Privacy Policy

PrimpHub is operated by LinkMind LTD ("PrimpHub", "we", "us"), a company registered in England and Wales, company number 17475817, registered office Flat 707, 9 Gilham House, Southlake Road, London SE28 0PE. For the information described in this policy LinkMind LTD is the data controller: we decide what is collected and why.

ICO registration: pending.

Our privacy team can be reached at support@primphub.com, or by post to LinkMind LTD, Flat 707, 9 Gilham House, Southlake Road, London SE28 0PE. Write "Privacy" in the subject line and we will route it to the right person. We aim to acknowledge within two working days and to resolve within one month.

Professionals and salons are separate controllers for the records they keep about their own clients: their private notes on a visit, allergies you have told them, photos they take of their work with your permission, and anything they record outside PrimpHub. When you book, you share your details with them under their own responsibility, and questions about how a particular professional uses your data should go to them first. This policy covers what PrimpHub itself does.

This policy applies to everyone who uses PrimpHub, and the sections below say when something applies only to one group:

• Customers — people who browse, book and pay for services.
• Professionals — people who list services and take bookings, whether independent, mobile, or part of a salon or studio.
• Team members — staff invited into a salon's PrimpHub account by its owner.
• Visitors — anyone reading primphub.com without an account.
• Emergency contacts — people named by a user in the home-visit safety check-in, who may receive a message from us without having an account.

PrimpHub is for people aged 18 and over. See Children.

Most of what we hold, you give us directly. Some is generated by using the service. A little comes from third parties you have chosen to connect. Category by category:

Account and identity — name, email address, phone number, password (held only as a one-way hash by our authentication provider; we cannot read it), profile photo, date you joined, preferred language, country and currency, the kind of account you hold, and whether your email and phone have been confirmed.

Customer beauty profile (optional) — allergies, hair type, skin type, sensitivities and preferences you choose to tell us, so a professional can prepare. You can leave every one of these blank.

Professional business profile — business name, description, category, services and prices, opening hours, business address and the coordinates it geocodes to, the area you cover for home visits, travel fee rules, portfolio photos and videos, cancellation and deposit policies, and your public page's URL slug.

Verification documents (professionals) — photo ID, business registration, insurance certificates, qualification certificates, DBS certificates and home-visit or infection-control training certificates you upload for a badge, plus the expiry dates and our decision.

Bookings — services, staff member, date and time, price, deposit, location type (salon or home visit), the address given for a home visit, notes either side adds, promo codes and loyalty points used, status changes (confirmed, moved, cancelled, no-show, completed) and who made each change, and the reason for a cancellation.

Payments — amounts, currency, payment method type, the last four digits and card brand, status, refunds, commission and the professional's share, and receipts and invoices. Full card numbers never reach PrimpHub: they go straight from your device to our payment provider, who gives us a token. For professionals: the bank account name, sort code and last four digits of the account payouts go to, and each payout's amount and status. A professional who accepts bank transfers can also give the account details customers should pay into — account name, sort code (or the local equivalent), full account number or IBAN, bank name and a payment reference — and those are stored in full, because a customer needs the whole number to pay.

Messages — the text, photos and attachments in conversations inside PrimpHub, when they were sent and read, and — where a professional has connected Instagram or Facebook — messages from those platforms that they have chosen to bring into their PrimpHub inbox.

Reviews — the rating and words you leave after an appointment, the professional's reply, and any report made about a review.

Cases, complaints and disputes — what you write when you raise a case, evidence you attach, the other party's response, our team's notes and the outcome.

Safety check-in (optional) — the emergency contact's name and phone number you provide, the check-in and check-out times, and — only if you switch it on — your device's location at check-in and when an alert is sent.

Calendar sync (optional, professionals) — when you connect Google Calendar or Apple Calendar, the busy/free times of the calendar you choose, and the details of PrimpHub bookings we write to it.

Social accounts (optional, professionals) — when you connect Instagram or Facebook, your account identifier, the access token Meta issues us, and the messages and comments the connection is for.

Device and usage — device type and operating system, app version, a push-notification token, IP address, the pages and screens you view and the actions you take, the time of each request, referring links and the campaign tags on them, crash reports and error logs, and — only with your permission — your approximate location to sort professionals by distance.

Communications with us — emails, support cases and anything you send to support@primphub.com.

Emergency contacts — the name and phone number of a person you have named; we hold no other information about them.

UK GDPR requires a lawful basis for each use. These are ours.

To provide the service you have asked for (performance of a contract):

• Creating and securing your account; signing you in; resetting your password.
• Showing professionals' profiles and availability; taking bookings; sending confirmations, reminders and changes.
• Processing payments, deposits, refunds and payouts, and producing receipts and invoices.
• Delivering messages between customers and professionals.
• Running the professional tools: calendar, clients, team, rota, stock, promotions, loyalty schemes, finance reports.
• Operating the free month and subscription plans, and billing for them.

Safety, trust and preventing abuse (our legitimate interests, and in some cases legal obligation):

• Verifying professionals' identity, insurance, qualifications and checks, and showing the badges that result.
• Handling complaints, disputes and reviews fairly, which means showing each side what the other has said.
• Detecting fraud, repeat no-shows, fake reviews and misuse; rate-limiting and blocking abusive traffic.
• Running the home-visit safety check-in and alerting the contact you named.
• Keeping an audit trail of privileged actions by our staff.

Improving PrimpHub (legitimate interest): measuring which features are used, fixing crashes and errors, understanding where bookings come from, and testing changes. We use aggregated figures wherever they answer the question.

Telling you about PrimpHub (consent, or legitimate interest for service messages): service messages — a change to these terms, a security notice, a reminder that your free month is ending — are sent because you have an account. Tips, offers and news are sent only if you have opted in, and every one has an unsubscribe link. Professionals may receive occasional messages about tools relevant to their business, which they can switch off in Notification settings.

Legal obligations: keeping financial records for tax and accounting law; responding to lawful requests from courts, police or regulators; complying with anti-money-laundering rules through our payment provider.

With your consent, which you can withdraw at any time: using your device location; sharing your location in a safety check-in; connecting a calendar or social account; analytics cookies on primphub.com; marketing email; using your photo in a professional's portfolio.

We do not make decisions about you by automated means that have legal or similarly significant effects. Search rankings and "top rated" sorts are based on distance, ratings and availability, not on profiling you.

Between customers and professionals. This is the point of the service, so it is worth being precise.

• A professional you book sees your name, profile photo, phone number (once confirmed), the booking details, notes you add, your beauty profile if you have filled it in, messages you send them, and your booking history with them. For a home visit they see your address once the booking is confirmed. They never see your payment card details or your other bookings.
• A customer sees a professional's public profile: business name, photo, description, services and prices, portfolio, opening hours, area and — once a salon booking is confirmed — the exact address, plus reviews, verification badges and reply messages. They never see a professional's payout bank details, earnings, other clients or private notes. The only bank details a customer sees are the ones a professional chooses to give for bank-transfer payments, and only once they have a booking with that professional.
• In a salon, team members and managers see the bookings and client records their role allows. The owner sets roles.
• When you raise a case, the other party is shown what you wrote so they can respond.

Service providers who process data for us under contract, only on our instructions and only for the purpose stated:

• Supabase — database hosting, authentication (including password hashing), and file storage for photos and documents. Hosted in London (AWS eu-west-2).
• Vercel — hosting the website and API. Our server code runs in London; pages and files are delivered through Vercel's worldwide network.
• Stripe — card, Apple Pay and Google Pay payments; refunds; payouts to professionals' bank accounts; identity checks required for payouts; and subscription billing for professionals.
• Paystack — card payments for bookings with Nigeria-based professionals, in place of Stripe, once card payments are available there (coming soon). Until then no Nigerian booking data is sent to Paystack.
• Resend — sending email (confirmations, receipts, reminders, security notices).
• Expo — delivering push notifications to the apps, together with Apple Push Notification service on iPhone and Firebase Cloud Messaging (Google LLC) on Android. FCM receives your device's push token and the notification itself. Expo also delivers app updates, so it sees your device's IP address and app version when the app checks for one.
• postcodes.io — turning a UK postcode into map coordinates. Only the postcode is sent.
• OpenStreetMap — Nominatim, its address search, turns an address outside the UK into map coordinates (only the address text is sent, from our servers); and the map shown on a profile on primphub.com is an embedded OpenStreetMap map, which your browser loads directly, so OpenStreetMap receives your IP address and the area shown.
• Google Maps (Google LLC) — the maps shown in the Android app, for example the location of an appointment. Google receives the map area being displayed and your device's IP address.
• Apple and Google — maps and directions in the iPhone app (Apple Maps) and when you open directions; calendar sync where you connect it; the app stores themselves.
• Meta (Instagram and Facebook) — only for professionals who connect an account, to read and reply to the messages they have chosen to bring in.
• PostHog — product analytics (which pages and screens are used, where bookings come from), only while we have it switched on. On primphub.com it runs only if you allow analytics cookies. Events our servers record — for example that a booking was made — are sent to PostHog with your account ID, not your name or contact details. Hosted in the EU.
• Sentry — error and crash reporting from our servers (only while it is switched on) and from the iPhone and Android apps, when the installed build includes the crash reporter. Reports go to Sentry's EU region. A report carries what went wrong, the app or site version, and the device or runtime, and may include your account ID. It does not include card details or passwords, and we do not turn on performance tracing or session replay.
• AfterShip or EasyPost — parcel tracking for shop orders, only where a seller ships with a tracking number and tracking is switched on. They receive the tracking number and carrier.

Emergency contacts you have named receive, by email, the fact that you have not checked out of a home-visit appointment, the appointment's time and place, and your location if you chose to share it.

Authorities and legal process — police, courts, regulators or HMRC when the law requires it, or when we believe in good faith it is necessary to prevent serious harm. We record every such disclosure.

A buyer — if PrimpHub is sold or merged, your data would pass to the new owner under this policy; we would tell you first.

We do not sell personal information, and we do not share it with advertisers or data brokers.

Location deserves its own section because it is sensitive and we use it in three distinct ways.

• Sorting by distance — with your permission, the app reads your device's approximate location to show who is nearest and how far away each professional is. This is used on your device for that sort and is not stored on our servers or shown to professionals. You can refuse and use the "search around" chip to type an area instead; that typed area is stored on your device only.
• Addresses — a professional's business address, and a customer's address for a home visit, are stored because the appointment happens there. Addresses are geocoded to coordinates so directions work.
• Safety check-in — only if you switch it on for a particular check-in, your location is recorded at check-in and when an alert is sent, shared with your named contact if an alert goes out, and kept with the check-in record (see How long we keep it).

On primphub.com we use a small number of cookies and local-storage keys:

• Strictly necessary — the session cookies that keep you signed in, short-lived security tokens that protect sign-in and the connection of a calendar or social account, your language and currency preference, and the record of your cookie choice. These cannot be switched off without breaking the site, so they do not need your consent.
• Attribution — no cookie. When you follow a professional's Instagram, TikTok or other tagged link, the channel name stays in the booking page's address and is saved with your booking, so the professional can see which links bring bookings. Nothing is stored on your device for this.
• Analytics — none at present. primphub.com does not currently load any analytics or other non-essential cookies, so there is nothing to consent to. If we switch analytics on, we will ask you first with a cookie banner and nothing will be set unless you allow it.

We do not use advertising cookies or third-party ad networks. The apps use equivalent on-device storage for the same purposes (sign-in, preferences, cached data) and never third-party advertising identifiers.

We keep data for as long as it is needed for the purpose it was collected, then delete or anonymise it. Where a period below says automatically, a job runs every day and enforces it; where it says by our team, a person does it, because no automatic rule can safely make that decision. The specific periods:

• Account and profile — while your account is open. After a confirmed erasure request, deleted or anonymised by our team within one month (see What deleting your account actually does).
• Bookings, payments, invoices and payouts — 6 years from the transaction, as UK tax and accounting law requires. When you erase your account these records are anonymised: the amounts, dates and services stay for the accounts; your name, contact details, home-visit address and booking notes are removed. An invoice already issued keeps the recipient details printed on it, because an issued invoice cannot be altered. At the end of the 6 years they are reviewed and deleted by our team, not automatically, because the ledger has to stay balanced while any refund, chargeback or tax question about them is still open.
• Messages — while both accounts exist. When you erase your account, the text of every message you sent is replaced with a note that it was deleted at your request, and the photos and videos you sent are deleted.
• Reviews — while the professional's profile exists. If you erase your account the words (and any photos) of your review are removed and the star rating stays, no longer linked to your name, because it is part of the professional's public record; you can ask us to remove the rating too.
• Cases, complaints and disputes — 6 years after the case is closed, so that a pattern of behaviour can be evidenced and legal claims defended. Then, automatically, the evidence files are deleted and what each side wrote is removed; the case reference, category, outcome and dates remain as an anonymous record that a case existed. Evidence you attached to a case is kept for this period even if you erase your account.
• Verification documents — while the document is current, and deleted automatically 12 months after it expires or after it is rejected, so a renewal or a dispute about a badge can be checked. The fact that a check was done, its outcome and its dates stay with the record. On erasure the documents are deleted at once — unless you are a party to an open case or dispute, in which case they are kept until it closes and then deleted automatically.
• Safety check-in location — deleted automatically 24 hours after you check out. If an alert was sent, it is kept for 30 days so the incident can be looked into, then deleted. A check-in nobody checked out of is closed automatically 24 hours after the appointment was due to end (30 days after the alert, if one was sent) and its location deleted. The check-in record itself (times, contact) stays with the appointment.
• Emergency contact details — until you remove them or erase your account.
• Calendar and social connections — until you disconnect them; tokens are revoked at that point. Calendar connections are also removed, and the Google grant revoked, when you erase your account.
• Analytics and usage — the events behind a professional's own statistics are kept in our database for 26 months (long enough to compare a year with the year before) and then deleted automatically. Events linked to your account are deleted when you erase it. In PostHog, for as long as PostHog's retention for our plan allows.
• Error and crash logs — at most 90 days, set in our error-reporting provider's retention settings rather than by a PrimpHub job.
• Server request logs — at most 30 days, set in our hosting provider's log retention rather than by a PrimpHub job.
• Audit log of staff actions — 6 years, for security and legal reasons, matching the financial records; then deleted automatically.
• Support emails — 2 years after the last message. These are held in our support mailbox, not in the PrimpHub database, and are deleted by our team.
• Backups — Supabase takes an encrypted backup of the database every day and keeps each one for 7 days before it is overwritten; deleted data may persist in a backup for that period and is not restored to the live service.

Under UK GDPR (and the EU GDPR where it applies) you have the right to:

• Access — a copy of the personal data we hold about you, and the information in this policy.
• Rectification — have inaccurate data corrected and incomplete data completed.
• Erasure — have your data deleted where there is no longer a reason to keep it (the financial retention above is such a reason; those records are anonymised instead).
• Restriction — have processing paused while a dispute about accuracy or lawfulness is resolved.
• Portability — receive the data you gave us in a machine-readable format, and have it sent to another service where technically feasible.
• Objection — object to processing based on legitimate interests, and to direct marketing at any time (which we will always stop).
• Withdraw consent — for anything based on consent, without affecting what was done before.
• Not be subject to automated decisions with legal or similarly significant effects. We make none.

Most of this you can do yourself, instantly. In the apps: More → Your data & privacy lets you download everything we hold as a file and request erasure; More → Profile corrects your details; Notification settings controls marketing; the phone's settings control location. On the website, Your data does the same. Anything else, email support@primphub.com.

We respond within one month. We may ask you to confirm your identity — usually by replying from the email on the account — so that we do not hand your data to someone else. We do not charge for requests unless they are manifestly unfounded or excessive.

If you are unhappy with how we handle your data or your request, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve it first.

Because people ask, precisely:

• Your sign-in is deleted, along with your device tokens, notification settings, connected calendars, favourites, saved basket, beauty profile and preferences, and the notifications we sent you.
• The files you uploaded are deleted from our storage: profile and cover photos, portfolio photos and videos, shop and product photos, photos and videos you sent in messages, verification documents and receipts. Two exceptions: evidence attached to a case stays with the case (see How long we keep it), and verification documents are kept while you are a party to an open case or dispute, then deleted automatically when it closes. A file that another account's page uses — for example a photo you uploaded to a salon's shop — stays on that page.
• The text of messages you sent is replaced, for you and for the other party, with a note that it was deleted at your request.
• Bookings and payments are anonymised: your name, contact details, home-visit address and the notes you wrote are removed from past bookings; the transaction stays for 6 years. Invoices already issued keep the details printed on them.
• The words and photos of reviews you wrote are removed; the star rating stays, no longer linked to your name, unless you ask for it to be removed too.
• The emergency contact you named for safety check-ins is deleted, along with any location still held.
• Usage events linked to your account are deleted.
• Cases are kept, with your name replaced, for the period above.
• For professionals: your public page and your shop are taken off the marketplace and stripped of your name, photos and description; your clients' booking history with you stays in their accounts; buyers' orders stay, without the product photos; you are removed from any salon team.

If a file cannot be deleted at that moment — a storage outage, say — what failed is recorded, our team is alerted, and the deletion is retried until it succeeds.

When you ask, we tell you about anything that should be dealt with first — upcoming bookings, an open case or dispute, a paid subscription that still renews (cancel it in Billing, or it will keep charging) — and what that means for the erasure. You can withdraw the request while it is pending.

• All data is encrypted in transit (TLS 1.2 or higher) and at rest.
• Passwords are never stored in readable form. New passwords must be at least 12 characters long, on the website and in the apps.
• Card numbers never touch our systems: they go straight to our payment provider — Stripe, or Paystack for Nigeria-based professionals — both PCI-DSS Level 1 certified. For the account your payouts go to, we keep only the account name, sort code and last four digits; the full number is held by the payment provider.
• Bank details a professional gives for customers to pay into by transfer are stored in full, in their own table rather than on the public profile. They are not encrypted separately by us: row level security lets only that professional's own session read them, the server shows them to a customer only after checking they have a booking, and our host encrypts the database at rest. Payout account numbers are not stored here at all — they stay with Stripe Connect, or with Paystack where Stripe does not operate. We keep the account name, the branch code and the last four digits so the professional can recognise the account.
• Access inside PrimpHub is limited by role. Our staff see only what their job needs, and privileged actions are recorded in an audit log.
• Sessions can be ended from Security in the app — sign out everywhere if a device is lost.
• Abusive traffic is rate-limited. Sign-in goes to our authentication provider, Supabase, which limits repeated attempts from the same place.
• Verification documents are stored in private buckets, opened only through signed, expiring links, and only by our verification team and the professional who uploaded them.
• Backups are encrypted and access-controlled.

No system is perfectly secure. If we discover a breach that puts you at risk we will tell you and the ICO without undue delay, and within 72 hours where the law requires it.

PrimpHub is for people aged 18 and over. We do not knowingly collect information about anyone under 18. If you are a parent or guardian and believe a child has created an account, email us and we will delete it. Professionals who treat minors do so under their own responsibility and outside PrimpHub's booking of the minor.

Our database and file storage (Supabase) are in London, and our server code (Vercel) runs in London. Some providers are based in, or process data in, the United States: Vercel itself, Stripe (payments), Expo and Google's Firebase Cloud Messaging (push notifications), Google Maps (maps in the Android app) and Resend (email). PostHog, when switched on, is hosted in the EU. Sentry (crash reports from the website, when switched on, and from the iPhone and Android apps) is configured for Sentry's EU region. Paystack, once it processes payments for Nigeria-based bookings, may process data outside the UK and EU, including in Nigeria. Each transfer is covered by the UK International Data Transfer Agreement or Addendum, the EU Standard Contractual Clauses or the UK–US data bridge, and by the provider's own security certifications. Where we serve professionals in other regions, their data is held in the same London systems.

Professionals' profiles may link to their own websites and social accounts; those sites have their own policies. When you connect Instagram, Facebook, Google Calendar or Apple Calendar, the platform's own terms apply to what happens on their side, and you can revoke PrimpHub's access in that platform's settings as well as in ours.

As a professional you are a controller for your clients' data. Practically, that means:

• Use client details only for the appointment and your relationship with that client. Do not export them to market unrelated businesses or share them with anyone else.
• Private notes are for professional purposes. Clients can ask you for a copy of notes about them.
• If a client asks you to delete their data, tell us as well as acting on your own records, so we can handle the PrimpHub side.
• Photos of a client's results need their permission before going in your portfolio or on social media.
• Team members you invite see client data according to the role you give them; you are responsible for setting roles appropriately and removing people who leave.
• When you connect Instagram or Facebook, messages from those platforms are stored in PrimpHub under this policy.

We provide the tools — exports, deletion, roles, audit — to help you meet these duties.

When we change this policy in a way that matters — a new purpose, a new category of data, a new kind of recipient — we will tell you in the app and by email before it takes effect, and where the law requires it we will ask for your consent. Minor clarifications are made without notice. The date at the top is the version in force, and earlier versions are available on request.