Privacy notice

This notice says what personal data Anti hair salon keeps about you, why, who can see it, how long it is kept, and what you can ask the salon to do about it.

Who is responsible

The salon is run by Phayong Phanpitak, trading as Anti hair salon アンティ, who decides how the personal data described here is used and is responsible for it under Thailand's Personal Data Protection Act B.E. 2562 (2019). The salon is not a registered company. For anything about your personal data, write to contact@antihairsalon.com, or ask at the salon.

What the salon keeps, and where it comes from

When you ask for an appointment on the website: the name you would like the salon to call you, your given name and family name if you give them, your telephone number, how you would like the salon to reach you, the services you ask for, the day and time you would like, and any note you write. If you choose to see the men's or the women's prices, that choice is kept with the request, only to say which price applies; it is never required and never used for anything else. The salon also records that you agreed to this notice, when, and the internet address your request came from. The name you would like to be called is how the staff, and the salon's LINE messages about your bookings, greet you; it is used for nothing else.

When you use the salon through LINE, by signing in with LINE on the website or by opening the salon's page in the LINE app: the identifier LINE gives the salon for your LINE account, your LINE display name and the address of your LINE profile picture, which LINE sends after you agree on LINE's own screen. Signing in on its own keeps nothing: the salon holds these details only for that visit, for up to two hours, and keeps them only when you send a booking request, ask for the reply on LINE, or link LINE to your membership. LINE does not give the salon your telephone number or your email address. The salon also records whether you have added its LINE account as a friend, because LINE delivers messages only to friends. Signing in with LINE does not make you a member.

The salon uses LINE in two separate ways, and neither leads to the other. LINE used for a booking carries that booking's messages and nothing more: it never opens a membership. LINE opens your membership card only if you link it yourself, from your membership's settings while signed in with your password, and you agree to that separately. To stop messages about bookings made with LINE, block @antihairsalon in LINE, or ask the salon.

If you are signed in to your membership when you ask for an appointment on the website, the form fills in your name and telephone number from your membership, and the request is kept with your membership so that it shows on your card. If you are signed in with LINE and that LINE account has sent the salon a request before, the form fills in the name and number you gave then. In both cases you can change them for that request, and they are shown only to you.

When staff take a booking by telephone, in a chat or at the counter: your name, your telephone number, the services and the time, where the booking came from (a call, WhatsApp, a LINE chat, Instagram, in person or another way), and any note staff write about the booking.

When you pay at the salon: what you bought, the amounts, how you paid (cash, bank transfer or PromptPay) and when. A receipt is issued for each sale. The salon never receives or keeps card or bank account details.

When you become a member: a membership is made only at the salon's counter, when you pay for a visit; it cannot be made online, in LINE or by signing in with LINE. At the counter you fill in, on your own phone, your given name, your family name if you wish, your telephone number, your birthday as a day and a month if you wish, and a password; if you have no smartphone, the staff type your name and number for you, and you set a password later, at the salon. When the staff type your details for you, you type your full name and sign with your finger on the salon's screen: that signed membership agreement keeps your full name as you typed it, the date and time, the versions of the terms of service and of this notice you agreed to, and your signature as an image. You can see it from your membership's settings, the staff see it in the salon's own system, and deleting your record deletes it. The salon uses your birthday only to greet you on the day. It never asks the year you were born, so it never learns your age. You can change your name and birthday yourself in your membership's settings; your telephone number is changed at the counter, because you sign in with it. The salon gives you a member code. You sign in to your membership on the website with your telephone number and password. Wrong attempts are limited, and record the internet address they came from. Your password is kept only in a form that cannot be read back. If you forget it, it is set again only at the salon, in person: the staff check that it is you and show a code on the salon's phone, which you scan with your own phone to set a new password there; the code works once, within fifteen minutes, and is never sent to you. Setting a new password this way forgets every phone that opened your card with a PIN. After signing in with your password on your own phone, you may give that phone a six-digit PIN, which then opens your card on that phone only, for up to ninety days. The phone keeps only a random code and the salon keeps the PIN only in a form that cannot be read back; five wrong PINs forget the phone, and you or the staff can forget it at any time, and you can sign out everywhere at once. A member's points and any package bought and used are recorded against the membership. A new member may add the points of visits paid in the thirty days before, each visit once: by opening that visit's receipt link on their own phone while signed in to their membership, or at the counter, where the staff find the visits by the member's telephone number and add only those the member confirms in person are theirs. The visit itself stays where it was recorded. If a visit is not paid, no membership is made, and nothing typed for it is kept; paying for a visit never needs a membership. When you become a member, and when you link LINE to your membership, you agree on your own phone or on a screen at the counter, and the salon records that you agreed, when, and the version of this notice in force.

At the counter, the staff may scan the code on your booking ticket or your member card with the salon's phone to find your booking or your membership. The scan reads only the booking reference or the member code, and keeps nothing else.

Photographs of your hair: the salon may ask to photograph its work on your hair for its website. It asks on a screen at the counter that shows you the photograph, and publishes it only if you tap "I agree" yourself; the salon records that you agreed, when, and the version of this notice in force. If you have no record at the salon, one is made with your name only, to hold that agreement. Your name is never shown with the photograph, and its location and camera details are removed before it is kept. A short description of it is kept for people who cannot see it, and it never names you. If you say no, the photograph is deleted at once.

The salon does not ask for your email address, the year you were born, your address or any identity document. It keeps no other photographs of customers.

Reviews on Google: the home page shows the reviews people have posted about the salon on Google, as Google lists them, newest first: each review's stars, its words, its month and the name Google shows for whoever wrote it, never their photograph. The salon reads them from Google once a day with its own Google account and keeps only the list as it stands that day, so a review changed or removed on Google is changed or removed here by the next day. Nothing is left out or edited for its stars. A review is yours to change or remove on Google, under Google's own policies.

What it is used for

To take, confirm and keep your appointments, and to contact you about them. If you signed in with LINE, the salon sends you up to three LINE messages about a booking: that the request was received; that it is confirmed, or that the salon cannot fit it in; and, for a confirmed booking, a reminder the day before. After a paid visit it also sends your receipt there, if the visit's booking came with LINE or the salon took the payment on a record that has your LINE. A request made on the website without signing in with LINE is never sent to a LINE account, even if its telephone number belongs to someone who uses LINE, with one exception that is yours to choose: if you choose "Get updates on LINE" when you ask, or sign in with LINE from the request's confirmation page, on the same device and within a few minutes, that request's messages go to the LINE account you signed in with, and to no other. LINE then offers to add @antihairsalon as a friend, because LINE delivers the salon's messages only to friends. The salon records that you chose updates on LINE, and keeps the name and telephone number you gave on the record of that LINE account, so that the booking form fills them in when you next sign in with it; it never joins that LINE account to any other record of yours, such as one found by your telephone number. Your telephone number stays on the request, in case LINE cannot reach you.

If you ask the salon to reach you on WhatsApp, or write to the salon there, your telephone number and the messages pass through WhatsApp, which is run by Meta and may handle data outside Thailand. The salon writes to you there from its own telephone; the system sends nothing on WhatsApp.

If you tick "Remember my name, number and how to reach me on this device", those details are kept in that browser only, never sent to the salon except with a request, and "Forget my details on this device" removes them.

The confirmation page and the LINE messages link to a calendar file for the appointment, which holds its day, time, services and reference, never your name or telephone number; anyone who has the link can open it while the booking is open. After a paid visit the salon gives you a link to your receipt, on LINE as above or in a message the staff send from their phone. The receipt shows the date, what you bought, the total, how you paid and, if you are a member, the points the visit earned; never your name, telephone number or member code. Anyone who has the link can open it for thirty days after the visit; then it stops working. Its link to review the salon on Google opens Google's own page when you press it; until then nothing is requested from Google. On LINE you can cancel a booking from its message, and answer the reminder with running late, need to change or see you then; LINE answers each tap in the chat, and the salon records your answer with the booking. The LINE messages also offer "Google Calendar", which opens Google Calendar's own page with the appointment's day, time, services and reference and the salon's name and address filled in; until you tap it, nothing is sent to Google. Your membership page shows your next appointment, your past visits and the points added to or taken from your membership, and its settings your bookings, coming and past.

If you tap "Add to Google Wallet" on your membership card, your name and member code are sent to Google, which keeps the card in your Google Wallet under Google's own privacy policy. The salon sends Google nothing else, then or later. To remove the card from Google Wallet, delete it there.

To record sales and payments and keep the salon's accounts, and to run membership: the member code, points and packages.

To keep the system and your data secure: limits on repeated attempts to sign in or to look up a booking, which record the internet address the attempts came from, and a record of which staff member viewed or changed what, and when. Staff open the salon's own app on their phones with a full sign-in, and a phone they choose to keep signed in also needs its own PIN; it opens the app for thirty days at most, and the salon can end it at any time.

The salon sends no advertising, no newsletters and no messages other than those about your bookings.

The basis for using it

Your details are used to provide what you ask for: an appointment, a sale, a membership. A photograph of your hair is on the website only because you agreed to it, and you can withdraw that agreement at any time: at the salon, or by writing to contact@antihairsalon.com. The photograph is then taken off the website and deleted, and browsers that showed it stop showing it within a day. Anyone who saw it on the website before then may have kept a copy, which the salon cannot recall. Sales and payments are kept because the salon must keep accounts. Security records are kept in the salon's legitimate interest in protecting your data and its own. When you ask for an appointment on the website or in LINE, the salon records your agreement to this notice.

Who can see it at the salon

Only staff signed in to the salon's own system, each seeing what their role needs: the owner and the person who runs the system see everything; a manager sees bookings, customers and sales; a stylist sees their appointments and the customers on them. Each time staff look at a customer's details, the system records who looked and when. Staff sign in with a password and a second code from their own phone.

When the salon's staff are told of a new booking request, a cancellation or an answer to the reminder in their LINE work group, the message names you only by the name you asked to be called, or else by your given name and the first letter of your family name, and never carries your telephone number or booking reference.

Who else receives it

LINE, if you use the salon through LINE: your LINE identifier is used to send you the messages above, and their content, which includes your appointment's date, time and reference, passes through LINE.

LINE, for the salon's staff: each booking request, cancellation and answer to the reminder is posted to the salon's own staff group on LINE, with the name you asked to be called, or else your given name and the first letter of your family name, what you asked for, the day and time, how you would like to be contacted, whether you asked with LINE, whether it is on request and whether you are a member. Never your telephone number, your booking reference or a note you wrote: staff read those in the salon's own system. LINE keeps the group's messages under its own policy.

WhatsApp, if you ask the salon to reach you there or write to it there: your telephone number and the messages pass through WhatsApp.

The technology provider that operates the salon's server on the salon's behalf: your data is stored on that server, and backup copies are kept by the same provider on separate equipment, so that the system can be restored after a failure.

The network provider that delivers the website: every page you open and every form you send passes through it, encrypted, on its way to the salon's server.

Everyone who visits the website, for a photograph of your hair you agreed to: it is public, without your name.

Google, if you add your membership card to Google Wallet: your name and member code.

Google, if you tap "Google Calendar" in a LINE message: the appointment's day, time, services and reference, never your name or telephone number.

LINE, WhatsApp, Google and the network provider may handle data outside Thailand. Nobody else receives your data. The salon does not sell it, does not share it for advertising, and uses no analytics or advertising services on its website.

How long it is kept

The salon keeps your records until you ask for them to be deleted. No fixed period applies, because nothing deletes records automatically.

Backup copies made before a record was deleted may still contain it. They are used only to restore the system after a failure.

Cookies

The website sets one cookie of its own, which keeps your session and protects its forms; it is deleted when it expires and is never used to follow you. The network provider that delivers the website may set a cookie of its own for security. No advertising or tracking cookies are used.

The map

The website shows a Google map, under How to find us, only if you press Show the map; until then nothing is requested from Google. When you press it, your browser loads the map from Google, which receives your IP address, the address of this website and what your browser tells any website it visits, and may set cookies of its own, under Google's privacy policy. The salon receives nothing from it.

The links "Read our reviews on Google" and "Get directions" open Google's own pages when you press them; until then nothing is requested from Google.

What you can ask the salon to do

You can ask to see the personal data the salon keeps about you and to have a copy of it, to have something corrected, to have your record deleted, to withdraw your agreement, or to object to how your data is used. You can also complain to the Office of the Personal Data Protection Committee.

To ask, write to contact@antihairsalon.com or ask at the salon. The salon will check that the request comes from you before acting on it.

What deletion does: your name, telephone number, birthday, member code, password, PINs, LINE link, the phones that opened your card with a PIN, any photograph of your hair, your signed membership agreement and its signature, and the names and notes on your bookings are removed, and your record becomes "Deleted customer". A card you added to Google Wallet is in Google's keeping, not the salon's: delete it in Google Wallet. The dates and amounts of past bookings, sales and payments, and the points and packages on the record, stay without your name, because the salon must keep its accounts.

A lost booking reference or member code is never sent to you by message; the salon reads it to you when you call or visit.

Changes to this notice

When this notice changes, the new version is published here with its date, and the salon keeps a record of which version each person agreed to.