Booking privacy notice

Who we are

Haku, a beauty salon with two branches in Dublin: Haku Ranelagh, 1st Floor, 13 Ranelagh, Dublin 6, D06 V0C1, and Haku Blackrock, 21 Main Street, Blackrock, Co. Dublin, A94 X0R1. For anything about your data, email info@haku.ie, or call Haku Blackrock on 01 444 1471.

What we keep when you book online

Your first name, surname, mobile and email, and the treatment, extras, day and time you choose.

Whether you ticked the box for Haku news. It is never ticked for you.

If you ask us to email you when your next head spa is due: that you asked, when, and the sentence you agreed to.

What happened to the booking: when it was made, whether the deposit came through, and whether it was cancelled or moved.

We don't see or keep your card details. You pay the deposit on our booking system's own secure payment page, run by Phorest.

While you pay, your details stay in this browser tab, so you don't have to type them again if you need to choose another time. They are cleared when your booking is confirmed or released, and when you close the tab.

Why, and on what basis

To make and manage your booking: finding or creating your client record, booking your time, taking the deposit, and emailing your confirmation. The basis is our contract with you. Without these details we can't take the booking.

To keep online booking fair, for example at most two online bookings a day for one email or one mobile. For this we keep a scrambled code, never your email, number or internet address itself, for 2 days at most. The basis is our legitimate interest in keeping times free for real clients.

To understand where online booking works and where it doesn't: which steps people reach. This uses a random code that lives only while the page is open. No cookie, and nothing that identifies you. The basis is our legitimate interest in improving the service.

Haku news, and the "next head spa due" email: only if you ask for them. The basis is your consent, which you can withdraw at any time from the link in any such email.

Who handles it for us

Phorest, our salon booking system, holds your client record and your booking, and runs the payment page.

Supabase, in Ireland, runs our own database. MailerSend sends our emails. Vercel hosts this website and counts page visits, without cookies.

Sentry receives error reports from the website, with email addresses, phone numbers and identifying codes removed first.

Google Analytics and Google Ads set cookies only if you accept them. Until you do, Google receives only cookieless signals, under its Consent Mode.

Each handles your details only on our instructions. We never share or sell them.

How long we keep it

Your client record and bookings in Phorest: for as long as you're a client of the salon.

Our own record of each online booking: 12 months after your visit, or until a "next head spa due" email you asked for has been sent.

The record of the booking emails we sent you: 12 months.

The steps record (no personal details): 13 months.

The fairness codes: 2 days.

Our booking system's own audit trail of each booking attempt holds the booking system's reference numbers and times, no name or contact details, and is kept as long as the booking.

Your rights

You can ask us for a copy of what we hold about you, or to correct or delete it. You can withdraw any consent at any time, which doesn't affect anything before you did.

If you're unhappy with how we've handled your data, you can complain to the Data Protection Commission at dataprotection.ie.