Privacy Policy

Retto is operated by Collective Digital UK (the company that operates the Retto booking platform). Our website is https://retto.app.

For questions about this policy or to exercise your data protection rights, email privacy@retto.app.

Salons are responsible for their clients. UK GDPR distinguishes who decides why and how personal data is used:

• Collective Digital UK is the data controller only for platform account data about salon owners, managers, staff, and reception users who sign in to Retto (identity, contact details, login identifiers, team roles, and data needed to operate your account).
• Each salon is the sole data controller for its clients' personal data, including what is collected, why, how long it is kept, and what messages are sent. The salon decides which features to use (reminders, marketing, etc.).
• Collective Digital UK acts as a data processor when we store, transmit, or display salon client data strictly to provide features the salon enables. We do not control salon client relationships and do not determine purposes of salon client processing.

If you are a salon client, contact the salon you booked with for access, correction, deletion, or complaints about how your data is used. Collective Digital UK is not responsible for salon decisions about your data.

We may provide technical assistance to salons at our discretion, but compliance obligations toward clients remain with the salon.

As a salon using Retto, you, not Collective Digital UK, are responsible for:

• Providing a lawful basis and, where required, consent for processing client personal data
• Giving clients your own privacy information that names your salon as controller and describes use of booking software and messaging tools
• Ensuring data you enter is accurate, adequate, relevant, and limited to what you need
• Honouring client rights requests within applicable timeframes
• Configuring reminders and marketing only when you have a lawful basis to contact recipients
• Staff access, training, and internal policies for handling client information
• Any breach notification duties that apply to you as controller (we will assist only as described in our Terms or a separate agreement)

Failure to meet these obligations is your risk. You may be liable to clients, regulators, and third parties, not Collective Digital UK, for salon-controlled processing.

Salon account holders and team members

• Identity and contact: name, email address, phone number (if provided)
• Account security: authentication identifiers managed by Supabase Auth; we do not store passwords in plain text
• Business profile: salon name, address, opening hours, services, team members, logo images
• Usage and support: actions within the app, audit logs for platform administration, and communications with support

Salon clients (entered by the salon)

• Contact details: name, phone, email
• Booking data: appointments, services, staff assigned, status, notes
• Marketing preferences: whether the client consented to marketing messages
• Optional commercial data: spend history, discount codes, reminder and message logs
• Payment-related metadata: prices, deposits, and bank transfer details staff may record for appointments (not card processing; card payments are not processed by Retto today)

Technical data

• Device and browser information, IP address, and request logs collected by our hosting provider for security and reliability
• Cookies and similar technologies required for login sessions (see section 9)

Platform account data. We process salon user account data under Contract and Legitimate interests to provide login, hosting, support, and security.

Salon client data. We process only on the salon's documented instructions as processor, to run features the salon enables (diary, customer records, reminders, marketing sends, etc.). The salon is responsible for the lawfulness of those instructions.

• Appointment reminders (SMS and/or email) are sent only when a salon turns them on and only using templates and settings the salon controls.
• Marketing emails are sent only when a salon initiates them and records consent as applicable.
• We do not sell personal data and do not use salon client data for our own marketing.
• We are not responsible for message content, recipient lists, or timing chosen by salons.

We use infrastructure providers to run Retto. They process data under contract and only as needed to deliver the service salons use. Salons remain responsible for choosing to use the platform and for client communications sent through it.

We are not responsible for outages, delivery failures, or acts/omissions of these providers. Salons should maintain their own client contact channels where business-critical.

Some sub-processors are based outside the UK. Where personal data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, UK Addendum to EU Standard Contractual Clauses, or the provider's participation in an adequacy regulation, as applicable.

Supabase project region can be chosen when the database is provisioned (e.g. EU). Contact us if you need details of the regions used for your organisation.

• Account data is kept while your subscription or account is active and for a reasonable period afterwards to resolve disputes and meet legal obligations.
• Salon client and appointment data is kept until the salon deletes it, deletes the account, or asks us to remove an organisation, subject to backup retention cycles.
• Email and SMS logs for reminders and marketing are retained to show salons what was sent and when.
• Security and audit logs are kept for a limited period necessary for incident investigation.

We implement reasonable technical and organisational measures appropriate to a small business SaaS platform, including:

• Encrypted connections (HTTPS) for web traffic
• Database isolation between salons (row-level security)
• Role-based access within salon accounts
• Server-only storage of integration secrets

No system is completely secure. We do not guarantee prevention of unauthorised access, loss, or alteration of data. Salons are responsible for account security, strong passwords, and controlling which staff can access client data.

Retto uses strictly necessary cookies and local storage to keep you signed in, remember dev/demo session state in development, and protect routes. We do not use third-party advertising cookies.

Authentication session cookies are managed through Supabase Auth. They are required for the app to function.

Salon account holders may have rights including access, rectification, erasure, restriction, objection, portability, and complaint to the ICO. Contact privacy@retto.app for platform account data.

Salon clients must exercise rights against the salon that holds their data.Collective Digital UK is not the controller for salon client data and is not obliged to respond directly to client requests, though we may forward or assist salons at our discretion.

• Access a copy of your personal data
• Rectify inaccurate data
• Erase data in certain circumstances
• Restrict or object to processing in certain circumstances
• Data portability where processing is based on consent or contract and is automated
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk

Rettois a business tool not directed at children. Salons alone decide whether to process minors' data and are solely responsible for lawfulness and safeguards. Contact the relevant salon first; contact us at privacy@retto.app only regarding our platform account data.

To the extent permitted by law, Collective Digital UK is not responsible for how salons use the platform, for salon client data processing decisions, for undelivered messages, for salon staff actions, or for regulatory penalties arising from salon non-compliance. See our Terms of Service for indemnity and liability limits applying to salon customers.

We may update this policy when our practices, features, or legal requirements change. We will post the new version on this page and update the "Last updated" date. Material changes may be notified by email to account holders or in-app notice where appropriate.