terms and conditions) and steps prior to contract, for example when you start registration.
We also have legal duties: keeping certain payment records, answering authority requests, complying with the GDPR and Romanian e-commerce law. For some messages (account confirmation, password reset, trial expiry warning) the basis is the contract and the legitimate interest of protecting your account.
We use legitimate interest narrowly: abuse prevention, technical logging, aggregated traffic statistics, stability improvements. We do not run behavioural advertising and we do not sell profiles.
We ask for consent where the law requires it, for example marketing messages you explicitly requested. You may withdraw it at any time, without affecting the lawfulness of earlier processing. Bookings, billing and security do not depend on marketing consent.
We do not publish your data on the internet beyond what you or the salon choose to make visible (for example salon name, city, categories and cover photos on the public page).
We keep data while you have an active account and for as long as needed afterwards to close the relationship, defend a right or meet a legal duty. We do not promise “instant deletion from every copy” in the same second: backups rotate on a short technical cycle.
If you delete your account in the application, your access is closed. Some records linked to bookings, payments or a salon journal may remain with the salon as controller, because they belong to that salon’s records, not only to your platform account. Subscription billing data is kept for the period required by applicable tax and accounting law.
Technical access logs are kept for a limited time, long enough to investigate an incident, not as a marketing archive.
We use a session cookie so you stay signed in and a language cookie so we show the interface in the language you chose. These are strictly necessary. In addition, the Google Ads tag measures visits and salon sign-ups that come from ads, so we can see which ads bring salons. Google may set a measurement cookie for this. We do not sell identifiers and we do not use the data for personalised ads on other sites.
You can delete cookies in the browser. If you delete the session cookie, you will be signed out. If you delete the language cookie, you return to the default language (Romanian) until you choose again.
Data is operated for www.beautymanager.net. If a technical provider (for example email delivery or payments) stores or processes in another country, we do so only with safeguards recognised by EU law: adequacy decision, standard contractual clauses or another equivalent legal measure. We do not transfer data “to anyone, anywhere” without a technical reason and protection.
Passwords are not stored in plain text. The session is signed and time-limited. Access in the application is split by role: an employee does not see what a general manager sees, a client does not enter the salon menu, the platform administrator has a separate space.
No internet transmission is 100% secure. If you suspect your account was compromised, change the password via reset and write to us at once. We will never ask for your password by email or phone.
The platform is not intended for children under 16 as account users. A salon may record a service for a minor (for example a child’s haircut) only through the adult who makes the booking and who is responsible for the data entered. If we learn that a minor created an account alone, we close it.
You have the rights of access, rectification, erasure, restriction, objection, portability, withdrawal of consent and complaint to the Romanian DPA (ANSPDCP). Details, time limits and exceptions are on the GDPR page. To exercise them, write from the Contact page, stating what you ask for and how we can identify you.
If we change this policy on an important point (new purposes, new recipients, radically different retention), we update the date on the page and, when the change affects you directly, we inform you in the application or on the email in the account. Continued use of the service after a published change means you have taken note of the new version. If you do not agree, you may close the account.