Privacy and POPIA
MiSalon is made by Silverlion Technologies (Pty) Ltd. This says, in plain words, what we do with information in MiSalon. The Protection of Personal Information Act (POPIA) is the South African law behind it; Namibian salons are covered by the same promises.
Who holds what
Your salon is the responsible party for your clients' information: it is yours, you decide what happens to it. We are the operator: we keep it safe and only do what you ask with it. We never sell it, and we never use your client list for our own marketing.
What we keep
- About the salon: the business name, address, phone, email, VAT and registration numbers, banking reference and your logo.
- About the people who sign in: name, email, cell number, the role you gave them, and a password that is stored scrambled, never in plain text.
- About your clients: what you put in, which is usually name, cell number, email, visits, services, colour formulas, allergies, patch tests, notes and consent.
- About the money: sales, payments, refunds, tips, commission, stock, suppliers and expenses.
- To keep it working: a record of who changed what and when, sign-in attempts, and the internet address a request came from.
We do not keep card numbers. Card payments happen at PayFast, Yoco or Ozow with your own account, and they hold the card details.
Where it is kept
On servers in South Africa. Backups stay in South Africa. Passwords are scrambled, secrets such as your PayFast key are encrypted, and everything travels over an encrypted connection.
So the app keeps working through power cuts and bad signal, a copy of the day's diary, stock and anything still waiting to send is kept on the device. It is wiped when you sign out.
Who may see it
Only the people you give a login, and only as much as their role allows: a junior sees no money, a stylist sees no settings. Our support team can look at your salon's information only to fix something you have asked us to fix, and every look is logged.
Messages to clients
A reminder about a booking a client made is part of the service. Anything that sells something — a special, a birthday message, a "we miss you" — only goes to clients who ticked the box to say yes, and every one of those carries a way to stop them. A client can tell you to stop at any time, and you switch it off in the client's record.
How long we keep it
While you use MiSalon, and for as long as the law says you must keep records afterwards: five years for anything SARS may ask about. If you close your salon in the app, the booking page stops straight away and everything is deleted for good after 30 days.
Your rights, and your clients' rights
- Ask what is held, and get a copy. You can download everything yourself, any time, from inside the app.
- Fix anything that is wrong.
- Ask for a client to be forgotten: the app has a button for it, which wipes the client's personal details but keeps the money records the law requires.
- Object to marketing at any time.
- Complain to us at privacy@misalon.co.za, and to the Information Regulator of South Africa if we do not put it right.
If something goes wrong
If information is lost or reaches someone it should not have, we tell the affected salons and the Information Regulator as soon as we know, and we say exactly what happened.
Cookies
This website sets no cookies and runs no trackers. The app keeps your sign-in on your own device so you do not have to type your password every time.
Who to contact
Silverlion Technologies (Pty) Ltd, information officer: privacy@misalon.co.za. Help with the app: help@misalon.co.za.
This is written to be understood. It is not legal advice, and your own attorney should check it against how your salon works before you rely on it.