Privacy policy for a Dubai-operated beauty booking portal.

Who controls the data and when this policy applies

This policy applies to the Zayn website, waitlists, salon join flows, app, and related support channels operated by ZAYNHQ PORTAL in Dubai, United Arab Emirates. It explains how personal data is collected, used, shared, retained, and protected when people interact with Zayn.

Information we collect

• Identity and contact data: name, email address, phone number, account identifiers, and profile details.
• Booking and service data: booking history, selected services, provider choice, service address, scheduling information, support messages, and booking status updates.
• Payment and transaction records: booking totals, cash-on-delivery settlement records, refunds, authorisation references for any separately enabled online payment flow, official IBAN letters, and related payment-partner onboarding references. Zayn does not intentionally store full card numbers entered into third-party payment tools.
• Salon onboarding and trust data: Trade Licenses, Establishment Card or MoA documents, owner Emirates ID front and back scans, home-service permits where applicable, salon finance settlement details, and supporting compliance information submitted by salons or professionals.
• Website waitlist data: the email address, phone number, and consent record submitted through the website forms.
• Platform activity and operational data: searches, page views, booking timing, cancellations, response times, availability signals, and similar usage patterns that help us understand how the marketplace is working.
• Technical and security data: device information, IP or approximate location signals, browser data, app version, logs, fraud indicators, and service analytics used to keep the platform reliable.

Why we process personal data

• To create accounts, manage bookings, send confirmations, process payments, and support cancellations or refunds.
• To support cash-on-delivery bookings, calculate what salons owe to Zayn, record full or partial salon settlements, and process online payments only where separately enabled.
• To review salon onboarding submissions, verify identity, ownership, settlement contact details, and marketplace trust information, and support payment-partner onboarding where needed.
• To answer support requests, protect users, detect fraud, investigate abuse, and keep the platform secure.
• To send waitlist updates, onboarding communications, and launch information when a user has requested that contact through a website or app form.
• To meet legal, accounting, payment, tax, safety, or regulatory obligations that apply to the operation of the portal.

How we improve the platform

• Zayn may use booking, usage, operational, and marketplace data to understand how people interact with the platform and to improve matching between clients and independent salons or professionals.
• This may include reviewing usage patterns, platform activity, and interaction trends to improve service quality, reliability, scheduling, availability, and recommendations.
• We may also look at supply and demand trends across the marketplace to improve service availability and refine provider recommendations.
• These insights are generally used in aggregated or operational ways to improve the platform, support teams, and guide product decisions.
• Zayn may also use this information to detect misuse, fraud, suspicious activity, or violations of platform policies.
• Zayn does not make decisions that materially affect users based solely on automated processing without appropriate human review.

How data may be shared

• With the selected salon or professional: the booking details reasonably needed to deliver the requested service.
• Relevant provider access only: providers receive only the information reasonably needed to deliver the requested service, manage the booking, and provide support.
• With infrastructure providers: hosting, analytics, communications, security, storage, identity verification providers, and other approved service providers acting on our instructions or under their own regulated role. Online payment providers are not used for the current COD-only launch.
• With authorities or dispute handlers: where required for lawful requests, investigations, consumer complaints, fraud prevention, safety, or compliance.
• Within corporate transactions: if the business is restructured, sold, or merged, subject to lawful handling of user data.
• Data sales: Zayn does not sell personal data and uses data internally to operate, improve, and protect the platform.

Some vendors may process data outside the UAE. Where that happens, Zayn aims to use lawful transfer mechanisms and contractual or technical safeguards appropriate to the type of data involved.

Retention, user controls, and contact rights

• Retention: Zayn keeps data only for as long as needed for the purpose collected, plus any period required for legal, accounting, dispute, fraud, payment-provider, or security reasons.
• Waitlists: website launch-list information is kept until launch processing ends, a user withdraws, or the record is no longer needed.
• Account controls: users can update profile details in the product where available and can contact support for deletion or correction requests.
• Consent withdrawal: where contact depends on consent, users may withdraw that consent by contacting support or using the message controls provided.
• Access requests: users may ask for a copy, correction, or deletion review of personal data, subject to any legal exceptions that still require retention.

Security and minimisation

Zayn uses organisational and technical safeguards appropriate for a booking marketplace, including access controls, service-provider restrictions, and logging designed to reduce misuse. No online system is guaranteed to be perfectly secure, so users should also protect their own credentials and devices.