CutnApp is operated by CutnApp. We handle personal data in line with Sri Lankan law, including the Personal Data Protection Act, No. 9 of 2022.
1. Information we collect
From salons and their team members
- name, email address and phone number (we verify the phone number with a one-time code);
- salon details such as business name, address, opening hours, services, prices, logo and photos;
- team member names, roles and work schedules;
- your password, which is stored only in scrambled (hashed) form, never as plain text.
From customers who book with a salon
- name and phone number, and your email address if you give it;
- booking details: the salon, services, staff member, date, time, price and any notes you add;
- reviews and ratings you choose to leave after an appointment.
Payment information
- Salon subscription payments are handled by Payments.lk and Payable. Your card is stored securely by Payable. We keep only the masked card number (for example, the last four digits) and expiry date so we can show them to you.
- Customer payments for bookings are handled by PayHere on behalf of the salon. We record whether a payment succeeded and how much was paid, but we never see or store full card details.
Information collected automatically
- basic technical details such as IP address, browser and device type, kept in server logs for security and troubleshooting;
- if you allow notifications, a device token so we can send booking alerts to your browser or phone.
2. Use of information
We use the information we collect to:
- create and manage bookings, calendars and staff schedules;
- send booking confirmations, reminders, reschedule links, invoices and review requests by SMS, WhatsApp or email;
- process subscription payments and show salons their billing history;
- show salons reports and analytics about their own business;
- provide customer support and respond to questions;
- keep the platform secure, and detect and prevent fraud and misuse;
- improve CutnApp based on how the service is used.
We don’t use customers’ information to market other salons or our own products to them.
4. Salons and their customers
- The salon can see your name, contact details, booking history, notes and reviews for bookings made with them.
- For questions about how a salon uses your information, contact the salon. We will help where we can at support@cutnapp.com.
- Salons must have a lawful reason to collect customer details and must only send messages to customers who expect to hear from them.
5. How long we keep information
We keep information while a salon’s account is active and for as long as it is needed to provide the service. After an account closes, the salon can ask for a data export within 30 days. After that we may delete the information, except records we must keep by law, such as payment and tax records.
6. Data security
We use industry-standard measures to protect personal information from unauthorised access, change, disclosure or loss. These include encrypted connections (HTTPS), hashed passwords, access controls on salon accounts, and card storage by our certified payment processors instead of on our servers.
No method of sending or storing information online is 100% secure, so we can’t guarantee absolute security. If a breach affects your personal information, we will tell you and the relevant authorities as the law requires.
8. Your choices and rights
Under Sri Lankan data protection law, you can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct information that is wrong or incomplete;
- delete your information, or stop or limit how we use it, where the law allows;
- withdraw consent you have given, such as to receive messages.
Email support@cutnapp.com to make a request. We may need to confirm who you are first. Customers can also contact the salon they booked with directly.
9. Changes to the privacy policy
We may update this policy from time to time. We will post changes on this page with a new effective date. For important changes, we will also tell salons by email or in the dashboard at least 14 days before the changes take effect. Please check this page from time to time.
10. Contact us
If you have any questions, concerns or requests about this policy or how we handle your personal information, email support@cutnapp.com. We reply within 14 days. See also our Terms & Conditions and Refund Policy.