Privacy Policy (GDPR Compliant)

1. Introduction

Welcome to YoCheckIn ("we", "us", "our"). We respect your privacy and are committed to protecting your personal data in compliance with the General Data Protection Regulation (EU GDPR).

This Privacy Policy informs you about how we look after your personal data when you visit our website (yocheckin.com), use our SaaS application, and tells you about your privacy rights and how the law protects you.

Data Controller:
YoCheckIn
Carrer Castillejos 322, Local 1, Barcelona, Spain
Email: support@yocheckin.com
Phone: +34 642 805 848

2. The Data We Collect About You

We may collect, use, store and transfer different kinds of personal data about you, including:

• Identity Data: First name, last name, username.
• Contact Data: Email address, telephone numbers, business address.
• Financial & Transaction Data: Subscription history, payment status (processed securely by third-party payment gateways like Mollie; we do not store full credit card details).
• Technical & Usage Data: IP address, browser type, timezone, operating system, and data about how you use our application.
• Client Data (Data Processor): As a SaaS platform, you (the salon/business owner) may upload client data (e.g., your customers' names, phone numbers for SMS/WhatsApp marketing). You act as the Data Controller for your clients' data, and we act as the Data Processor.

3. How We Use Your Data (Legal Basis)

Under the GDPR, we will only use your personal data when the law allows us to. Most commonly, we use it under the following circumstances:

• Performance of Contract: To provide you with your YoCheckIn subscription, manage your account, and deliver services.
• Legitimate Interests: To improve our platform, ensure security, and provide technical support.
• Consent: When you have explicitly agreed to receive marketing communications (you can opt-out at any time).
• Legal Obligation: To comply with tax, accounting, and legal requirements.

4. Data Sharing & Third-Party Processors

We do not sell your personal data. We may share your data with trusted sub-processors necessary for providing our services:

• Payment Processors: Mollie (strictly for handling subscription billing securely).
• Communication APIs: Third-party providers for SMS, WhatsApp, and Email marketing features.
• Cloud Infrastructure: Secure cloud hosting services located within the European Economic Area (EEA).

5. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Upon account deletion, your data and your clients' data will be permanently erased from our active databases within a standard timeframe (usually 30 days), unless required otherwise by law.

6. Your GDPR Data Protection Rights

As a resident of the European Economic Area (EEA), you have specific rights concerning your personal data:

• The Right to Access: Request copies of your personal data.
• The Right to Rectification: Request that we correct any inaccurate information.
• The Right to Erasure ("Right to be Forgotten"): Request that we erase your personal data, under certain conditions.
• The Right to Restrict Processing: Request that we restrict the processing of your data.
• The Right to Object: Object to our processing of your personal data.
• The Right to Data Portability: Request that we transfer the data that we have collected to another organization, or directly to you.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at support@yocheckin.com.

7. Security Measures

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, please also remember that we cannot guarantee that the internet itself is 100% secure.

8. Changes to This Privacy Policy

We keep our privacy policy under regular review. Any changes we make in the future will be posted on this page and, where appropriate, notified to you by email.