Privacy & Terms
Last updated: February 2026Privacy Policy
At Loxley, we value your privacy and are committed to protecting your personal data. This policy outlines how we collect, use, and safeguard your information in accordance with UK data protection legislation.
1. Data Controller
Loxley ("we", "our", "us") is the data controller responsible for your personal data. For any data protection enquiries, contact us at privacy@theloxley.com.
2. Data We Collect
We collect information necessary to provide our booking services:
- Account Data: Name, email address, password (encrypted)
- Business Data: Salon name, address, services, staff details
- Customer Data: Client names, contact information, appointment history
- Technical Data: Browser type, device info, IP address for security purposes
3. How We Use Your Data
Your data is used solely to operate the booking and business management system. We do not sell your customer lists, business metrics, or personal information to third parties.
4. Third-Party Services
We use the following trusted third-party services to operate our platform:
- Supabase: Database hosting and authentication (EU/UK compliant)
- Google OAuth: Optional sign-in method
- Stripe: Payment processing (PCI DSS compliant) — coming soon
5. Data Security
We employ industry-standard encryption (TLS/SSL), row-level security policies, and secure authentication to protect your data. Passwords are hashed and never stored in plain text.
6. Data Retention
We retain your data for as long as your account is active. Upon account deletion, your data will be permanently removed within 30 days, unless required by law.
GDPR & Data Protection
Loxley complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. As a user, you have the following rights:
Right of Access
Request a copy of all personal data we hold about you.
Right to Rectification
Request correction of inaccurate personal data we hold.
Right to Erasure
Request deletion of your data — the "right to be forgotten".
Right to Data Portability
Export your data in a machine-readable format (CSV) at any time.
To exercise any of these rights, email privacy@theloxley.com. We will respond within 30 days.
Lawful Basis for Processing
We process your data based on:
- Contract: To provide the booking services you signed up for
- Legitimate Interest: To improve our service and prevent fraud
- Consent: For optional features like marketing emails
Terms of Service
By using Loxley, you agree to the following terms and conditions.
1. Acceptance of Terms
By accessing our website or using our services, you agree to be bound by these Terms. If you disagree with any part, you may not use our services.
2. Account Registration
You must provide accurate information when creating an account. You are responsible for maintaining the security of your credentials and for all activities under your account.
3. Free & Premium Plans
Loxley offers a free tier with core features. Premium features require a paid subscription. We reserve the right to modify pricing with 30 days' notice.
4. Service Availability
While we strive for 99.9% uptime, we do not guarantee uninterrupted service. We reserve the right to perform maintenance that may temporarily affect availability.
5. Acceptable Use
You agree not to misuse the service, including but not limited to: attempting to access other users' data, overloading the system, or using the platform for unlawful purposes.
6. Termination
You may cancel your account at any time. We reserve the right to suspend or terminate accounts that violate these terms. Upon termination, your data will be deleted within 30 days.
7. Limitation of Liability
Loxley shall not be liable for any indirect, incidental, or consequential damages resulting from the use or inability to use our services. Our total liability shall not exceed the amount you paid us in the preceding 12 months.
8. Governing Law
These terms are governed by the laws of England and Wales. Any disputes shall be subject to the exclusive jurisdiction of the courts of England and Wales.