Important — Please Read

These Terms & Conditions form a legally binding agreement between Salon Whisper Ltd, a company registered in England & Wales (company number 17168341) with its registered office at 66 Airfield Way, Nottingham, United Kingdom, NG15 6WZ (“we”, “us”, “our”, “Salon Whisper”), and you, the salon, stylist, business or sole trader subscribing to the Platform (“you”, “your”, the “Customer”).

By creating an account, clicking “I agree”, or using the Platform, you confirm you have read, understood and agreed to these Terms. If you are agreeing on behalf of a business, you confirm you have authority to bind that business.

These Terms include a Data Processing Agreement (Schedule 1) which forms part of this contract under Article 28 of the UK GDPR.

These Terms are read alongside our Privacy Policy (at salonwhisper.com/privacy), our Cookie Policy (at salonwhisper.com/cookies) and our Sub-processor list (at salonwhisper.com/sub-processors). Together, these documents form the agreement between us. If there is any conflict, these Terms take precedence.

1. Definitions

“Platform” means the Salon Whisper software-as-a-service application, including the unified inbox, booking system, email infrastructure, AI agents and any associated websites, APIs and mobile interfaces.

“Subscription” means your plan to access the Platform on a Free, Growth, Professional or Scale tier (or any successor tier).

“End Client” means a customer of yours — the individual whose data you upload to or generate within the Platform when communicating with them, taking bookings, or processing their payments.

“End Client Data” means any personal data relating to your End Clients that we process on your behalf, including names, contact details, message content, booking records and payment metadata.

“Customer Content” means everything you put into the Platform: messages, contact lists, booking data, photos, branding assets and configuration.

“Connected Channels” means the third-party messaging services we integrate with, including Instagram, Facebook Messenger, WhatsApp Business, SMS providers and email.

“Stripe Connect” means the payment-facilitation service operated by Stripe, Inc. and its affiliates, through which you receive payments from your End Clients via the Platform.

“Commission” means the percentage fee we deduct from each transaction processed through Stripe Connect, as set out for your tier or as displayed in your account dashboard.

“AI Agent” means the automated response and booking-management feature available on the Scale tier.

“Fees” means subscription charges, transaction Commissions and any other amounts payable under these Terms.

“DPA” means the Data Processing Agreement set out in Schedule 1.

“Anonymised Aggregated Data” means data derived from Customer Content or End Client Data that has been aggregated with data from other sources and stripped of all direct and indirect identifiers, such that no individual or specific salon can reasonably be re-identified, taking into account the means likely to be used and any other information available. Once data meets this standard it is no longer personal data under UK GDPR.

2. The Service

We grant you a non-exclusive, non-transferable, revocable right to access and use the Platform for the duration of your Subscription, solely for the operation of your salon, stylist or beauty business.

2.1 Service tiers

The Platform is offered in tiers (Free, Growth, Professional and Scale). Features included in each tier are listed on our website and may evolve over time. We will give you reasonable notice of material reductions in features available on your tier.

2.2 Booking trial

New users receive a 14-day trial of the booking system. At the end of the trial, the booking system will become unavailable unless you upgrade to a paid tier. Bookings created during the trial remain in your account but cannot be modified through the Platform without an active paid Subscription.

2.3 Connected Channels

The Platform relies on APIs provided by Meta, WhatsApp, SMS aggregators, email providers and other third parties. We do not control these services. We are not liable for outages, policy changes, account suspensions or rate limits imposed by those providers, although we will work in good faith to restore connectivity where possible.

Each Connected Channel has its own terms and policies. By using a Connected Channel through the Platform, you agree to be bound by the relevant third-party terms in addition to these Terms, including:

• The acceptable-use policies of any SMS carrier or aggregator we use to deliver SMS.
• The acceptable-use policy of our email provider (currently Mailgun).

If a Connected Channel changes its policies, you agree to comply with the updated policies as a condition of continued use of that channel through the Platform. We may pass on, restrict or modify functionality where required by a Connected Channel.

2.4 Beta features

Features marked “beta”, “preview” or similar are provided as-is, without any service-level commitment, and may be modified or withdrawn at any time without notice.

2.5 Service availability

We aim for high availability but do not guarantee the Platform will be uninterrupted or error-free. We may schedule maintenance windows and will try to perform them outside peak salon hours where reasonably practicable.

3. Acceptable Use

You agree not to use the Platform to:

• send spam, unsolicited bulk messages, or marketing messages to anyone who has not given you a lawful basis to contact them under PECR, UK GDPR or applicable consumer law;
• send harassing, threatening, deceptive, defamatory, obscene or otherwise unlawful content;
• impersonate any other person, business or stylist, or misrepresent your relationship with any End Client;
• breach any policy of a Connected Channel, including Meta Platform Terms, WhatsApp Business Policy, or carrier SMS rules;
• scrape, reverse-engineer, decompile or attempt to extract source code from the Platform;
• use the Platform to operate a business other than a salon, stylist, beauty or grooming-related business without our written consent;
• upload malware, attempt to penetrate our systems, or interfere with the Platform’s operation;
• use the booking trial repeatedly across multiple accounts to avoid paying for the booking system;
• resell, sublicense or share access to the Platform with third parties outside your business.

We may suspend or terminate your account immediately if we reasonably believe you are in breach of this section, without refund of Fees paid.

4. Subscription, Billing & Cancellation

4.1 Subscription term

Paid Subscriptions are billed monthly in advance and renew automatically each month until cancelled. The Subscription is rolling — there is no minimum term beyond the current monthly billing cycle.

4.2 Fees and price changes

Fees for each tier are displayed on our website and in your account dashboard. We may change Subscription fees with 30 days’ notice by email. If you do not accept the new price, you may cancel before it takes effect; continued use after the change constitutes acceptance.

4.3 Payment

You authorise us, and our payment processor, to charge your payment method for all Fees due. If a charge fails, we may retry, suspend access until payment is received, and terminate the Subscription if non-payment continues for more than 14 days.

4.4 Cancellation

You may cancel your Subscription at any time from your account settings. Cancellation takes effect at the end of the current billing month. You retain access until then.

4.5 No refunds

Subscription Fees are non-refundable. Cancelling part-way through a billing month does not entitle you to a partial refund. This reflects the B2B nature of the Service and is agreed between us as commercial parties.

4.6 Suspension for non-payment

If your payment fails or your account falls into arrears, we may suspend your access to the Platform. During suspension, automated messages, booking confirmations and email sends will not run. We are not liable for any loss arising from suspension caused by your non-payment.

4.7 Taxes

All Fees are exclusive of VAT and other applicable taxes, which will be added where required by law.

5. Payments via Stripe Connect

5.1 You are the merchant

When your End Clients pay you for your services through the Platform, the payment is processed by Stripe under a Stripe Connect arrangement. You are the merchant of record. You are solely responsible to your End Client for the goods and services you provide.

5.2 Stripe terms

To receive payments through the Platform, you must accept and comply with Stripe’s Connected Account Agreement and Stripe Services Agreement. If Stripe suspends, restricts or closes your connected account, we may be unable to facilitate payments and we are not liable for the consequences.

5.3 Commission

We deduct a Commission, expressed as a percentage of each successful transaction, before transferring the balance to your Stripe account. The current Commission rate is shown in your account dashboard. We may change the Commission rate with 30 days’ notice by email.

5.4 Refunds, chargebacks and disputes

You are solely responsible for handling refund requests, chargebacks, disputes and complaints from your End Clients. Where a refund or chargeback occurs:

• the full transaction amount, plus any chargeback or dispute fees imposed by Stripe or the card networks, is your liability;
• Commission already paid to us on that transaction is non-refundable;
• we may recover any amounts owed by deducting from future payouts, charging your payment method on file, or invoicing you directly.

5.5 Tax obligations

You are responsible for accounting for VAT and any other taxes due on the services you sell to your End Clients. We are not your tax adviser.

5.6 Anti-money-laundering

You agree to provide accurate identity and business information for Stripe’s verification checks. You must not use the Platform to process payments unrelated to your salon services or to facilitate any fraudulent or unlawful transaction.

5A. Meta & WhatsApp — Specific Obligations

Meta requires us, as a Tech Provider, and you, as the business operator, to follow specific rules when using the Instagram, Facebook Messenger and WhatsApp Business products. This clause sets out the rules that apply to you. They are in addition to the general Acceptable Use clause.

5A.1 Opt-in for WhatsApp

Before sending any WhatsApp message to an End Client through the Platform, you must obtain that End Client’s prior, explicit, channel-specific opt-in to receive WhatsApp messages from your business. The opt-in must:

• be obtained through a clear, affirmative action by the End Client (no pre-ticked boxes);
• clearly identify your business as the sender;
• describe the categories of message the End Client will receive (for example, booking confirmations, reminders, marketing);
• be specific to WhatsApp — prior consent for SMS, email or any other channel does not count as WhatsApp opt-in;
• be recorded with date, time and the wording shown to the End Client.

You must keep auditable records of opt-in for at least the duration of the End Client relationship plus three years, and must produce them to us or to Meta on request. We may suspend WhatsApp messaging from your account if we receive evidence of non-compliant opt-in collection.

5A.2 Message templates and content

Business-initiated WhatsApp messages (including booking confirmations, reminders and marketing) must use templates that have been authored and approved through Meta’s template-approval system. You are responsible for the content and accuracy of templates you submit. Misleading, deceptive or non-compliant templates may be rejected by Meta or removed by us.

You must not use WhatsApp through the Platform to send unsolicited messages, marketing to recipients who have not given valid opt-in, or any content prohibited by the WhatsApp Business Messaging Policy.

5A.3 Quality rating and suspension

Meta assigns a quality rating to each WhatsApp Business Account based on user feedback. If your quality rating drops, Meta may throttle, restrict or suspend your account. We will pass on any restrictions or suspensions imposed by Meta and we are not liable for the consequences. You agree to take reasonable steps to maintain a healthy quality rating, including limiting frequency, respecting opt-out requests promptly, and only sending messages relevant to your relationship with the End Client.

5A.4 Tech Provider role

In our relationship with Meta, we act as a “Tech Provider” and you act as the business operator. We process Meta and WhatsApp Business Solution data only on your behalf, on your instructions, to provide the Service to you, and for no other purpose. We maintain administrative, physical and technical safeguards meeting industry standards and applicable data security and privacy laws. The DPA in Schedule 1 governs this processing in detail.

5A.5 Meta’s 30-day deletion

Meta’s WhatsApp Cloud API automatically deletes message content and user identifiers from Meta’s servers approximately 30 days after delivery. This is a Meta policy, not ours. Within the Platform, we retain conversation history under the retention rules in clause 12. As a result, conversations visible in your unified inbox may be older than copies held on Meta’s servers.

5A.6 Regulated and prohibited use

You confirm that the salon, stylist, beauty or grooming services you provide are not within the categories of business that Meta restricts or prohibits on its platforms (such as gambling, regulated pharmaceuticals or adult services). If your business model changes, you must notify us before continuing to use Meta or WhatsApp through the Platform.

5A.7 Pass-through of Meta requirements

Meta may update its terms, policies or technical requirements at any time. You agree that we may pass on those updates to you, and you agree to comply with them as a condition of continued access to Instagram, Messenger and WhatsApp through the Platform. Where compliance requires us to modify or remove functionality, we will give you reasonable notice where practicable.

6. Domains & Email Infrastructure

6.1 Domain registration

On the Professional tier, we may register a domain name on your behalf via our domain reseller (currently 20i). The domain is registered in your name where the registry permits. Domain registration is included in the cost of the tier; if you cancel your Subscription, the domain remains in your name but you become responsible for renewal fees and any transfer-out costs from the date of cancellation.

6.2 DNS and email setup

We configure email infrastructure on a “sw.” subdomain of your chosen domain (for example sw.yourbusiness.com) to avoid disrupting any existing website or mailboxes on the root domain. By using the email feature you authorise us to add and manage MX, SPF, DKIM, DMARC and verification records on the subdomain, and to set up forwarding from the root domain where applicable.

6.3 Existing domains

If you connect an existing domain you already own, you are responsible for the accuracy of DNS records you create yourself by following our setup wizard. We are not liable for misconfiguration of records on your root domain or for any disruption to your existing website or email caused by changes you make.

6.4 Email deliverability

Email deliverability depends on factors outside our control, including recipient mail server policies, your sending behaviour and complaint rates. We do not guarantee delivery of any particular email. Repeated high bounce or complaint rates may result in suspension of email features.

6.5 Email content

You are responsible for the content of all emails sent from your domain through the Platform. You must comply with PECR, UK GDPR, the CAN-SPAM Act (where applicable) and the policies of our email provider (currently Mailgun).

7. AI Agents (Scale Tier)

AI Agents on the Scale tier operate differently depending on the Connected Channel. The differences reflect the policies of each channel and your obligations to those providers.

7.1 What AI Agents do

AI Agents may, depending on configuration and channel: respond to messages from your End Clients, handle routine booking enquiries, answer FAQs, draft replies for you to review, and route conversations to you when escalation is needed.

7.2 Autonomous mode — Instagram, Messenger, SMS and email

On Instagram, Facebook Messenger, SMS and email, AI Agents may operate in autonomous mode, sending replies on your behalf without prior human review. The Platform will clearly disclose to End Clients that they are interacting with an automated system. You agree not to disable or attempt to circumvent these disclosures.

7.3 Assist-only mode — WhatsApp

WhatsApp does not permit autonomous AI to be the primary functionality of a business messaging service. On WhatsApp, AI Agents operate in assist-only mode: they may draft replies, suggest templates, classify intent, summarise conversations and surface information to you, but no message is sent on WhatsApp without explicit human review and approval. We may technically enforce this restriction within the Platform.

This restriction reflects Meta’s WhatsApp Business Solution Terms. If those terms change, we may relax or modify this restriction; if they tighten, we may impose further restrictions.

7.4 Transparency to End Clients

Where AI Agents send or substantively shape a message on your behalf, the Platform will clearly disclose to the End Client that an automated system is involved. You agree not to disable or attempt to circumvent these disclosures, and not to instruct AI Agents to deny being automated when asked directly by an End Client.

7.5 Your responsibility for AI output

AI Agents act on your behalf. You are responsible for the messages they send (or that you approve and send), the bookings they confirm and any commitments they appear to make to End Clients. You should review AI Agent settings, escalation rules and templates regularly.

7.6 Limitations

AI Agents may produce errors, including incorrect availability, misunderstood requests or unintended tone. We do not warrant that AI Agent output will be accurate, complete or appropriate in every case. You must monitor your inbox and intervene where needed.

7.7 Training data and aggregated insights

We do not use the content of your End Client conversations to train general-purpose AI models offered to other customers, and we contractually require our AI providers not to retain Customer Content for their own training purposes.

We do, however, generate and use Anonymised Aggregated Data (as defined in clause 1) to train, evaluate and improve our own machine-learning models, including AI Agents and routing algorithms. The full scope of how we use Anonymised Aggregated Data is set out in clause 8A and in our Privacy Policy.

8. Customer Content & Intellectual Property

8.1 You own your content

As between you and us, you own all Customer Content. We claim no ownership over your messages, contact lists, booking records, photos, branding or other material you put into the Platform.

8.2 Licence to us

You grant us a worldwide, non-exclusive, royalty-free licence to host, copy, transmit, display and process Customer Content solely to operate, secure, support and improve the Platform and to provide the Service to you. This licence ends when the relevant Customer Content is deleted, subject to clause 12 (Data Retention).

8.3 Our intellectual property

We own the Platform, including its software, design, brand, trade marks (including the Salon Whisper name and logo) and all related intellectual property. Nothing in these Terms transfers any of our intellectual property to you. You may not use our brand assets without written permission.

8.4 Feedback

If you give us feedback, suggestions or feature requests, you grant us a perpetual, irrevocable, royalty-free licence to use them without obligation to you.

8A. Anonymised Aggregated Data

This clause is important. We want to be transparent about it.

8A.1 Our right to generate Anonymised Aggregated Data

As part of operating and improving the Platform, we generate Anonymised Aggregated Data from Customer Content and End Client Data. The anonymisation process strips all direct and indirect identifiers and aggregates the data with data from other Customers, so that no individual or specific salon can reasonably be re-identified. We follow ICO guidance on the threshold for anonymisation.

8A.2 What we use it for

Once data has been anonymised and aggregated to this standard, it is no longer personal data under UK GDPR and we may use it for any lawful purpose, including:

• calculating industry benchmarks (such as average response times, booking conversion rates, no-show rates by region or service type);
• producing trend reports and insights about the salon and beauty industry, which we may publish, license or sell to industry bodies, publishers and other businesses;
• sharing with academic, research or commercial partners for industry research and analysis;
• training, testing, evaluating and improving our own machine-learning models, including AI Agents and analytics features;
• designing and developing new products, services and features.

8A.3 What we do not do

We do not, and will not:

• sell identifiable Customer Content or End Client Data;
• share identifiable conversations, contact lists or booking history with third parties for marketing purposes;
• use Customer Content or End Client Data to compete with you or solicit your End Clients on our own behalf;
• provide End Client Data to general-purpose AI providers for use in training models offered to others.

8A.4 Your acknowledgement

By using the Platform you acknowledge our right to generate and use Anonymised Aggregated Data as set out in this clause. This right survives termination of these Terms. Because Anonymised Aggregated Data is no longer personal data, the deletion provisions in clause 12 do not apply to it.

8A.5 Relationship with the DPA

Nothing in this clause is intended to conflict with our obligations as a processor under Schedule 1. Until data has been anonymised and aggregated to the standard set out in clause 1, it remains personal data and is processed strictly in accordance with the DPA.

9. Privacy

Personal data we hold about you (the Customer) and about visitors to our website is handled in accordance with our Privacy Policy, available at salonwhisper.com/privacy, which forms part of these Terms.

Personal data we process on your behalf about your End Clients (“End Client Data”) is handled under our role as processor and is governed by the DPA in Schedule 1.

In summary:

• We act as data controller for Customer and Visitor personal data; the Privacy Policy explains what we collect, why, and your rights.
• We act as data processor for End Client Data, on your documented instructions, in line with Article 28 of the UK GDPR.
• We use Anonymised Aggregated Data as described in clause 8A and in our Privacy Policy.

To exercise any rights under UK GDPR, including access, rectification or erasure, contact us at support@salonwhisper.com. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk).

10. Warranties & Disclaimers

10.1 Our warranty

We warrant that we will provide the Service with reasonable care and skill.

10.2 Disclaimers

Except as expressly stated in these Terms, the Platform is provided “as is” and “as available”. To the maximum extent permitted by law, we exclude all other warranties, conditions and representations, whether express or implied, including any implied warranties of satisfactory quality, fitness for a particular purpose, non-infringement or that the Platform will be uninterrupted, secure or error-free.

10.3 No advice

Nothing on the Platform constitutes legal, tax, accounting, financial or professional advice. You are responsible for your own compliance obligations, including consumer protection, advertising standards, employment law and tax.

11. Limitation of Liability

11.1 Nothing excluded

Nothing in these Terms limits or excludes our liability for death or personal injury caused by our negligence, fraud or fraudulent misrepresentation, or any other liability that cannot be limited or excluded by law.

11.2 Excluded losses

Subject to clause 11.1, neither party is liable to the other for: loss of profits, loss of business, loss of revenue, loss of anticipated savings, loss of goodwill, loss or corruption of data, or any indirect or consequential loss, however arising.

11.3 Cap

Subject to clauses 11.1 and 11.2, our total aggregate liability arising out of or in connection with these Terms, whether in contract, tort (including negligence), breach of statutory duty or otherwise, is limited to the total Fees paid by you to us in the 12 months immediately preceding the event giving rise to the claim.

11.4 Third-party services

We are not liable for any loss caused by acts or omissions of third parties, including Connected Channels, Stripe, Mailgun, 20i, telecoms carriers or AI model providers. Where any such third party causes loss, your remedy is against that third party, not us.

12. Term, Termination & Data Retention

12.1 Term

These Terms apply from the date you create an account and continue until terminated by you or us in accordance with this clause.

12.2 Termination by you

You may terminate at any time by cancelling your Subscription from your account settings. Free accounts may be closed at any time on request.

12.3 Termination by us

We may suspend or terminate your account on notice if you breach these Terms, fail to pay Fees, or use the Platform in a way that exposes us to legal or reputational risk. We may also terminate on 30 days’ notice for any reason.

12.4 Effect of termination

On termination, your right to use the Platform ends. You should export your data before termination takes effect using the export tools provided in your account.

12.5 Data retention

We retain your account data and Customer Content for the duration of your Subscription. After cancellation or termination, we keep your data for a 90-day grace period so you can reactivate your account or export data. After 90 days, we will delete your account data and Customer Content from active systems, with deletion from backups completing within a further 30 days as backups cycle out.

12.6 Earlier deletion

You may request earlier deletion at any time by emailing support@salonwhisper.com. We will action verified deletion requests within 30 days, except where we are required to retain certain records by law (such as tax records).

12.7 Survival

Clauses dealing with payment of outstanding Fees, intellectual property, confidentiality, data protection, liability, indemnities and governing law survive termination.

13. General

13.1 Changes to these Terms

We may update these Terms from time to time. Material changes will be notified by email at least 30 days before they take effect. Continued use of the Platform after changes take effect constitutes acceptance.

13.2 Notices

Notices to you will be sent to the email address registered to your account. Notices to us must be sent to hello@salonwhisper.com and, for legal notices, also to our registered office.

13.3 Assignment

You may not assign or transfer your rights under these Terms without our written consent. We may assign or transfer our rights, including in connection with a merger, acquisition or sale of assets.

13.4 Entire agreement

These Terms (including the DPA in Schedule 1 and the sub-processor list in Schedule 2) form the entire agreement between us regarding the Platform and supersede any prior arrangements.

13.5 No partnership

Nothing in these Terms creates a partnership, joint venture, agency or employment relationship between us.

13.6 Third-party rights

A person who is not a party to these Terms has no rights under the Contracts (Rights of Third Parties) Act 1999 to enforce any term.

13.7 Severance

If any provision of these Terms is held invalid or unenforceable, the rest of the Terms remain in force.

13.8 Force majeure

Neither party is liable for failure or delay caused by events beyond its reasonable control, including outages of third-party services, internet failures, government action or natural events.

13.9 Governing law and jurisdiction

These Terms are governed by the laws of England & Wales. The courts of England & Wales have exclusive jurisdiction to settle any dispute arising out of or in connection with them.

Schedule 1 — Data Processing Agreement

This Schedule forms part of the Terms and applies whenever we process personal data on your behalf in connection with the Platform. It is intended to satisfy Article 28 of the UK GDPR. In this Schedule, terms such as “controller”, “processor”, “data subject”, “personal data” and “processing” have the meanings given in the UK GDPR.

A. Roles

You are the controller of End Client Data. We are the processor. Each party will comply with its obligations under data protection law.

B. Subject-matter and duration

Subject-matter: provision of the Platform. Duration: for the term of your Subscription plus the retention periods set out in clause 12.

C. Nature and purpose of processing

We process End Client Data to operate the unified inbox, deliver and receive messages across Connected Channels, run the booking system, send transactional and marketing emails on your behalf, operate AI Agents (where enabled), and provide support, analytics and security.

D. Types of personal data and categories of data subject

• Categories of data subject: your End Clients, prospective clients, and your staff who use the Platform on your behalf.
• Types of personal data: identifiers (name, email, phone), message content, booking history, payment metadata, IP address, device information, and any other personal data you choose to upload.
• Special category data: not intentionally processed. You must not upload special category data (such as health information) except to the limited extent necessary for salon services and only where you have a lawful basis under UK GDPR Article 9.

E. Our obligations

• Process End Client Data only on your documented instructions, including the instructions set out in these Terms.
• Ensure that personnel authorised to process End Client Data are bound by confidentiality.
• Implement appropriate technical and organisational measures to protect End Client Data, including encryption in transit, access controls, secure infrastructure and regular security review.
• Assist you, taking into account the nature of processing, with data subject rights requests and with data protection impact assessments and prior consultations as far as reasonably possible.
• Notify you without undue delay (and in any event within 72 hours where feasible) on becoming aware of a personal data breach affecting End Client Data.
• Make available all information reasonably necessary to demonstrate compliance with Article 28 obligations and allow for and contribute to audits, including inspections, conducted by you or an auditor mandated by you, on reasonable notice and subject to confidentiality (we may satisfy audit requests through summary reports or third-party certifications where available).

Meta and WhatsApp Business Solution Data. Where we process data obtained from Meta’s Instagram, Messenger, or WhatsApp Business products on your behalf (“Business Solution Data”), we act as a Tech Provider in our relationship with Meta. We use Business Solution Data only on your behalf, on your instructions, to provide the Service to you, and for no other purpose. We maintain administrative, physical and technical safeguards meeting industry standards and applicable data security and privacy laws. This commitment is in addition to, and not in substitution for, our other obligations under this DPA.

F. Your obligations

• Ensure you have a lawful basis for collecting, using and uploading End Client Data to the Platform.
• Provide End Clients with appropriate privacy information, including the fact that their data is processed by Salon Whisper as your processor.
• Obtain any consents required for marketing messages, automated decision-making or use of AI Agents.
• Configure your account, retention and security settings appropriately.

G. Sub-processors

You give us general authorisation to engage sub-processors. The current list is in Schedule 2. We will give you at least 14 days’ notice of changes (by email or in-product notice) and you may object on reasonable data-protection grounds. If we cannot accommodate your objection, you may terminate the affected part of the Service.

H. International transfers

Where we transfer End Client Data outside the UK, we do so under an adequacy decision, the UK International Data Transfer Agreement, the UK Addendum to the EU SCCs, or another lawful transfer mechanism.

I. Return or deletion

On termination, we will delete or return End Client Data in accordance with clause 12, unless retention is required by law.

J. Liability

Liability under this DPA is subject to the limitation of liability in clause 11.

Schedule 2 — Sub-processors

We engage sub-processors to help deliver the Platform. Our current sub-processor list is published and maintained at salonwhisper.com/sub-processors and is incorporated into these Terms by reference.

The published list includes, for each sub-processor: the name of the provider, the purpose of processing, the country of processing, and the international transfer mechanism (where applicable).

Notification of changes

We will give Customers at least 14 days’ notice of any addition or replacement of a sub-processor that processes End Client Data, by email or in-product notification. You may object to a new sub-processor on reasonable data-protection grounds during the notice period in accordance with clause G of Schedule 1.

How to subscribe to updates

To be notified by email when the sub-processor list changes, email support@salonwhisper.com with the subject line “Subscribe — sub-processor updates”.

Contact

Salon Whisper Ltd

Registered office: 66 Airfield Way, Nottingham, United Kingdom, NG15 6WZ

Company number: 17168341

General: hello@salonwhisper.com

Privacy / data: support@salonwhisper.com