#1. Who we are
Shining Lady ("Shining Lady") is responsible for your personal data under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000. Contact details are at the end of this policy.
#2. Information we collect
| What | Examples | Why |
|---|---|---|
| Account details | Name, mobile number, email and profile photo (if you sign in with Google) | To create your account, sign you in and contact you about bookings |
| Addresses & location | Service addresses you save; device location only when you choose "use my location" while adding an address | To send the beautician to the right place and show services in your city |
| Bookings | Services, products chosen, date, time, amounts, coupons, wallet history | To deliver and support your bookings, billing and records |
| Reviews & messages | Ratings, reviews, feedback and support chats | To improve quality and show genuine reviews |
| Device & usage | App version, device model, notification token, crash and usage statistics | To send booking notifications, keep the app secure and fix problems |
| Payments | Payment status and transaction IDs from Razorpay (never your card, UPI PIN or bank login) | To confirm payments and process refunds |
| Partner applications | Name, phone, city, address, experience, skills and verification details | To verify beauticians before they can accept bookings |
#3. How we use your information
- Take, assign, deliver and support your bookings
- Send booking updates and, if you allow, offers by notification (you can turn these off in your phone settings)
- Prevent fraud, misuse of offers and unsafe behaviour
- Improve our services, prices and app experience using aggregated statistics
- Meet legal, tax and accounting obligations
We process your data on the basis of your consent and to perform the services you request. You may withdraw consent at any time, but some features (like booking) cannot work without the data they need.
#5. Storage and security
Your data is stored on secure servers of Google Firebase and Hostinger. We use encrypted connections (HTTPS), verified sign-in for every request, database rules that let each person see only their own data, and server-side checks for prices and payments. Access by our team is limited to people who need it to support you, and admin actions are logged.
#6. How long we keep it
We keep your account data while your account is active. When you delete your account we remove your profile, saved addresses, cart and wallet. We keep booking and payment records for as long as Indian tax and accounting laws require (generally up to 8 years), after which they are deleted or anonymised.
#7. Your rights and choices
- Access & correction: view and edit your profile and addresses in the app at any time.
- Deletion: ask us to delete your account — see Delete your account.
- Withdraw consent: turn off notifications or location permission in your phone settings.
- Grievances: write to our grievance officer (details on the contact page). You may also approach the Data Protection Board of India.
#8. Children
Our services are meant for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, contact us and we will delete it.
#10. Changes to this policy
We will post any changes on this page and update the date at the top. If a change is significant we will also notify you in the app.
#11. Contact us
For any privacy question or request, reach us by email at our contact page, by phone at +91 9540237723 or from Account → Help & support in the app.