1. Who we are
MyKimi is a booking platform for hair salons, barbershops and beauty salons, operated by Kijibato Solutions s.r.o., company ID: 21233624, registered office Švédská 1127/29, 150 00 Prague 5 ("we"). For any question about this policy or your data, contact us at [email protected].
2. Two roles: who is responsible for what
When you book an appointment through a salon's page, the salon is the controller of the data about your booking and the service itself — it decides what is collected and why. MyKimi acts as the processor here: we run the software that stores and transmits this data on the salon's behalf.
MyKimi is the controller of your data when you pay the reservation fee for using the platform or the fee for the "Waiting list" service, and also for the accounts of the salon owners themselves (login, invoicing).
3. What we collect
- Clients booking an appointment: name, phone number, email address; booked services and time; reservation fee transaction data and a record of SMS/email confirmations.
- Salon owners: the account email, business name, company/VAT ID and billing address.
- Account security: for everyone who logs in, we record the login history (when, from which part of the site, and the browser/device type) for security and fraud prevention. We do not record the IP address.
We do not collect this data for advertising and we use no analytics or tracking scripts.
4. Why we process it
To perform the contract between you and the salon (confirming, reminding and scheduling appointments), to perform the contract for use of the booking system (the fee to the platform) and, for salons, to maintain the account. The processing is necessary for the contracts you chose to enter into (Art. 6(1)(b) GDPR).
5. Who else has access
- Neon: (database and storage hosting — EU, Frankfurt region) stores everything listed above.
- SMS and email providers: send the confirmations and reminders you signed up for.
- Comgate: our payment provider processes payments of reservation fees and Waiting list fees.
All of the above are based in the EU. We do not transfer your data outside the EU/EEA.
6. Cookies
We use two cookies, both strictly necessary to run the service — neither requires your consent under the ePrivacy rules, and we use no advertising, analytics or tracking cookies:
- A session cookie that keeps you logged in to your account.
- An authorisation cookie for administrators, used only in our internal operating tools.
7. How long we keep it
If you have not booked an appointment at a salon for 3 years, your name, phone and email are automatically and permanently anonymised. The booking record itself (date, service, amount paid) is kept for accounting, as Czech law requires, but is no longer linked to an identifiable person. You can ask the salon (or us, on its behalf) for earlier erasure.
8. Your rights
Under the GDPR you can ask the relevant salon (or us) for a copy of your data (access), correction of inaccuracies, erasure of data (except accounting records), restriction of its use, or object to it. Send your request to [email protected]. You can also lodge a complaint at any time with the Czech Office for Personal Data Protection (uoou.cz) or your local data protection authority.
9. Changes to this policy
We may update this policy from time to time. We will inform salon owners of significant changes (e.g. engaging a new processor or changing how data is processed) by email or a notice in the administration. For end clients, the version of the policy that is current and shown at the moment they create their booking always applies.