Privacy policy
Last updated 12 September 2026
This policy explains how BeautyFlow (beautyflow.co.ke) collects and uses personal data, in line with the Kenya Data Protection Act, 2019.
1. What we collect
- Businesses: name, business name, email, phone/WhatsApp number, logo, photos, location, opening hours, services and prices, and your password (stored encrypted, never in plain text).
- Staff: name, email, phone, job title, and — if the business adds them — ID number, start date, photo, M-Pesa number for pay, commission and payout records.
- Clients: when you book or send an inquiry — your name, phone number and message; when a business records a sale, your name and phone if you give them. When you post a review — your name and comment.
- Automatically: basic server logs (IP address, browser, pages visited) for security and to keep the site running.
2. How we use it
- To publish business profiles so customers can find and contact them — business details are public by design.
- To deliver bookings and inquiries to the business you contacted, and to let businesses run their sales, staff and payouts.
- To display reviews and ratings on business pages.
- To manage accounts, plans and Premium upgrades, and to provide support.
- To detect fraud, abuse and fake listings.
3. Who sees your data
- Bookings and inquiries are shared with the business you contacted, who may call or WhatsApp you back. The business is responsible for how they handle your details afterwards.
- BeautyFlow administrators can view inquiries and reviews for support and moderation.
- We do not sell personal data to third parties.
- Clicking a WhatsApp, phone or Google Maps link takes you to that third-party service, governed by its own privacy policy.
4. Payments
We do not process customer payments. Premium plan payments are made via M-Pesa or as instructed on the Upgrade page; we only record that your account was upgraded.
5. Retention
Business data is kept while your account is active and deleted when you ask us to remove your account. Inquiries and reviews are kept while the related business listing exists. Server logs are kept for a limited period for security.
6. Your rights
You may ask to access, correct or delete your personal data, or object to its processing, by contacting us on WhatsApp at +254717183416. Businesss can edit most of their information directly from the dashboard.
7. Cookies
We use only essential cookies: a session cookie to keep you logged in and a CSRF cookie to protect forms. We do not use advertising or tracking cookies.
8. Security
We use HTTPS, encrypted password storage and access controls. No system is perfectly secure, so please use a strong, unique password.
9. Children
BeautyFlow is not directed at children under 18. Business accounts must be created by adults.
10. Changes
We may update this policy; the date at the top shows the latest version.