Privacy Policy

This Privacy Policy explains how OneBeauty ("OneBeauty", "we", "us", "our") collects, uses, and shares information when you visit our marketing website (the "Site") and submit interest (for example, joining a waitlist).

Data controller

OneBeauty is the data controller responsible for the personal information collected through the Site. If you have questions about how your data is handled, see the "Contact" section below.

Information we collect

Information you provide. When you fill out a form on the Site (such as our waitlist registration), we collect the information you submit, which may include: salon name, owner name, phone number, and email address.

Automatically collected information. When you visit the Site, we automatically collect certain technical information, including your IP address, browser type, operating system, device identifiers, referring URL, pages viewed, and the dates and times of your visits through standard server logs and analytics tools.

Cookies and similar technologies

We use cookies and browser local storage to support analytics functionality on the Site. Specifically, our analytics provider (PostHog) may set cookies and use browser local storage to identify returning visitors, measure pageviews, and improve our understanding of how the Site is used.

Most web browsers allow you to control cookies through their settings. You can choose to block or delete cookies; however, doing so may affect how the Site functions.

Analytics and session recording

We use PostHog, a product analytics service, to understand how visitors use the Site. PostHog may collect information such as pages visited, clicks, scroll activity, and session duration.

We may also use session recording features provided by PostHog to replay user interactions with the Site for the purpose of improving usability. When session recording is active, all form input fields are masked to protect the information you enter.

Legal basis for processing

We process your personal information based on the following legal grounds:

• Consent — when you voluntarily submit your information through a form (e.g., the waitlist registration).
• Legitimate interests — to operate, secure, and improve the Site, and to understand how visitors interact with it.
• Legal obligation — to comply with applicable laws, regulations, or legal processes.

How we use information

We use the information we collect to:

• Respond to your request and contact you about early access or product updates.
• Send you a confirmation or welcome email after registration.
• Operate, maintain, and improve the Site.
• Analyze usage patterns and improve user experience through analytics and session recording.
• Protect the security and integrity of our services (e.g., rate limiting and abuse prevention).
• Comply with legal obligations and enforce our Terms of Service.

How we share information

We do not sell your personal information. We may share information with the following categories of third-party service providers who help us operate the Site:

• Hosting and backend — infrastructure providers that store and process data on our behalf.
• Analytics — providers that help us understand Site usage (PostHog).
• Email delivery — services that send transactional and informational emails on our behalf.

These providers are contractually obligated to process information only for the purposes we specify. We may also disclose information if required by law, in response to lawful requests, or to protect our rights, users, and services.

Data retention

We retain personal information only as long as needed for the purposes described above, unless a longer retention period is required or permitted by law. When personal information is no longer needed, we delete or anonymize it.

Data security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/HTTPS), access controls, and rate limiting. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your rights and choices

Depending on where you live, you may have certain rights regarding your personal information, including the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal information.
• Object to or restrict the processing of your data.
• Withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).

To exercise any of these rights, contact us using the details in the "Contact" section below. You can also opt out of marketing communications by using the unsubscribe link included in emails where available.

Children's privacy

The Site is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete it promptly.

International transfers

Your information may be processed in countries other than where you live, including where our service providers operate. Those countries may have different data protection laws. Where required, we take steps to ensure an adequate level of protection for your information through contractual safeguards.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the effective date above. If we make material changes, we will make reasonable efforts to notify you (for example, by posting a notice on the Site).

Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us via our contact channel.

Governing location reference: Azerbaijan.