Privacy policy
1. Data controller
In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR), we inform you:
- Controller: Icaro Nutrition SCP
- Tax ID: J67511840
- Address: Calle Entença, 134, Local 1, 08015 Barcelona, Spain
- Email: beautycalendar.pro@gmail.com
2. Personal data we collect
BeautyCalendar.pro may collect the following personal data:
- Registration data: First name, surname, email, phone, password (encrypted)
- Billing data: Address, tax ID, payment details (processed by Stripe; we do not store card numbers)
- Directory ads: Trading name, city, optional address, photo, website and, if provided, booking link, Instagram, phone and WhatsApp. The billing email is not published.
- BeautyCalendar reviews: rating, comment and first name of the client who reviews an attended appointment (no public email or phone)
- Browsing data: IP address, cookies, platform usage data
- Approximate location (optional): Only if you tap “Near me” in the directory. It is rounded (~100 m) for that search and is not stored in the database. Server logs may keep the URL of that visit for the usual log period.
- End-client data: If you are a professional using our platform, the data of your clients that you enter in the system
- Preferred language (`preferred_locale`): Language preference of the client or staff for the interface, emails and WhatsApp. Basis: performance of the contract and legitimate interest in communicating in a language they understand. It is stored on the profile.
3. Purpose of processing
Personal data is used to:
- Manage registration and access to the platform
- Process payments for subscriptions and services
- Send service messages (reminders, notifications)
- Improve the user experience and platform features
- Show nearby centres in the directory when the visitor asks (“Near me”)
- Publish on beautycalendar.pro/centros the profiles of centres with a BeautyCalendar account and ads from external centres that have purchased and consented
- Moderate ads and reviews (including notices sent to beautycalendar.pro@gmail.com)
- Meet legal obligations (invoicing, accounting)
- Send commercial messages (only with prior consent)
4. Legal basis
Processing of your data is based on:
- Performance of a contract: To provide the services purchased (SaaS or a directory ad)
- Consent: To send commercial messages, to use the device location for “Near me”, and to publish the ad (name, city, photo and contact channels you provide)
- Legal obligation: To meet tax and accounting obligations
- Legitimate interest: To improve our services and security
5. Data retention
Personal data will be kept:
- For the duration of the contract
- After the SaaS is cancelled, account data and data entered in the panel are kept in case the professional wants to recover the account. BeautyCalendar reserves the right to delete them at any time. The centre is responsible for downloading consents and legal documents before cancelling
- For the legally required periods (6 years for tax data)
- Until the data subject requests erasure, unless the law requires us to keep them
- Ads: the listing is removed from public view immediately if there is non-payment, cancellation or rejection. We keep the record (including the billing email) for as long as needed for invoicing, claims and tax obligations
6. Recipients
Your data may be shared with:
- Stripe: Payment processing. This may involve transfers outside the EEA with the safeguards of article 46 GDPR (standard contractual clauses or others)
- Cloudinary: Image storage (including the ad photo, if uploaded)
- Firebase: Authentication and notifications for SaaS accounts
- Render: Platform hosting
- OpenStreetMap Nominatim: Geocoding of the public address of the centre or the ad (not the visitor’s location) for the directory map
- Public authorities: When there is a legal obligation
7. Your rights
You may exercise the following rights:
- Access: Know what data we hold about you
- Rectification: Correct inaccurate data
- Erasure: Ask us to delete your data
- Objection: Object to the processing of your data
- Restriction: Ask us to restrict processing
- Portability: Receive your data in a structured format
- Withdrawal of consent: Withdraw consent at any time
To exercise these rights, email beautycalendar.pro@gmail.com attaching a copy of your ID.
8. Complaints
If you believe the processing of your personal data breaches the law, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
9. Security
BeautyCalendar.pro has adopted technical and organisational security measures to protect your personal data against unauthorised access, loss or alteration. All passwords are stored encrypted and communications use HTTPS.
10. Minors
BeautyCalendar.pro is not directed at anyone under 18. If we detect that a minor has provided personal data, we will delete it immediately.
11. Centre directory and ads
The public directory (beautycalendar.pro/centros) shows real businesses. There are two different situations:
- Centres with a BeautyCalendar account: the trading name, city, service types, price from, logo, BeautyCalendar reviews (first name, rating and comment) and the booking link at beautycalendar.pro/{slug} may appear. The professional can hide their centre from the directory in the panel. The visitor books on BeautyCalendar, not on the salon’s own domain.
- Ads for external centres: un negocio sin cuenta SaaS puede pagar una suscripción de 9,90 €/mes (más IVA según el país de facturación) para aparecer etiquetado como Ad. The data they submit and consent to is published: trading name, city, photo, website and, if filled in, external booking, Instagram, WhatsApp and phone. The billing email and payment details are not shown. There is no diary or booking on BeautyCalendar.
Publishing an ad requires express consent on the form. You can withdraw the listing and cancel the charge with the management link we send by email (secret token; we do not index that page). You can also exercise your GDPR rights at beautycalendar.pro@gmail.com.
Ads are reviewed before they are published. Non-payment, cancellation or a moderation rejection: the ad is removed from the list. Ads are not secretly mixed into the ranking of platform centres.
“Near me” only uses the visitor’s location for that search, rounded, and we do not store it.
12. Changes
We reserve the right to change this privacy policy. Changes will be communicated in good time through the platform or by email.
Last updated: September 2026
Back to home