Privacy Policy — Sallony
Effective date: 7 September 2026
Version: 1
Introduction
OmiraTechnology — the operator of the Sallony platform — is committed to protecting its customers' personal data in accordance with the provisions of Egyptian Personal Data Protection Law no. 151 of 2020 and its executive regulations.
This policy explains what data we collect, why we collect it, with whom we share it, and what your rights are in respect of it.
1. Data Controller
The Company: OmiraTechnology, a limited liability company registered in the Arab Republic of Egypt.
2. The Data We Collect and Its Purpose
2.1 Data you create at registration
Name — to identify your account; displayed to the Provider upon booking.
Telephone number — to verify the account and for contact; displayed to the Provider upon booking.
Email address — for contact and account recovery.
Password — stored encrypted in a manner that does not permit its retrieval or reading by us.
Gender — to determine the category of Salons displayed to you; selected once and not amendable.
Country and city — to display Salons within your area.
Profile photograph (optional).
Preferred language.
2.2 Data arising from your use of the Platform
Booking history — the Salon, the Service, the appointment and the status.
Payment and Wallet data — amounts, dates, method of settlement and your balance.
Violation record — late cancellation and non-attendance, in order to apply the published booking policy.
Loyalty point balance and redemption history.
Reviews you write — displayed to other users.
Support tickets and the content of your correspondence with us.
2.3 Technical data
IP address and browser or device type — recorded in the audit log for sensitive operations, for the purposes of security, evidencing transactions and preventing fraud.
The device's notification token, the operating system (Android/iOS), the device name and the application version — in order to send booking notifications to your device.
Date of last sign-in.
2.4 Geographic location
Permission to access your location is requested in order to calculate the distance between you and the Salons and to order them by proximity.
Your location is used momentarily to filter search results only; it is not stored on our servers and is not linked to your account.
Your location is not tracked in the background, and is requested only upon opening a screen that requires it.
The Platform operates fully without this permission, and the effect of refusing it is limited to distances not being displayed.
3. Legal Basis for Processing
Performance of the contract concluded with you: registration, booking and payment data.
Legal obligation: retention of financial and tax records.
Legitimate interest: security, fraud prevention and application of the published booking policy.
Your explicit consent: geographic location and notifications, which you may withdraw at any time.
4. Sharing of Data
4.1 With Providers (Salons)
Upon completion of a Booking, the Salon booked with is given access to your name, your telephone number and the details of your booking. This sharing is necessary in order to fulfil the Booking and it cannot be completed without it.
The Salon is not given access to your email address, nor to your Wallet balance, nor to your booking history with other Salons.
4.2 With technical service providers
The SMS service provider — receives your telephone number and the text of the verification code.
The hosting provider on whose infrastructure the Platform's data is stored.
Payment service providers, where you use a payment method that requires it.
Notification Service Provider — Receives your device code and notification text, and this data may be processed on servers outside the Arab Republic of Egypt.
4.3 With official authorities
We may disclose your data in response to a judicial order or an official request from a competent authority, and within the limits required by law.
4.4 What we do not do
We do not sell your personal data to any party. Nor do we share it for the marketing purposes of third parties.
5. Data Retention Periods
Your account data: for the duration of the account's activity.
After account deletion: your personal data is deleted or rendered non-identifying, save for what must be retained by law.
Financial and transaction records: retained for five years in compliance with the Tax Law and the Commercial Law.
Data subject to a live dispute or claim: until the dispute concludes.
6. Your Rights
Pursuant to Law no. 151 of 2020, you have the right to:
Be informed of the personal data we hold about you.
Access it and obtain a copy of it.
Correct, amend or update it.
Erase your data.
Object to the processing of your data or restrict it.
Withdraw your consent at any time in respect of what is based on consent, without this affecting the lawfulness of processing carried out beforehand.
How to exercise these rights:
From within the application: the account page.
Or by writing to us at: [email protected]
We undertake to respond to your request within thirty (30) days of the date of its receipt.
7. Account Deletion
You may request deletion of your account at any time from within the application or by writing to us.
Upon deletion your personal data is removed, with financial records retained for the period required by law in a form that does not permit your identification wherever that is possible.
Please note that existing Bookings and unsettled financial obligations are settled before deletion is carried out.
8. Data Security
All data is transmitted between your application and our servers over an encrypted connection (HTTPS).
Passwords are stored encrypted using a one-way algorithm, and no one at the Company is able to view them.
Staff access to data is restricted on the basis of what is needed to perform their work.
In the event of a breach that threatens your personal data, we undertake to notify the Personal Data Protection Centre and the affected individuals in accordance with the provisions of the law.
That said, the security of no electronic system can be guaranteed absolutely, and we exercise reasonable care in protecting it.
9. Children
The Platform is not directed at those under eighteen years of age, and we do not knowingly collect their data. If we become aware of an account belonging to a person under this age, we delete their data immediately.
10. Amendment of This Policy
We may amend this policy from time to time. We will notify you of any material amendment through the application or by email before it takes effect.
11. Complaints
If you have a complaint regarding our processing of your data, you may write to us at [email protected].