Privacy Policy

For shop owners' account data, the data controller is Loucas Soteriou, Cyprus. For customer data a shop collects through TrimHQ (bookings, contact details, service notes), the shop is the controller and we act as its processor.

• Account data (name, business name, email, phone, country, password stored hashed) — to create your account and provide the service.
• Business data (services, team, appointments, clients, expenses) — to provide the service.
• Customer booking data (name, phone, email, service, time) — on the shop's behalf.
• Support and contact-form messages — for customer support.
• Technical data (IP address, device identifiers, logs) — for security and fraud prevention.

Performance of a contract (providing the service), legitimate interests (security, product improvement), legal obligation (tax and accounting) and, where required, consent. We do not sell personal data.

• Service providers (hosting, database, email delivery) under data processing agreements.
• Paddle.com, as Merchant of Record, for the sale of our product, subscription management, payments, tax compliance and invoicing. We never receive or store card numbers.
• Professional advisers (legal, accounting).
• Authorities where required by law.

Where data leaves the EU/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

We keep data while your account is active. After a deletion request it is deleted or anonymised after a 30-day grace period, unless the law requires longer retention (for example invoices).

You have the right to access, rectification, erasure, restriction, portability, objection and to withdraw consent. We respond within one month. You can complain to the Commissioner for Personal Data Protection (Cyprus) or the Hellenic Data Protection Authority (Greece).

We use appropriate technical and organisational measures, including encryption in transit, access controls and per-account data separation.

We use only essential cookies and local storage for signing in, language preference and running the app. We do not use advertising cookies.

For privacy questions, use our contact page.