1. Who we are
Yadah Braids is a salon operating in Mwenge, Dar es Salaam, Tanzania. For the personal data described in this notice, Yadah Braids acts as the data controller. You can contact us using the details at the end of this page.
2. Information we collect
When you request a booking or contact us, we may collect your name, phone or WhatsApp number, requested hairstyle, preferred date and time, inspiration or notes, and our communications with you. For salon operations we may also keep visit history, amounts and payment method, staff assignments and attendance. Our staff application stores account, device, activity and offline-sync information needed to keep salon records reliable. We do not ask for payment-card passwords or mobile-money PINs.
3. How we collect it
We receive information directly from you through our booking form, telephone, WhatsApp, social media or in person. Authorized salon staff may add or correct operational records while serving you. Our systems may automatically receive limited technical information such as browser type, device information, security logs and essential cookies.
4. Why we use your information
We use personal data to arrange and confirm appointments, provide salon services, contact you about your request, maintain accurate customer and business records, allocate staff work, calculate authorized salon reports, prevent misuse, secure the application and meet legal obligations. We rely on consent where required, steps taken at your request, performance of our service arrangement, legitimate salon administration and compliance with law.
5. Sharing and service providers
We limit access to authorized Yadah Braids personnel according to their role. We may use carefully selected providers for hosting, database, authentication, communications and technical support, including Hostinger and Supabase. We may also disclose information where Tanzanian law, a regulator or a lawful court order requires it. We do not sell personal data.
6. Storage and transfers
Our digital service providers may process or store data on infrastructure outside Tanzania. Where a cross-border transfer applies, Yadah Braids will follow the Personal Data Protection Act and applicable regulations, including appropriate safeguards and any approval or permit required by the Personal Data Protection Commission.
7. How long we keep it
Booking enquiries that do not become salon visits are normally reviewed for deletion or anonymisation within 24 months. Customer, staff, transaction and operational records are kept only while needed for service continuity, disputes, security, accounting and the retention periods required by Tanzanian law. When information is no longer needed, we delete or anonymise it securely.
8. Security
We use role-based access, authenticated accounts, encrypted HTTPS connections, protected database rules, audit information, device-aware sessions, backups and access restrictions. Offline staff records remain on the authorized device until they can sync securely. No system is completely risk-free, so we review safeguards and respond to suspected incidents promptly.
9. Your rights
Subject to the law, you may ask to be informed about processing; access, correct or erase your data; restrict or object to processing; receive portable data where applicable; withdraw consent; challenge relevant automated decisions; complain; or seek available remedies. We may need to verify your identity before acting on a request. Yadah Braids does not use customer data for decisions producing legal or similarly significant effects without human involvement.
10. Children
This website is not designed for a child to submit personal data independently. If a client is under 18, a parent or guardian should make the booking and provide only the information necessary for the salon service. Please contact us if you believe a child supplied information without proper authority.
11. Cookies and offline storage
The public website uses essential browser storage to remember language and theme. The protected staff application uses authentication cookies, local device storage and IndexedDB for secure sessions and offline work. We do not currently use third-party advertising trackers. You can clear ordinary website storage in your browser, but authorized salon records already synced to the database remain protected in the salon system.
12. Yadah Backups and Google Drive
Yadah Backups is Yadah Braids’ internal data-recovery application for its authorized account owner. It creates encrypted copies of salon records, which may include customer contact and booking details, service and payment history, staff records and account information. Customers do not need to connect a Google account. With the owner's consent, the app checks the connected Google account email to verify the destination and accesses only Drive files and folders created by or explicitly authorized for this app. It uploads encrypted backups, checks file metadata and downloads those backups to verify integrity or support recovery. It does not read unrelated Drive files, Gmail messages or Google Contacts. Google authorization credentials are kept private and allow access without repeated sign-in. Backup contents are encrypted before upload; decryption material is kept separately, and files are not made public. Google Drive stores encrypted files and limited file metadata. Authorized backup infrastructure may process records temporarily to create and verify exports, subject to access restrictions. We use Google account and file information only to provide, secure and maintain this backup and recovery service, not for advertising, sale or training AI models. Our use of Google API data follows the Google API Services User Data Policy, including its Limited Use requirements. Backups are retained only while needed for recovery, security and applicable record-keeping obligations; the authorized owner reviews and removes obsolete copies. The owner can revoke app access through Google Account permissions, which stops future access but does not automatically delete existing backups. Stored authorization credentials can be removed on request, and Drive copies can be deleted by their owner. Contact us about access, correction or deletion requests, including retained backup copies.
13. Changes and complaints
We may update this notice when our services or legal responsibilities change and will publish the new effective date here. Please contact Yadah Braids first so we can address a concern. You also have the right to complain to Tanzania’s Personal Data Protection Commission (PDPC).