Legal Entity, Governance & Scope
This Privacy Policy ("Policy") governs the collection, processing, transfer, storage, and disposal of personal information by Ezee Cut Technologies Private Limited ("Ezee Cut", "Company", "We", "Us", or "Our"), having its registered office at Corporate Hub, Level 4, BKC, Mumbai, Maharashtra 400051, India.
This Policy is published pursuant to and in full compliance with:
- The Information Technology Act, 2000 (IT Act) and applicable amendments;
- Rule 3(1) and Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules);
- The Digital Personal Data Protection Act, 2023 (DPDP Act) and corresponding administrative directives;
- The Consumer Protection (E-Commerce) Rules, 2020.
By visiting our website, downloading or installing the Progressive Web Application (PWA), creating an account, reserving a salon appointment, joining an in-salon queue, or booking an at-home specialist, you explicitly consent to the data practices described herein.
Categories of Information We Collect
We collect only the minimum necessary personal data required to operate an efficient salon marketplace, prevent double-booking, generate live queue tickets, and fulfill grooming transactions:
A. Customer & Guest Identifiers
Full Name, Mobile Phone Number (used as the primary verification token and queue ticket key), email address, delivery addresses (for home salon services), profile photo, and password hash (stored strictly using salted bcrypt/argon2).
B. Transactional & Booking Records
Booking reference codes, itemized salon services selected, stylist assigned, station chair number, queue token sequence, appointment timestamps, financial year ledger references, billing subtotal, taxes (GST), and payment status.
C. Geolocation & Device Analytics
Precise or approximate device GPS latitude and longitude (captured solely when you click "Use Current Location" or "Find Salons Near Me" to calculate distance via the Haversine algorithm), IP address, browser user-agent, operating system, and Web Push VAPID notification subscription endpoints.
D. Salon Partner & Stylist KYC Data
Trade license, Salon GSTIN, Permanent Account Number (PAN), bank account details / UPI VPAs for automated weekly commission payouts, stylist attendance, chair allocations, and cash register closing logs.
How & Why We Process Your Data (Lawful Basis)
We process your data strictly under valid lawful grounds recognized under the DPDP Act 2023, namely contractual necessity, compliance with legal obligations, and legitimate platform operations:
Live Queue & Public Privacy Masking Protocol
A core architectural innovation of Ezee Cut is our public live queue display used in salon waiting lobbies and on customer mobile trackers (`/queue/track/{token}`). To protect patron confidentiality in public spaces:
Only token numbers (e.g. #B009), allocated chair indices, and estimated service durations are displayed publicly on waiting monitors. Contact phone numbers are masked by default (e.g. +91 98****3210). Full customer details are accessible only by authenticated salon staff on restricted counter terminals.
Payment Security & RBI Guidelines
We take payment confidentiality with the utmost seriousness. In accordance with Reserve Bank of India (RBI) circulars on Card-on-File Tokenization (CoFT):
- No Raw Card Data Storage: Ezee Cut servers NEVER record or store credit/debit card numbers, CVVs, expiry dates, or net-banking credentials.
- RBI-Authorized Payment Gateways: All online prepayments are routed through licensed, PCI-DSS Level 1 compliant payment aggregators (including Cashfree Payments India Pvt. Ltd. and PhonePe Private Limited).
- UPI Integration: Instant counter UPI QR transactions use standard NPCI-compliant protocols; we only store the non-sensitive banking UTR / Transaction Reference Number for reconciliation.
Third-Party Data Disclosures & Safe Harbors
We share information only under strict confidentiality agreements with authorized partners to fulfill our services:
Data Retention, Archival & Account Deletion
Personal data is retained only for as long as your account remains active or as required to fulfill transactional, auditing, and taxation requirements under Indian law:
- Financial Ledgers & Invoices: Retained for 8 financial years in accordance with Section 44AA of the Income Tax Act, 1961 and GST statutory requirements.
- Account Deletion: You may submit an account erasure request at any time by emailing privacy@ezeecut.com. Upon receipt, personal identifiers will be scrubbed from non-statutory tables within 30 days.
Your Rights Under the DPDP Act, 2023
As a Data Principal under Indian law, you are entitled to exercise the following statutory rights:
Request a complete copy of the personal data held about you and a summary of processing activities.
Request immediate correction of inaccurate or outdated contact info, addresses, and saved preferences.
Directly contact our designated Grievance Officer with guaranteed acknowledgment within 48 business hours.
Designate a representative who can exercise your data rights in the event of death or incapacity.
Cookies, Local Tokens & Progressive Web App Storage
We use standard cookies and browser storage technologies strictly to ensure platform security, session management, and offline service continuity:
- Essential Session Cookies: Encrypted tokens (`laravel_session`, `XSRF-TOKEN`) required for authentication and CSRF cross-site request forgery prevention.
- Theme & Interface Preferences: Stored locally in your browser (`ss_theme`) to maintain light/dark display preferences.
- PWA Service Worker Cache: Service workers cache offline queue shell assets (`manifest.webmanifest`, app icons) to allow access during intermittent cellular coverage.
Children's Privacy Protection
Ezee Cut is not intended for unsupervised registration by individuals below the age of eighteen (18) years. While salon services for children (e.g. kids' haircuts) may be booked on our platform, such appointments must be arranged directly by a parent or legal guardian. We do not knowingly collect personal information directly from minors.
Technical & Organizational Safeguards
Ezee Cut implements state-of-the-art security practices meeting international ISO/IEC 27001 benchmarks:
Statutory Grievance Redressal Officer
In accordance with the Information Technology Act, 2000 and rules made thereunder, as well as the Consumer Protection (E-Commerce) Rules, 2020, the name and contact details of the designated Grievance Officer are set forth below: