Privacy Policy

Last updated 22 October 2026.

This policy explains how WeDoAnyNail ("we", "us"), the company behind WeDoAnyNail, uses personal data when you visit wedoanynail.co.uk or our guides at docs.wedoanynail.co.uk, sign up, run your salon on WeDoAnyNail or contact us.

Who is responsible

For the data described in this policy, the controller is WeDoAnyNail. You can contact us at [email protected].

Are you a client of a salon? When you book with a salon that uses WeDoAnyNail, the salon is responsible for your data, and we only process it on the salon's behalf. Please read the privacy policy on the salon's booking page, and contact the salon to use your rights. If you contact us instead, we will pass your request on to the salon.

What we collect and why

Your account and salon

Your email address; your password, stored only as a salted hash; your name and mobile number if you give them; the salon details you enter (salon name, address, phone, contact email, company name, VAT number); your plan and its status; and records of when you accepted our terms (version, time and IP address). We use them to provide the Service under our contract with you (Article 6(1)(b) UK GDPR / GDPR). We keep the acceptance records so that we can prove our agreement (our legitimate interest, Article 6(1)(f)).

Payments

Payments are handled by Stripe. We receive your Stripe customer and subscription references and your plan and payment status, but never your full card details. We keep invoices and payment records to meet our tax and accounting duties (Article 6(1)(c)).

Emails

We send you the emails the Service needs, such as confirming your email address, password resets, billing notices and important changes. If you write to us, we use your message and contact details to reply (Article 6(1)(b) or (f)). We only send marketing emails if you have agreed or the law otherwise allows it, and you can opt out at any time.

Security, logs and error reports

When you use our websites, our servers record technical data such as your IP address, the time and the pages requested. We use it to keep the Service secure, prevent abuse (for example by limiting repeated sign-in and sign-up attempts) and fix problems (Article 6(1)(f)). If an error occurs, a report is sent to our error-monitoring provider, Sentry. It contains technical details of the request and can occasionally include personal data that was part of it.

Reports about content

If you report content on WeDoAnyNail, for example a photo you believe was copied, we use your name, email address and the details in your report to assess it, decide what to do, tell you the outcome and, where needed, tell the salon concerned, which may see your name if the report is about your rights (Article 6(1)(c) and (f)). If the law requires it, we pass reports to the authorities.

The SMS gateway app

If you install our gateway app on your salon's phone, we store the staff account it signs in with and a push token, so that we can wake the app through Google Firebase Cloud Messaging to send your texts.

Who receives your data

• Stripe, to take payments and manage subscriptions.
• Sentry (Functional Software, Inc.), for error monitoring.
• Google (Firebase Cloud Messaging), to send push messages to the gateway app.
• Our email delivery provider, to send our emails.
• Professional advisers, insurers, and authorities or courts where the law requires it or where it is needed to establish or defend legal claims.
• A buyer or successor if we sell or reorganise our business, under the same protections.

We do not sell personal data and do not use it for advertising.

Where your data is processed

Our servers are in the United Kingdom. Stripe, Sentry and Google may process data in the United States and other countries. Where personal data leaves the UK or the EEA, we rely on adequacy regulations or decisions, including the EU-US Data Privacy Framework and its UK Extension where the recipient is certified, or on standard contractual clauses (the EU Standard Contractual Clauses with the UK Addendum, or the UK International Data Transfer Agreement).

How long we keep it

• Account and salon data: while your account is open and for 30 days after it ends, so that you can ask for an export (90 days after an unpaid trial ends). After that we delete it.
• Records of accepting our terms: while your account exists and for six years after it ends, to be able to prove our agreement.
• Invoices and payment records: six years after the end of the financial year they relate to, as UK tax law requires.
• Web server logs with IP addresses: 14 days.
• Error reports: deleted automatically by Sentry after at most 90 days.
• Emails with you: as long as needed to deal with your request and any follow-up.
• Reports about content and our decisions on them: three years after the decision, to deal with objections and claims.

Your rights

You can ask for access to your data and a copy of it, and ask us to correct or delete it, to restrict its use or to transfer it to you or another provider. Where we rely on our legitimate interests, you can object, and you can always object to marketing. Some rights are limited by law, for example where we must keep tax records. Contact us at [email protected]. We will reply within one month.

Complaints

Please complain to us first at [email protected]. We will acknowledge your complaint within 30 days and tell you the outcome. You can also complain to the UK Information Commission (ICO) at ico.org.uk or, if you live or work in the EU, to the data protection authority there.

Cookies

Our websites only use cookies that are strictly necessary: sessionid keeps you signed in (until you log out, at most two weeks), csrftoken protects our forms against misuse, messages shows a short confirmation after an action and is then deleted, and django_language remembers the language you chose in the language menu (one year). Our guides site may store your light or dark theme choice in your browser. We do not use analytics or advertising cookies.

Children

WeDoAnyNail is a service for businesses and is not intended for children.

Changes

We will update this policy when the way we use personal data changes, and show the date at the top. We will tell account holders about significant changes by email.