Privacy Policy

Who this policy is for

This policy covers two different groups of people, and different parts apply to each.

Salons — business owners and their staff who sign up for Breela and use it to run their business. If you created a Breela account or were added to one as a staff member, this is you.

Clients — people who book appointments at a salon that uses Breela. You may never have visited our website. Your details are in Breela because your salon put them there, or because you booked through a link they gave you.

If you are a client, the short version is: your salon decides what happens to your information, and we hold it for them. If you want your details changed or removed, ask your salon first. You can also contact us directly and we will help — see Your rights below.

If you are a salon

What we collect

When you sign up: your name, your salon's name, email address, and password. Passwords are stored hashed — we never see or store the plain text.

As you set up your salon: business phone number, address, city, a salon code, a web address for your public booking page, logo and photos, opening hours, services and prices, and staff records including their names and phone numbers.

When you connect payments: we pass your bank or mobile money details directly to Paystack, our payment provider, which returns an account reference we store. We do not store your full bank account or mobile money number ourselves, and we never hold your money — payments go from your client to you.

When you subscribe: your plan, billing status, payment method type, and invoice history. Card and mobile money details are handled entirely by Paystack.

As you use Breela: appointments, transactions, stock levels, and the records you create. Staff login attempts are logged, and we keep short-lived one-time codes to verify staff phone numbers.

Why we use it

To give you an account and keep it secure, to run the features you use, to take subscription payments, to send you notifications you have switched on, and to fix problems when something breaks.

We do not sell your information. We do not use it for advertising.

If you are a client of a salon

What the salon holds about you

Your name, phone number, and — if you gave one — your email address. Your appointment history with that salon, what you paid, and any notes your salon added, including treatment notes where the salon uses that feature.

Your salon controls all of this. They decide what to record, and they can change or delete it at any time.

What we do with it

We store it securely, we show it back to your salon, and we use it to send you messages your salon has chosen to send — appointment confirmations, reminders, receipts, and gift card notifications. These come by WhatsApp, email, or both, depending on what your salon has set up and what contact details they have for you.

The WhatsApp assistant

Some salons switch on an automated assistant that replies to WhatsApp messages sent to the salon's number. Where a salon has enabled it:

Your messages are sent to Google to generate a reply. We use Google's Gemini service for this. Your message text, and enough context about the salon's services and availability to answer you, leaves our systems and goes to Google.

We tell you this plainly because it matters. If you would rather not have your messages processed this way, ask your salon to reply to you manually, or call them instead of messaging.

A conversation can be handed over to a human at the salon at any time, and the salon can see the full conversation.

Who else sees your information

Breela runs on services provided by other companies. Each of them sees only what they need to do their job.

We do not sell personal information to anyone, and we do not share it with anyone for their own marketing.

We may disclose information if the law requires it, or to protect someone's safety.

If Saltwater Digital Ltd is ever sold or merged, information may transfer to the new owner. We would tell salons before that happened.

Your information leaves Ghana

Our database and hosting are in the United Kingdom, and our messaging, payment, and AI providers operate internationally. Ghana's Data Protection Act, 2012 allows this where the receiving country provides adequate protection, and we choose providers on that basis.

How long we keep things

The six-year rule is an exception we cannot waive. If you ask us to delete a transaction record, we will refuse for that reason and tell you so. Everything else we can delete.

The 90-day window after an account closes exists so a salon that cancels by mistake, or changes its mind, does not lose its business records permanently.

Keeping information safe

Every salon's data is separated from every other salon's, and that separation is enforced on every request rather than assumed.

Staff sign in with a one-time code sent to their phone. Codes expire after five minutes, can only be used once, and both the number of codes requested and the number of guesses allowed are limited.

Traffic to and from Breela is encrypted. Passwords are hashed. Payment card and mobile money details never touch our systems — they go directly to Paystack.

No system is perfectly secure. If a breach affects your information, we will tell affected salons and, where required, the Data Protection Commission.

Your rights

Under Ghana's Data Protection Act, 2012 you can ask us to:

• Tell you what we hold about you
• Correct it if it is wrong
• Delete it — subject to the six-year rule on financial records
• Stop sending you messages
• Give you a copy of the information you gave us

Salons: email support@saltwatergh.com from the address on your account. Some of this you can do yourself in Settings.

Clients: ask your salon first — they can change or delete your details directly and will usually be faster. You can also email us at support@saltwatergh.com. We will need to check with your salon before making changes to records they control, and we will tell you what we have done.

To stop receiving WhatsApp messages, reply STOP to the salon's number, or ask the salon to remove your number. To stop emails, use the unsubscribe link or ask your salon.

We aim to respond within 30 days.

Children

Breela is for businesses and is not intended for children. We do not knowingly collect information from anyone under 18 signing up as a salon.

A salon may book an appointment for a child client. Where that happens, the salon is responsible for having the parent's or guardian's consent, and only the details needed for the appointment should be recorded.

Complaints

If you are unhappy with how we have handled your information, email support@saltwatergh.com and we will try to put it right.

You can also complain to Ghana's Data Protection Commission, which regulates how organisations handle personal information in Ghana.

Changes to this policy

We will update this page when our practices change, and change the date at the top. If a change materially affects how we handle personal information, we will notify salons by email before it takes effect.

Contact