Privacy and security
What to tell a client who asks where their data is kept.
Whose data it is
Your clients' data belongs to you. The program holds and processes it only so that you can work. It is not sold, not passed on for advertising and not used for anyone else's mailings.
What you can show a client
Three public pages are on the site: Security — what protects the data, Privacy Policy — what is collected and why, Terms — the conditions of use. The links are at the bottom of kaizerbooking.com.
The protection in short
- Every salon has its own separate database. No other salon can see it.
- Everything travels over an encrypted connection; the page will not open without it.
- Passwords are stored so that they cannot be read, even with access to the database.
- Five wrong tries close the door for 15 minutes.
- Card numbers are never typed in and never stored — only the card brand and the last four digits.
- Every night a backup of the database and the files is taken and kept for 30 days.
What depends on you
- Switch on two-step login under Settings and Security: after the password a code comes to your e-mail.
- Open to each member of staff only the sections they need, and close the access as soon as they leave.
- Do not hand the shared guest password to people who do not need to look.
- Switch on the automatic clean-up of the e-mail and SMS journals so old letters with phone numbers do not pile up.
- Export the client base to Excel if you want a copy of your own.
If a client asks for their data to be deleted
Open the client card and delete it. If the client wants written confirmation, or you are unsure, write to support and we will help.
Action journal
Under Settings and Action journal you can see who changed what and when: clients, appointments, payments, settings, rights, plus every login and failed login. Filter by date, staff member and kind of event, or search by a word. Kept for a year. Only the owner sees it.
When a client asks to export or delete their data
Open the client card. Download client data saves everything about them as one file: the card, appointments, payments, documents, e-mails and SMS, form answers. Delete for good wipes the card, photos, documents, letters and messages and removes the name and contacts from every appointment. Report totals stay. It cannot be undone, so export first. Both buttons are visible only to the owner.
Documents for clients and inspectors
At the bottom of the site: Privacy Policy, Terms for salon clients (linked from the booking page and the request form), GDPR and data processing agreement for clients from Europe and Canada, Your privacy choices about cookies and mailings. Send any of them to a client who asks where their data is kept.
Two-step sign-in for the owner
For the owner's account the code from the e-mail is always required and cannot be switched off: that account opens everything. After the password a six-digit code arrives by e-mail; a confirmed device is remembered for 30 days, so the code is typed about once a month. Keep the address under Settings and Security current. Staff can switch the second step on for themselves in the same place.
Inside the program the same article is under Help.