Privacy Policy

1. Who is responsible for your information

AJ's Glam Lab, operated by Ruby Konadu (“we”, “us”) is responsible for your personal information (the “data controller” under Ghana’s Data Protection Act, 2012 (Act 843)). Address: 23 Ontario Street, Madina New Road, Accra, Ghana (GhanaPost GPS GM-007-8114). Email: ajsglamlab@gmail.com. Phone and WhatsApp: 024 726 0913.

2. What we collect

• Your booking details: your name, your Mobile Money phone number, the services you choose, and your appointment date and time.
• Payment details: the amount, whether it was paid, and the payment reference from our payment provider. We never see or store your Mobile Money PIN or wallet balance.
• Your agreement to our terms: which version of the Terms of Booking you agreed to, and when.
• Security information: to stop abuse (for example, someone repeatedly triggering payment prompts), we store a scrambled code made from your internet (IP) address. We don’t store the address itself, and the code can’t be turned back into it. A security check from Cloudflare (Turnstile) also checks your browser to tell people apart from automated programs.
• Messages: if you contact us by WhatsApp, phone, Instagram or Snapchat, we receive what you send. Those apps handle your information under their own privacy policies.
• Photos and videos: of your treatment, only if you give permission.

3. Why we use it

• To take, confirm and manage your booking, including reschedules (to carry out our agreement with you).
• To process your booking fee and keep a record of the payment.
• To contact you about your appointment.
• To keep the website secure and prevent fraud and abuse.
• To keep the business and tax records the law requires.
• To show your treatment in our portfolio, only with your consent, which you can withdraw at any time.

We don’t use your information for advertising, and we don’t sell it to anyone.

4. Who we share it with

Only with the companies that help us run the booking service, and only what they need:

• Vendor Apps and Moolre, our payment providers: your name, MoMo number and the amount, to send the payment prompt.
• Supabase, which stores our booking database.
• Cloudflare, which hosts the website and runs the security check.
• Google, only if you tap “Show map” or “Get directions”. The map isn’t loaded unless you ask for it.
• TechDNA, which builds and maintains the website for us, and may access booking information only to keep the site working and fix problems, on our instructions.

We may also share information if the law requires it, for example with a court or a regulator.

5. Information stored outside Ghana

Some of these providers store or process information on servers outside Ghana. We use established providers that protect data with security measures such as encryption.

6. How long we keep it

• Paid bookings: for as long as we need them for your booking, any reschedule or question about it, and our business and tax records. After that, we delete them.
• Bookings that were never paid: deleted automatically after 30 days.
• Security records (the scrambled IP code and booking attempts): deleted automatically after 30 days.
• Photos and videos: until you ask us to remove them.

7. How we protect it

The website uses encrypted connections (HTTPS). Our database is locked so that the public can’t read or change it: only our own server, using secret keys, can. Access is limited to the people who need it. No system is perfectly secure, but if a security problem affects your information, we will tell you and the Data Protection Commission as the law requires.

8. Cookies

We don’t use advertising or tracking cookies. The security check may use strictly necessary cookies or similar storage to work. Google may set cookies only if you choose to load the map.

9. Your rights

Under the Data Protection Act, 2012 (Act 843), you can ask us to:

• tell you what information we hold about you, and give you a copy;
• correct information that is wrong or incomplete;
• delete your information, unless we must keep it (for example, for tax records);
• stop using your information for a purpose you object to, including withdrawing permission for photos.

Email ajsglamlab@gmail.com or message us on WhatsApp. We may ask you to confirm who you are first. If you’re not happy with our answer, you can complain to the Data Protection Commission of Ghana.

10. Children

Clients under 17 must book and attend with a parent or guardian (see our Terms of Booking), who provides their details on their behalf.

11. Changes to this policy

We may update this policy, for example if we start using a new service. The date at the top shows when it last changed.