Privacy Policy

CliqBook is booking and management software for barbershops and hair salons, operated by [Nom légal de l'entreprise / Legal business name] (NEQ [NEQ]), [Adresse postale complète, Québec, Canada] ("CliqBook", "we").

This policy applies to the cliqbook.ca website, the app.cliqbook.ca application, shop booking pages (for example shopname.cliqbook.ca) and emails sent through CliqBook.

The person in charge of the protection of personal information at CliqBook is: [Nom de la personne responsable], [email protected].

For information about shop owners and their team (accounts, subscription, billing), CliqBook is responsible for that information.

For information about a shop's clients (people who book an appointment), the shop is responsible for that information. CliqBook processes it on the shop's behalf, only to provide the service, under our Data Processing Terms. If you are a shop's client, you can send requests to the shop or to us; we will forward them to the shop when needed.

We only collect the information needed for the purposes described below:

• Account: name, email address, password (stored as an irreversible hash) or Google sign-in identifier, preferred language.
• Shop: name, address, phone, public email, opening hours, services and prices, logo and photos, booking page colours.
• Team: name, email, phone, photo, schedule, time off, commission rate, hours worked, appointments, logged payments and tips.
• Shop clients: first and last name, email, phone, appointments (service, date, team member), shop notes, amounts paid and tips logged by the shop, promotional email consent (with its date) and unsubscribes.
• Subscription: Stripe customer and subscription identifiers, subscription status and dates, invoices. Card numbers are handled by Stripe and never stored by CliqBook. To prevent free-trial abuse, we keep the technical card fingerprint provided by Stripe (not the card number).
• Messages: what you send us through the contact form or by email.
• Technical information: IP address (for security and abuse limits), browser and device type, pages visited when an error occurs, technical logs.

• Provide the service: accounts, online booking, calendar, reminders, reports, timesheets and team pay.
• Send transactional emails: appointment confirmations, reminders, changes or cancellations, team invitations, password resets.
• Let shops send promotional emails, only to clients who expressly consented, with an unsubscribe link in every email.
• Manage subscriptions and billing, and prevent fraud.
• Protect the service: bot checks, attempt limits, error detection and fixing.
• Answer your questions and support requests.
• Meet our legal obligations (tax, accounting, privacy).

We do not sell personal information. We do not use targeted advertising or fully automated decisions that significantly affect you.

By creating an account or booking an appointment, you consent to the use of your information for the purposes needed to provide that service. Consent to promotional emails is separate, optional and never pre-checked. You can withdraw consent at any time, subject to legal obligations; withdrawing may prevent some features from working.

We use service providers that use information only to provide their service to us, under written agreements requiring security measures:

• DigitalOcean: application and database hosting ([DigitalOcean hosting region, e.g. Toronto, Canada]).
• Cloudflare: network, security, bot checks (Turnstile) and image storage (R2).
• Stripe: payments and subscription management.
• Resend: email delivery.
• Sentry: technical error detection.
• Google: Sign in with Google (if you choose it), address search and maps.

Some of these providers store or process information outside Québec, including elsewhere in Canada and in the United States. Before sharing information outside Québec, we assess whether it will be adequately protected, as the law requires. The information may then be accessible to authorities in those places under applicable laws.

We may also share information when required by law, or as part of a sale or reorganization of the business, subject to the protections provided by law.

• Session cookie (essential): keeps your account signed in securely.
• Language cookie (essential): remembers French or English for one year.
• Browser local storage: display preferences, such as a collapsed menu.
• Cloudflare Turnstile: checks that you are not a robot at sign-up, sign-in, booking and on the contact form.
• Sentry: only when an error happens, a technical session recording may be created to fix that error. All text, input fields and images are masked in it. Visits without errors are never recorded.

We use no advertising cookies or profiling tools. No feature that identifies, locates or profiles you is turned on by default.

• Shop data: kept while the account is active, then deleted from the live database no later than 90 days after the account closes, unless the law requires otherwise.
• CliqBook billing records: kept six years, as tax laws require.
• Backups: automatically overwritten after seven days.
• Abuse-limit data (IP address): deleted automatically within a few hours.
• Error diagnostics: deleted automatically by our provider, usually after 90 days.
• Unsubscribe and bounce list: kept so that unsubscribes keep being honoured.

We protect information with measures suited to its sensitivity, including: encrypted connections (HTTPS), irreversibly hashed passwords, strict separation of each shop's data, role-based access, secure link tokens, bot checks, error monitoring and daily backups.

If a confidentiality incident presents a risk of serious injury, we will notify the Commission d'accès à l'information and the people affected, and we keep a register of incidents, as the law requires.

Subject to the law, you can:

• access your personal information and get a copy, including in a structured, commonly used technological format;
• have inaccurate, incomplete or ambiguous information corrected;
• withdraw consent or ask that information no longer needed be deleted;
• unsubscribe from promotional emails at any time using the link in every email.

Write to [email protected]. We reply within 30 days. We may need to verify your identity. If you are a shop's client, we will forward your request to the shop when it is responsible for the information.

If you are not satisfied with our answer, you can contact the Commission d'accès à l'information du Québec (cai.gouv.qc.ca) or the Office of the Privacy Commissioner of Canada (priv.gc.ca).

CliqBook accounts are for businesses and team members aged 18 or older. An appointment for a person under 14 must be booked by their parent or guardian.

We may update this policy. The effective date appears at the top of the page. For significant changes, we will notify account holders by email or in the app before they apply.