Introduction

At Traya Beauty Salon (referred to as “Traya“, “we“, “us” and “our“), we are committed to protecting the privacy of our users. If you are in the Qatar, we are the data controller, unless otherwise stated. Please read the following privacy policy that explains how we collect, manage and protect your personal information.

This is the Privacy (and Cookies) Notice (“Notice“) for the website www.traya.qa, and all Traya affiliate sites (“Sites“), or our applications (“Apps“) (together “Services“).

Contacting us

If you have any questions, comments and requests regarding this Notice you can get in touch with us via our Contact Us page, or via email at contact@traya.qa.

What information do we collect & how do we use it?

This Privacy Notice will apply to you if:

• You visit and browse our Sites and Apps.
• You order products from or book appointments with us (we’ll refer to you as a “Client“).
• You are self-employed and/or you work for a business on the Fresha platform (we’ll refer to you and/or the business as a “Partner“).

We collect information about you for specific purposes and only if permitted under data protection law. Each section below outlines the reasons for collecting this information and explains each one under ‘What do each of these legal reasons mean?’. 

If you visit our services

We use your information to provide you with our Services. If you visit any of our Services, whether you’re just browsing or you have an account, we will automatically collect information from you each time you use our Sites. This includes technical information, information about your visit and (if you opt-in) location data:

Technical information
This may include your phone number, Internet Protocol (IP) address, login details, browser type and version, device IDs, social log-in ID/email address, time zone setting, operating system, platform, hardware version, device settings (like language and time zone), file & software names and types associated with your device or the Services, battery & signal strength, and information related to your mobile operator or Internet Service Provider (ISP).

Information about your visit
This may include full Uniform Resource Locators (URL), clickstream data to, through, and from our Site (including date and time), pages and services viewed or searched for, demographic information (such as age and gender), page response times, download errors, duration of visits to specific pages, page interaction details (like scrolling, clicks, and mouse-overs), traceable campaign links (e.g., in emails, or via tracking URLs), methods used to navigate away from the page, and any phone number used to call our customer service or social media handle used to connect with our customer service team and our social media accounts.

Location data
Location data includes your country location (based on your IP address and/or Google Analytics information), which we use for location services (if you ask or permit us to). This allows us to provide content, advertising, or other services dependent on your location, such as checking for fraudulent transactions.
Location data may be collected in combination with device ID, so we can recognise your mobile browser or device when you return to the Service.

For location services, we may check:

• The coordinates (latitude/longitude) of your location
• Your current country or region by referencing your IP address against public sources
• Your Identifier for Advertisers (IFA) code for your Apple device, or the Android ID for your Android device, or a similar device identifier.

You can opt-in and out of location sharing by adjusting your device settings.

We use this automatically collected information to 

• Understand how individuals use our Site, and how we can improve it.
• Ensure content from our site is presented in the most effective manner for you and for your devices.
• Provide you with the information, products, and services that you request from us or we think you may be interested in.

Reasons: legitimate interests | consent 

If you contact or engage with us

If you contact or engage with us, we will collect your contact information, and the other communications information you provide.

Contact information includes basic contact information you provide: 

• Email address, 

and anything else you include, for example:

• First and last name,
• Phone number(s), 
• Social media handle (for example, if you engage with us on social media).

Communications information includes your correspondence with us, for example if you get in touch with our Customer Service team about an order or booking or to report a problem with our Site. This includes:

• Emails,
• Texts, in-app messaging & other digital messaging,
• Calls,
• Letters,
• Any in-person conversations you have with us.

We use this contact and communications information to

• Contact you if you have asked us to do, including to respond to your queries, troubleshoot problems, and help with any issues you may have with our Services.
• Provide you with information you might request about our Services.
• Put you in touch with Partners you ask us to share your information with. 
• Provide you with technical and other service updates (for example, if we update our Terms of Use and Terms of Service). 

Reasons: contract with you | legitimate interests | consent 

If you use our services to book an appointment

When you create a Traya account using any of our Services, we may collect your:

• First and last name;
• Date of birth
• Gender
• Email address;
• Address;
• Mobile phone number(s),
• Your photo, if uploaded (optional).
• If you choose to use your Google, Facebook, or Apple account to sign into Traya, we will get an access token that enables this sign-in process (granting us access to your first and last name, email, user ID and (apart from Apple) your profile photo). 
• We assign unique user IDs or other account-level IDs to your Traya account.

As you use your account, we may collect information about your:

• Purchase history, including product orders or appointment bookings, or voucher purchase and use;
• Favourites (e.g. your favourite hairstyle or nail designs);
• Account settings; 
• Social login information; 
• Securely saved payment methods. 
• We may also collect information, if you provide it, about your preferences, referrals, or how you found out about our Services, or other user generated content (e.g. profile photo, reviews). 

We use this account and related information to manage your account with us, including to:

• Maintain your Traya account
• Provide customer support
• Enable you to make bookings directly with Traya for our services
• Enable you to make and pay for appointments with your account
• If a Partner offers home services and you select the option, to enable you to book appointments at the address you provide
• Provide you with a personalized experience, including recommending features, services, and products we think you may be interested in.

Reasons:  contract with you | legitimate interests

If you have any questions or concerns about your data or privacy, please contact us directly.

If we send you offers, updates or other marketing material from us

We may collect contact information, such as your name and email address, as well as your marketing preferences, indicating what information you would or would not like to receive from us.

We use this contact and marketing preference information to

• Send you offers, updates, promotions, newsletters, insights, and other marketing material.
• Provide you with personalized marketing, including offers, features, services, products, and Partners we believe you may be interested in.
• If you work for a company we are interested in partnering with, we may contact you about our Services and opportunities with Traya.
• Contact you to ask for feedback, including through surveys and other marketing research.

You can opt-out of further marketing communications at any time by selecting the “unsubscribe” link at the end of all our promotional updates.

Reasons:  legitimate interests | consent 

What do each of these legal reasons mean?

We must have a relevant legal justification, called a ‘lawful basis’ for each way in which we use your personal information. 

Lawful bases may include consent, a contract with you (as a data subject), compliance with our legal obligations and our specified legitimate interests. 

Consent 

We’ll use your personal information to send you promotional or marketing content (for example, our insight updates or newsletters), if you have given us consent to us doing so, where required by law. We may also send direct marketing based on our legitimate interests (see below). 

You can opt-out of further marketing at any time by selecting the “unsubscribe” link at the end of all our promotional updates and marketing to you.

Contract 

We collect, store and process your personal information if it is necessary for performing a contract you have with us (for example, our Terms of Use and Terms of Service), or where you have asked us to take specific steps before entering into that contract. This includes notifying you about changes to our Services. This does not include any agreement we have with a Partner, whether you are a Booker or Partner staff – this is based on our legitimate interests (see below). 

Legal obligation

We may need to process any of your personal information to comply with our legal obligations, including under applicable Qatar law, and/or any court orders. This may include compliance with know-your-client and anti-money laundering rules. 

Legitimate interests

We may process your personal information if it is necessary for our legitimate interests or the legitimate interests of a third party, provided those interests are not outweighed by your rights and interests. 

Our legitimate interests include:

• Administering, improving and expanding our Site and services
• Keeping our records updated.
• Gaining insights on how you use our Services. 
• Gaining your feedback and reviews, 
• Delivering, developing and improving our Services.
• Enhancing, customising or modifying our Services and communications.
• Implementing and improving our security measures 
• Growing our business and informing our marketing strategy.

• Marketing
• Marketing and promoting our Services to a company you work for or provide services to.
• measuring or understanding the effectiveness of advertising we serve to you and others and delivering relevant advertising to you (including when you visit other websites). 

• Fulfilling agreements with another organisation
• We may process your personal information to fulfill agreements that Traya has with other organizations, such as Partners from whom you have purchased goods or services as a Client. This includes ensuring compliance with any additional Partner-specific terms. Moreover, if you are employed at a Partner or provide services to a company with which we have an agreement, we may also use your information for these purposes.

However, it’s important to note that these legitimate interests are only considered valid if they do not override your rights and interests. For more details on how we evaluate our legitimate interests, please feel free to reach out to us at contact@traya.qa.

Where do we store your information?

Traya store data in Qatar and several other servers such as those in the Netherlands, Singapore, and Vietnam.

We will put legal protections in place to safeguard personal data transfers in compliance with data protection laws. 

We update our partners and service providers as we grow, and will update this Notice regularly. For more information about how we currently transfer and protect data, please contact contact@traya.qa.

How do we protect your information?

All information you provide to us is securely stored. Our website uses secure end-to-end encryption to protect your information. All connections into our platform are secured using industry standard security and encryption. 

All data we capture is stored in secured databases and data storage systems with strict access limitations. All data access requests are logged and monitored in accordance with any threat detection policies. 

Unfortunately, the transmission of information via the internet is not completely secure. We do our best to protect your personal information, but we cannot guarantee the security of your data transmitted to us – even if there is a special notice that a particular transmission (for example, credit card information) is encrypted. Any transmission is at your own risk. Once we have received your information, we use strict procedures and security features to try to prevent unauthorised access.

Payment processing

Payments made on our Services are processed through various methods, including Apple Pay, card machine POS, QR code scanning, or online banking, particularly in Qatar. For these transactions, Traya ensures secure processing and handling of payment details.