Privacy Policy
Last updated: 17 August 2026
Who we are
Hathly ("we") is operated by Step Bros Ltd, a company registered in England and Wales (company no. 16231004, registered office: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ). Hathly provides a booking diary for salons and barbers at hathly.com. For the account details of the salons who sign up, we are the data controller. For the client records a salon keeps in its diary (their customers' names, phone numbers, appointment history and notes), the salon is the data controller and Hathly is a data processor acting on the salon's instructions.
What we collect
- Salon account data: business name, email address, a securely hashed password, and billing status.
- Diary data entered by the salon: client names, phone numbers, email addresses, appointment details, notes and colour formulas. Each salon's diary lives in its own isolated database, and personal fields are encrypted at field level (AES-256-GCM) before they are stored.
- Booking-page data: if you book an appointment through a salon's public booking link, the name and contact details you enter go into that salon's diary only.
- Technical data: standard server logs (IP address, request time) kept briefly for security and troubleshooting. We do not use advertising trackers or analytics cookies; the only cookie is the session cookie that keeps a salon signed in.
How we use it
To run the service a salon has asked for: showing their diary, sending appointment reminders and booking messages on their behalf, taking subscription payments, and responding to support requests. We do not sell or share personal data with anyone for marketing. Ever.
Who helps us run Hathly
We use a small number of processors to operate the service: Hetzner Online GmbH (server hosting, Germany/EU), Stripe (subscription payments — Hathly never sees or stores card numbers), and our transactional email provider (delivery of reminders, booking confirmations and password resets). Each only receives what it needs to do its job.
Consent forms and health information
Tattoo studios, piercers and beauty salons can ask clients to complete a health questionnaire and sign a consent form before an appointment. Those answers, the wording agreed to, and the signature are stored encrypted in that business's own database, and the business is the data controller for them. Because a consent record is only useful if it can be relied on later, we also record the date and time it was signed, the IP address it was signed from and the browser used. Health information is special category data under UK GDPR and is never used for anything other than the appointment it was given for — it is not analysed, shared or used for marketing. Reference pictures a client sends before an appointment are stored the same way. To have any of it removed, contact the business directly.
Messages sent on a salon's behalf
Salons can send appointment reminders and occasional offers to their own clients. Those messages come from the salon, using contact details the client gave the salon — Hathly only carries them. Every promotional message contains a one-tap link that removes that person from the salon's future messages permanently; reminders about an appointment they have actually booked are not marketing and continue. A salon can also mark a client as "do not message" from inside the app.
How long we keep it
Salon and diary data are kept while the account is active. If a salon deletes its account, its entire diary database is permanently deleted. Encrypted backups are kept for 14 days and then removed. If you are a salon's client and want your details removed, contact the salon directly — it controls its own diary — and we will support any deletion it asks us to carry out.
Your rights
Under UK GDPR you can ask for access to, correction of, or deletion of your personal data, and you can complain to the ICO (ico.org.uk). Salons can export their client list from inside the app at any time and can delete their account — including every client record — from the app's settings.
Contact
Questions about privacy: email support@hathly.com.