Privacy & bookings.
Your appointment
Bookings are confirmed when the booking page shows your appointment details. No card details or online payment are collected. Pay the studio at your appointment using a method agreed with Roxxy.
Use the private link supplied with your booking to cancel or move your appointment. For short-notice changes, contact Roxxy directly.
Treatment prices and durations are shown before booking. Nail art, removals or other extras may require a different service or appointment length; please agree these with Roxxy. No cancellation fee is automatically charged by this app.
Information used for your booking
The studio receives your name, email, optional phone number, treatment, appointment time and any note you choose to leave. This information is used to arrange and manage your appointment, respond to questions and send booking confirmations or reminders. Please do not put medical information in booking notes.
Email reminders relate to your appointment. Optional text reminders are sent only when you select them and the studio has enabled this service. This app does not subscribe you to marketing messages.
Who operates the service
The studio is responsible for its customer booking records. Its legal business identity and privacy contact must be confirmed before launch.
The app uses Cloudflare for hosting and booking storage. If enabled, Resend processes appointment emails and Twilio processes text reminders. The app provider maintains the service for the studio. Before launch, the studio and app provider must confirm their responsibilities, provider agreements, applicable international-transfer arrangements and the final privacy notice.
The private studio account
Roxxy’s separate €5/month app subscription is processed by Stripe. Stripe collects the payment details; this app stores Stripe customer and checkout identifiers, the studio account email, a hashed password and the selected notification email. It does not store card details. A temporary essential setup cookie links the payment to account creation; it expires after seven days. Studio sign-in cookies last up to twelve hours. These subscriptions are separate from client appointments.
Keeping and deleting information
The studio must set and publish its customer-record retention period before launch. The app currently keeps appointment records until the studio deletes them. Authorised studio staff can permanently delete individual appointment records, including associated message records. Any backup-retention requirements must be covered in the final policy.
Contact the studio if you want to ask about, access, correct or delete your information, or to discuss other data-protection rights that may apply. You may also raise a concern with Ireland’s Data Protection Commission.
Cookies and private links
Clients can book without an account. The app uses an essential sign-in cookie for the studio’s private administration area. There are no advertising or analytics cookies in this version. Your private booking link allows changes to your appointment, so keep it to yourself.
This page is a draft implementation notice, not a completed legal policy. Final wording, the lawful basis for processing, retention and business details need review before public launch.