Gummy Wax Salon
Privacy Policy
This policy explains what Gummy Wax Salon Sdn Bhd (“we”, “the salon”) does with your personal data when you use our mobile app or website.
Last updated 10 September 2026
01 What we collect
- Your account — name, email address, mobile number, and the password you set (stored only as a one-way hash, never in readable form).
- Optional details you choose to give — date of birth, gender, a profile photo, and any note you add to a booking, such as an allergy or a preference.
- Your bookings and purchases — treatments booked, dates and times, the specialist you saw, packages bought and sessions used, and the amount charged.
- Technical data needed to run the service — your device type and app version, and the IP address a request came from, kept for security and troubleshooting.
We do not store card or bank account numbers in the app. Payments are taken at the salon or through a payment provider, and only the outcome reaches us.
02 Why we use it
- To take and manage your appointments, and to remind you about them.
- To sell and redeem packages, and to keep an accurate count of your sessions.
- To keep the salon's accounting and tax records, which we are required to keep.
- To send offers and salon news — only if you have turned that on, and you can turn it off at any time in the app under Personal details.
03 Who else sees it
Salon staff see what they need to serve you: your name, contact number, booking history and any note you left. We also use service providers to run the app — hosting, email delivery and error reporting — who process data on our instructions only. We do not sell your personal data, and we do not share it for anyone else's marketing.
We may disclose data where the law requires it, or to establish or defend a legal claim.
04 How long we keep it
Your account details are kept while your account is open. Booking and payment records are kept for seven years after the visit, because tax and company law requires it — this applies even after you delete your account, but those records are anonymised so they are no longer linked to you by name.
05 Your rights
Under the PDPA you may ask us to give you a copy of your data, correct anything wrong, stop using it for marketing, or delete your account. You can edit most of it yourself in the app.
To delete your account, use Delete account — it is also linked from the Profile tab in the app. For a copy of your data, or to raise a concern, write to us at the address at the foot of this page. If you are not satisfied with our answer, you may complain to the Personal Data Protection Commissioner.
06 Keeping it safe
Traffic between the app and our servers is encrypted. Passwords are hashed. Access to customer records is limited to staff who need it, and administrative actions are logged. No system is perfectly secure, but if a breach ever affects you we will tell you.
07 Children
The app is not intended for under-18s. A minor should book through a parent or guardian.
08 Changes to this policy
If we change this policy we will update the date at the top, and tell you in the app if the change is significant.