Privacy Policy

This Privacy Policy explains how OneBeauty ("OneBeauty", "we", "us", "our") collects, uses, and shares information when you visit our marketing website (the "Site"), use the account-service pages we host on the Site for the OneBeauty mobile app (such as password reset), or contact us.

Data controller

OneBeauty is the data controller responsible for the personal information collected through the Site. If you have questions about how your data is handled, see the "Contact" section below.

Information we collect

Information you provide. If you contact us (for example by email), we collect the details you choose to share, such as your name, email address, and the content of your message. If you use the password-reset page hosted on the Site, the credentials you enter are sent directly to the app's account service and are governed by the App Privacy Policy; the Site itself does not store them.

Previously collected waitlist information. Until September 2026, the Site offered a waitlist form that collected salon name, owner name, phone number, and email address. That form has been removed and no new submissions are accepted. Information already submitted is retained under this Policy only for as long as needed for the purposes it was collected for, and you can ask us to delete it at any time (see "Your rights and choices").

Automatically collected information. When you visit the Site, we automatically collect certain technical information, including your IP address, browser type, operating system, device identifiers, referring URL, pages viewed, and the dates and times of your visits through standard server logs and analytics tools.

Cookies and similar technologies

We use cookies and browser local storage to support analytics functionality on the Site. Specifically, our analytics provider (PostHog) may set cookies and use browser local storage to identify returning visitors, measure pageviews, and improve our understanding of how the Site is used.

Most web browsers allow you to control cookies through their settings. You can choose to block or delete cookies; however, doing so may affect how the Site functions.

Analytics and session recording

We use PostHog, a product analytics service, to understand how visitors use the Site. PostHog may collect information such as pages visited, clicks, scroll activity, and session duration.

We may also use session recording features provided by PostHog to replay user interactions with the Site for the purpose of improving usability. When session recording is active, all form input fields are masked to protect the information you enter.

Legal basis for processing

We process your personal information based on the following legal grounds:

• Consent — when you voluntarily share information with us (for example, by contacting us, or previously through the waitlist form).
• Legitimate interests — to operate, secure, and improve the Site, and to understand how visitors interact with it.
• Legal obligation — to comply with applicable laws, regulations, or legal processes.

How we use information

We use the information we collect to:

• Respond to your inquiries and, if you previously joined the waitlist, contact you about OneBeauty.
• Operate, maintain, and improve the Site.
• Analyze usage patterns and improve user experience through analytics and session recording.
• Protect the security and integrity of our services (e.g., rate limiting and abuse prevention).
• Comply with legal obligations and enforce our Terms of Service.

How we share information

We do not sell your personal information. We may share information with the following categories of third-party service providers who help us operate the Site:

• Hosting and backend — infrastructure providers that store and process data on our behalf.
• Analytics — providers that help us understand Site usage (PostHog).
• Email delivery — services that deliver the emails we send you (for example, replies to your inquiries).

These providers are contractually obligated to process information only for the purposes we specify. We may also disclose information if required by law, in response to lawful requests, or to protect our rights, users, and services.

Data retention

We retain personal information only as long as needed for the purposes described above, unless a longer retention period is required or permitted by law. When personal information is no longer needed, we delete or anonymize it.

Data security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/HTTPS), access controls, and rate limiting. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your rights and choices

Depending on where you live, you may have certain rights regarding your personal information, including the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal information.
• Object to or restrict the processing of your data.
• Withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).

To exercise any of these rights, contact us using the details in the "Contact" section below. You can also opt out of marketing communications by using the unsubscribe link included in emails where available.

Children's privacy

The Site is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete it promptly.

International transfers

Your information may be processed in countries other than where you live, including where our service providers operate. Those countries may have different data protection laws. Where required, we take steps to ensure an adequate level of protection for your information through contractual safeguards.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the effective date above. If we make material changes, we will make reasonable efforts to notify you (for example, by posting a notice on the Site).

Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us via our contact channel.

Governing location reference: Azerbaijan.