Privacy Policy

1. Information We Collect

When you interact with our WhatsApp automated flows, salon/clinic booking systems, or owner dashboard, we collect only the minimal data necessary to fulfill your appointment requests:

• WhatsApp Contact Details: Your WhatsApp phone number (encrypted at rest and blind-indexed) and profile name.
• Appointment & Service History: Requested service packages, assigned staff member, scheduled date/time, and booking confirmation status.
• Conversational Messages: Interactive messages, flow selections, and customer responses submitted during the WhatsApp chat session.
• Connected Calendar Metadata: Calendar event IDs and timestamps synchronized with connected Google Calendar accounts.
• Demographic Information: Age or gender only when explicitly requested by specialized healthcare or wellness providers for service customization.

2. How We Use Your Information

We process your data strictly on the basis of contractual necessity and legitimate business interests:

• To schedule, confirm, modify, or cancel service appointments.
• To send automated transactional reminders and booking status receipts via WhatsApp.
• To prevent appointment no-shows and coordinate staff availability for salon and clinic owners.
• To respond to customer support inquiries and provide technical assistance.

We do NOT sell, rent, trade, or monetize your personal data to any advertisers, brokers, or external third parties.

3. Third-Party Data Sharing & Processors

We share data only with verified enterprise infrastructure providers required to operate LoomenDesk:

• Meta Platforms, Inc. (WhatsApp Cloud API): We share message payloads and phone numbers with Meta Platforms, Inc. strictly as necessary to deliver conversational WhatsApp messages to you.
• Google LLC (Google Calendar API): If enabled by the business owner, appointment timestamps are synchronized to Google Calendar.
• Enterprise Cloud Infrastructure: Database and server hosting protected by AES-256 field-level encryption, multi-tenant row-level security (RLS), and strict access controls.

4. Data Retention Schedule

We maintain a clear data lifecycle policy:

• Active Booking Records: Stored for up to 12 months following your last appointment to facilitate repeat bookings and customer support, or until a deletion request is received.
• Conversational Chat Logs: Archived after 90 days of inactivity and permanently expunged.
• Backup Archives: Encrypted backup snapshots rotate on a rolling schedule and are permanently overwritten within 90 days.

5. User Rights & Data Deletion (GDPR / CCPA / Meta)

In accordance with Meta Platform Terms, GDPR, CCPA, and Indian IT data protection frameworks, you have full ownership of your data:

• Right to Access & Portability: You may request a copy of your personal data stored in our system.
• Right to Rectification: You may request immediate correction of inaccurate data.
• Right to Opt-Out / Revoke Messaging Consent: You may instantly revoke consent and stop receiving transactional notifications or appointment reminders at any time by replying "STOP" or "UNSUBSCRIBE" in any active WhatsApp conversation.
• Right to Erasure (DELETE MY DATA): You can request immediate permanent deletion of your phone number, name, and booking history at any time by visiting our Data Deletion Instructions, sending "DELETE MY DATA" or "STOP" in WhatsApp, or emailing admin@loomenflylabs.com.
• Timeline: All deletion requests are processed within 7 to 14 business days (guaranteed complete purge within 30 days).

6. Grievance Redressal Officer (India IT Rules 2021)

In accordance with the Information Technology Act, 2000 and Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the designated Grievance Officer for LOOMENFLY LABS LLP is: