Privacy Policy

1. Data Controller Information

aerotripoxum Ltd is the data controller responsible for your personal data. We are a company registered in Malta with registration number C96325, VAT number MT96524183, and our registered office is located at Triq il-Karmnu 98, Valletta VLT 0697, Malta.

For any questions regarding this privacy policy or your personal data, please contact us at privacy@aerotripoxum.pro or call us at +356 27481485.

2. Data We Collect

We collect and process various types of personal data to provide our salon analytics services effectively. The data we collect includes:

• Contact Information: Your name, email address, phone number, and business address when you contact us or use our services
• Business Information: Details about your salon or spa, including business name, type of services offered, team size, and current booking systems
• Website Usage Data: Information about how you interact with our website, including pages visited, time spent, and referring sources
• Technical Data: IP address, browser type, device information, and operating system for security and optimisation purposes
• Communication Data: Records of correspondence when you contact us for support, inquiries, or consultation requests
• Analytics Data: When using our platform, we collect booking conversion data, appointment metrics, and performance statistics related to your business operations

3. How We Use Your Information

We use your personal data for legitimate business purposes and to provide our analytics services. Specifically, we use of your data for the following purposes:

• Service Provision: To deliver our salon analytics platform, generate reports, and provide insights to improve your appointment booking performance
• Customer Support: To respond to your inquiries, provide technical assistance, and resolve any issues with our services
• Account Management: To create and maintain your account, process payments, and manage your subscription to our services
• Communication: To send you important updates about our services, respond to your requests, and provide relevant business insights
• Service Improvement: To analyse usage patterns, identify areas for platform enhancement, and develop new features that benefit our clients
• Legal Compliance: To comply with applicable laws, regulations, and legal obligations in Malta and the European Union
• Marketing: With your consent, to send you information about new features, industry insights, and promotional offers that may be relevant to your business

4. Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the specific cookies we use and how to control them, please refer to our comprehensive Cookie Policy.

5. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing necessary to perform our contract with you or to take steps at your request before entering into a contract
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services, ensuring security, and analysing usage patterns
• Legal Obligation: Processing required to comply with legal obligations under Malta and EU law
• Consent: For marketing communications and non-essential cookies, where you have provided explicit consent

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data to third parties. We may share your information in the following limited circumstances:

• Service Providers: With trusted third-party vendors who assist us in delivering our services, such as hosting providers, payment processors, and analytics tools
• Legal Requirements: When required by law, regulation, legal process, or governmental request
• Business Transfers: In connection with any merger, sale of company assets, or acquisition of all or a portion of our business
• Protection of Rights: To protect our rights, property, or safety, or that of our users or others

All third-party service providers are contractually bound to protect your data and use it only for the specific purposes we authorise.

7. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law. Specifically:

• Account Data: Retained for the duration of your account plus 7 years for legal and tax purposes
• Analytics Data: Retained for up to 3 years to provide historical insights and trend analysis
• Communication Records: Retained for 5 years for customer service and legal purposes
• Marketing Data: Retained until you withdraw consent or for 2 years of inactivity

When personal data is no longer needed, we securely delete or anonymise it in accordance with our data retention procedures.

8. Your Rights

Under GDPR and Malta data protection law, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you
• Right to Rectification: You can ask us to correct any inaccurate or incomplete personal data
• Right to Erasure: You can request deletion of your personal data in certain circumstances
• Right to Restrict Processing: You can ask us to limit how we use your personal data in specific situations
• Right to Data Portability: You can request your personal data in a structured, machine-readable format
• Right to Object: You can object to processing based on legitimate interests or for direct marketing purposes
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us at privacy@aerotripoxum.pro. We will respond to your request within one month.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest using industry-standard protocols
• Regular security assessments and penetration testing
• Access controls and authentication procedures for our systems
• Staff training on data protection and security best practices
• Incident response procedures for potential data breaches

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to protecting your data using reasonable measures.

10. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) where our service providers are located. When we transfer data outside the EEA, we ensure adequate protection through:

• European Commission adequacy decisions for countries with appropriate data protection laws
• Standard Contractual Clauses approved by the European Commission
• Certification schemes and codes of conduct recognised under GDPR

11. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

12. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. For significant changes, we may also send you an email notification.

We encourage you to review this privacy policy periodically to stay informed about how we protect your personal data.

13. Contact Information

If you have any questions about this privacy policy, our data practices, or wish to exercise your rights, please contact us: