Privacy Policy
Draft policy — under legal review.
Last updated
Scope
This policy covers the personal data Lamsa handles when you use this site to find a salon and book an appointment, and when a salon uses Lamsa to run its diary. The law we work to is Lebanese Law 81/2018 on electronic transactions and personal data.
What we collect
To make a booking we need your name and a mobile number, and we keep the appointment itself: the salon, the service, the professional, the time, the price recorded for it and any note you added. An email address is optional and is used only to send you the booking. If you open an account we store your email address and a secure hash of your password, never the password itself. Our servers also keep ordinary technical logs. If you save a salon to your account, we store which salon and nothing else about it.
Why we use it
Your name and number reach the salon so it knows who is coming and can contact you about the appointment. The same data lets us send confirmations and reminders, show you your booking through your private link, apply the limits that stop the booking form being abused, and keep a record of which version of the policy text you accepted when you booked.
Who sees it
The salon you book with sees your booking and your contact details, and they become a client record inside that salon's own account. Other salons do not see them. We also use a small number of technical providers to host the service and deliver messages, and they may process data only on our instructions. We share data with authorities only where Lebanese law requires it.
No sale of your data
We do not sell your personal data, and we do not rent it out or trade it for advertising. Lamsa is paid by the salons that subscribe to it, not by advertisers.
How long we keep it
A salon keeps its client and appointment records for as long as it uses Lamsa, because that history is how a salon serves a returning client. A consent record is kept for as long as the booking it belongs to. If a salon closes its account we delete or anonymise its data within a reasonable period, unless the law requires us to keep something longer. You can ask for your own record to be removed sooner.
Your rights
You can ask what we hold about you, ask us to correct it, ask us to delete it, and object to a particular use — including messages you would rather not receive. Tell us which salon you booked with so we can find the right record. We answer within a reasonable time, and at no charge for an ordinary request.
Contact
Contact for data requests: email [email protected] — Lamsa's interim mailbox while it runs a closed pilot — or ask the salon you booked with, which holds your client record and can forward any request for access, correction or deletion. A permanent email and postal address will be published here before Lamsa opens to the public.
Reviews you write
A review can only come from an appointment you booked on Lamsa that the salon then marked as completed, and the link to write one goes to the email address you gave with that booking. What is published is a shortened form of the name on the booking — a first name and an initial, like “Maya K.” — your star rating, whatever you wrote, and the month of your visit. The day is never shown: not to readers, and not to the salon. Neither is the professional who served you. Your review tells the salon nothing about you that your booking had not already told it. You can take the review down yourself from the same link for twelve months, and by writing to us after that; when you do, your words and the salon’s reply are deleted rather than hidden — everywhere we hold them, including a message we had queued but not yet sent. An email that has already left cannot be recalled. We can also remove a review ourselves.
When a salon replies to your review
A salon can answer a review publicly, once, and can edit its answer afterwards. We email you that first reply — one message, to the address the booking was made with, and only while your review link is still valid — so that you learn your review was answered instead of finding out by chance. If the salon edits its reply later, nothing further is sent. You cannot be emailed a reply at all if the booking carried no email address.
How long we keep the messages we send
Every email Lamsa sends you — a booking confirmation, a reminder, a request to review a visit, a salon’s reply — is queued first, with a copy of what it said, which is how we can tell whether it reached you. A queued message ends in one of three ways: it is sent, it finally fails, or it is dropped before it goes out because it no longer applies — most often because the appointment it was about was cancelled or moved. In all three we delete that record when it turns 90 days old; a nightly job does it, so nothing sits there longer than that. Only a message still waiting to go out is kept, and only until one of those three things happens to it. This is separate from the record the salon keeps of your appointment, which the section above covers.
Counting visits to a salon’s page, without tracking you
We count how many people opened each salon’s page and roughly where they arrived from: the salon’s own Instagram link, the booking button on its Google listing, a search engine, one of our directory pages, no referring site at all, or anywhere else. The whole record is a salon, a date, one of those six words, and a number. We set no cookie for it, store nothing on your device, and write down nothing that identifies you — not your IP address, not an account, not your browser. Your browser’s identifier is read once, in memory, only to keep crawlers and link previews out of the count, and is not stored. We use these numbers to decide whether our directory pages are worth building on; they cannot tell us who you are.