Introduction
Nibaki ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our website, booking and management platform, and related services (the "Service").
This policy applies to business users (e.g. salons, spas, wellness centers) who sign up for Nibaki, as well as to visitors of our marketing website. If you use Nibaki to manage your business, you may also collect personal data from your own customers (e.g. for bookings); you are responsible for handling that data in line with applicable law and for informing your customers about your practices. We process data as described in this policy and in our role as a service provider to you.
Data We Collect
We collect information you provide directly (e.g. when you create an account, fill out a demo form, or contact support), such as name, email address, phone number, business name and address, payment and billing details, and any content or data you upload (e.g. staff details, services, customer and booking information).
We automatically collect certain technical and usage data when you use the Service, including device and browser information, IP address, log data, and how you interact with our product (e.g. pages visited, features used). We may use cookies and similar technologies as described in our Cookie Policy.
How We Use Your Data
We use the data we collect to provide, operate, and improve the Service; to process transactions and send related communications; to authenticate you and manage your account; to respond to your requests and support needs; and to send product updates, security alerts, and (with your consent where required) marketing communications.
We also use data for analytics, to understand how the Service is used, to detect and prevent fraud or abuse, and to comply with legal obligations. We may aggregate or de-identify data for product improvement and benchmarking, in which case it is no longer treated as personal data under this policy.
Data Retention
We retain your data for as long as your account is active or as needed to provide the Service and fulfil the purposes described in this policy. We may retain certain data after account closure for legitimate business purposes (e.g. resolving disputes, complying with legal obligations, enforcing agreements). When we no longer need the data, we will delete or anonymize it in accordance with our retention practices.
Your Rights
Depending on where you live, you may have the right to access, correct, delete, or port your personal data, to restrict or object to certain processing, and to withdraw consent where processing is based on consent. You can exercise many of these rights through your account settings or by contacting us.
You may also have the right to lodge a complaint with a supervisory authority. We will not discriminate against you for exercising your privacy rights. If you are in the European Economic Area or the United Kingdom, our legal bases for processing include performance of a contract, legitimate interests, consent, and legal obligation, as applicable.
Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure; we encourage you to use a strong password and to keep your account credentials confidential.
Children
The Service is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will take steps to delete it.
International Transfers
Your data may be processed in countries other than your own. We ensure that such transfers are subject to appropriate safeguards (e.g. standard contractual clauses or adequacy decisions) where required by applicable law.
Changes to This Policy
We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the effective date. For material changes, we will provide additional notice (e.g. by email or in the Service) where required by law.
Your continued use of the Service after the effective date of the updated policy constitutes acceptance of the changes. We encourage you to review this policy periodically.
Contact Us
If you have questions about this Privacy Policy or our data practices, or wish to exercise your rights, please contact us using the details provided on our website or in the Nibaki app.
Thank you for trusting Nibaki with your business.