Privacy Policy

We are the data controller for the Stikky platform and for salon-owner accounts. For a salon’s members, the salon is the controller of the membership relationship; we process member data to operate the platform and to create the consent record.

Salon owners: your name, email, and Google profile basics (via sign-in), plus your salon details and Stripe connection status. Members: your name, email, and a consent record (the terms version accepted, timestamp, IP address, and browser user-agent). Payment and card data are handled by Stripe — we never receive your full card number.

To provide the service (performance of a contract), to record consent and meet legal obligations, to send transactional email about your account or membership, and to protect the platform (legitimate interests). We don’t use your data for advertising.

Service providers who help us run Stikky: Stripe (payments & Connect), Postmark (transactional email), Cloudflare R2 (image storage), and our database/hosting providers (Neon, UpCloud). They process data on our instructions. We don’t sell personal data.

We keep consent records for as long as needed to evidence what was agreed (and as required by law). Dormant salon accounts are deleted after the inactivity window described in our Business Terms. You can ask us to delete data sooner where no legal basis requires us to keep it.

You have rights to access, correct, delete, and port your data, and to object to or restrict certain processing. To exercise them, email privacy@stikkymembers.com. You can also complain to the UK ICO.

Where data is processed outside the UK/EEA, we rely on appropriate safeguards. We use technical and organisational measures to protect your data, including encryption in transit.

We may update this policy and will post the revised version here.