Privacy policy

1. Who provides TeqBook

TeqBook is provided by FORCE ISMAIL, organisation number 932 274 418.

FORCE ISMAIL (organisation number 932 274 418) is the data controller for personal data processed to operate the TeqBook platform (product/trading name: TeqBook).

Jurisdiction: Norway. Privacy contact: support@teqbook.com.

This Privacy Policy is published in English and Norwegian. For people in Norway, the Norwegian text prevails if the versions conflict.

2. Roles (controller and processor)

FORCE ISMAIL is the controller for platform account data, billing and subscription data for the salon's TeqBook subscription, security and abuse-prevention logs, and support communications with us.

FORCE ISMAIL (TeqBook) acts as a processor under a data processing agreement (DPA) with the salon for end-customer booking and CRM data where the salon decides purposes and means (the salon is the controller).

End customers who booked via a salon should normally contact that salon for rights requests about salon-held booking data. We assist the salon as processor where required.

Website visitors on teqbook.com marketing pages are handled under this policy with us as controller for necessary site operation data.

3. Whose data we process

Depending on how you use TeqBook, we may process data about:

• Salon owners and administrators who create or manage accounts.
• Staff members invited to a salon workspace.
• End customers whose bookings or contact details a salon stores in TeqBook (salon as controller).
• Visitors to public marketing, help, and booking pages (technical and security data).

4. Data we collect

We collect personal and business information needed to operate TeqBook. Exact fields depend on features you enable.

• Account data: name, email, role, authentication details, and profile settings.
• Salon data: salon profile, address/contact details, staff details, services, opening hours, and branding assets you upload.
• Booking and CRM data: customer names, contact details, appointment times, booked services, notes, and related history the salon records.
• Billing data: plan, invoices, payment status, and limited payment metadata from Stripe (we do not store full card numbers).
• Communications: support messages and transactional email/SMS content needed to deliver the Service.
• Technical usage data: device/browser info, IP address, logs, security events, and error diagnostics (for example via Sentry with PII minimisation).

5. How and why we process data

We process personal data to provide, secure, bill, and improve TeqBook.

Legal bases under GDPR include performance of a contract, legitimate interests (security, product reliability, limited operational analytics that are not marketing trackers), legal obligations, and consent where required (for example certain optional communications).

• Deliver bookings, calendars, reminders, and operational workflows.
• Authenticate users and protect accounts (including bot checks on owner signup).
• Provide customer support and service communication.
• Maintain security, prevent abuse, and investigate incidents.
• Process subscription billing and accounting records.
• Meet legal, accounting, and compliance obligations.

6. Cookies and similar technologies

We use strictly necessary cookies and similar storage for authentication, security, active salon selection, and basic UI preferences (for example locale).

Cloudflare Turnstile may run on owner signup as a necessary bot check.

Non-essential analytics and marketing trackers (for example Google Analytics) are not enabled for real public traffic until a consent mechanism (CMP) is in place. We do not use such trackers as a substitute for this policy.

Payment flows may set cookies from Stripe when you complete checkout.

7. Sharing, subprocessors and transfers

We only share data with trusted processors required to run the Service, under contractual safeguards.

Typical processors include hosting and database (Supabase, Vercel), email (Resend), payments (Stripe), SMS where enabled (Twilio), error tracking (Sentry), and bot protection on owner signup (Cloudflare Turnstile).

If personal data is transferred outside the EEA/UK, we use appropriate safeguards such as EU Standard Contractual Clauses or an adequacy decision where applicable.

We may disclose data if required by law, court order, or to protect rights, safety, and security.

8. Storage, security and retention

Data is stored in systems with access controls, encryption in transit, and role-based permissions. No method of transmission or storage is perfectly secure; we work to reduce risk continuously.

Retention depends on account status, legal obligations, and business need. Examples: active account data while the subscription/account is active; billing records as required by accounting law; security logs for a limited operational period; deleted accounts according to our account-deletion and cool-off processes.

Salon controllers remain responsible for their own retention instructions for end-customer data where they are controller.

9. Your rights

Depending on applicable law (including GDPR), you may request access, correction, deletion, restriction, data portability, or objection to certain processing, and you may withdraw consent where processing is consent-based.

For platform account and TeqBook-controller data, send requests to support@teqbook.com. We may verify identity before fulfilling a request.

For salon-held booking/CRM data, contact the salon first. We will assist that salon as processor.

You may lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) or another supervisory authority in your country of residence.

10. Children

TeqBook is directed at businesses (salons) and adult account holders. We do not knowingly offer owner accounts to children. If you believe we have collected a child's data inappropriately, contact us and we will take reasonable steps to delete it.

11. Policy updates

We may update this policy to reflect legal, technical, or product changes. The effective date at the top of this page will change when we publish updates. Material changes will be communicated by email or in-product notice where practicable.