Privacy Policy

Version 2026-07-24

This policy explains how Clientelo and the partner salon process your personal data in line with Moldova's Law no. 133/2011 and GDPR principles. By ticking consent in your account you confirm that you have read and accept these terms.

1. Data controller

The Clientelo platform acts as processor; the salon you are a client of is the data controller.
Data protection contact: privacy@clientelo.md.

2. Data we collect

Identification: first name, last name, phone number, e-mail (optional).
Optional billing/legal data you fill in your account (e.g. address, fiscal code/IDNP for legal entities).
History of appointments, services and payments at the salon.
Minimal technical data needed to operate (security logs).

3. Purposes

Managing appointments and the relationship with the salon.
Processing payments and issuing the fiscal receipt.
Loyalty program and visit history.
Appointment notifications (confirmations, reminders) via your chosen channels.

4. Legal basis

Performance of the requested service (booking/payment).
Your consent for marketing messages (revocable anytime).
Legal obligations (tax, accounting).

5. Marketing

Promotional messages are sent only with your explicit consent.
You may unsubscribe anytime via the opt-out link or from your account, without affecting bookings.

6. Storage & security

Data is stored encrypted; salon payment keys are encrypted with AES-256-GCM.
Access is restricted by session and role; connections are protected with TLS/HTTPS.
We keep data only as long as needed for the purpose or required by law.

7. Your rights

Access, rectification, erasure, restriction, portability and objection.
Withdraw consent at any time.
To exercise your rights, write to privacy@clientelo.md.
You may lodge a complaint with the National Center for Personal Data Protection (CNPDCP).

8. Third parties

Payment processors (MAIB, EasyPay), messaging services (Telegram/SMS/WhatsApp) and hosting — strictly for the purposes above.

Policy version: 2026-07-24