1. Introduction
BraidR ("we", "us", "our") respects your privacy. This policy explains what personal data we collect when you use BraidR, why, and what your rights are.
We handle personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
2. Who we are
BraidR is an independent project based in Norway. It is not yet a registered company. BraidR is the controller of the personal data collected through this website.
Questions about your data? Use our contact form and choose "Privacy or data request".
3. Data we collect
Account information
- Name (first and last)
- Email address
- Phone number (optional)
- Profile photo (optional)
- Town or city, and approximate location
For braiders
- Service descriptions and prices
- Portfolio images
- Working hours and availability
- Work address (shown to a client only after a booking is confirmed)
Usage data
- Booking history
- Messages between users
- Reviews and ratings
- Places and styles you search for
Contact form
- Your name, email address and message, plus a scrambled (hashed) form of your IP address to prevent abuse
4. Why we use your data
- Run and improve BraidR
- Manage your account
- Handle booking requests between clients and braiders
- Send notifications and reminders about your bookings
- Keep BraidR safe and prevent abuse
- Meet our legal obligations
5. Legal basis
We use personal data because you have agreed to it (UK GDPR Art. 6(1)(a)), because we need it to give you the service you asked for (Art. 6(1)(b)), because we have a legitimate interest in running BraidR safely (Art. 6(1)(f)), or because the law requires it (Art. 6(1)(c)).
7. Your rights
Under UK data protection law you have the right to:
- Get a copy of your personal data
- Have wrong data corrected
- Have your data deleted
- Limit how we use your data
- Receive your data in a portable format
- Object to us using your data
- Withdraw consent at any time
To use these rights, send a request through our contact form and choose "Privacy or data request". We reply within one month.
9. Where your data is stored
Your data is stored on servers in the EU (Stockholm). BraidR is run from Norway, which the UK recognises as providing adequate data protection. If a provider processes data outside the UK and the EEA, it does so under an approved safeguard. We use encryption and access controls to protect your data.
10. Complaints
If you are unhappy with how we use your data, please tell us first through the contact form and we will try to put it right. You can also complain to the Information Commissioner's Office (ico.org.uk), the UK data protection regulator.
11. Contact
Questions about privacy? Use our contact form.