Privacy Policy

When you book an appointment, the salon (the owner) decides what data it keeps about you and what it is used for. Virobook provides the software to the salon and stores the data on its behalf.

For data about the users of the software itself, meaning owners and salon staff, Virobook is responsible for the processing.

–Booking details: first and last name, phone number, email address and any note you write.

–Appointments: service, employee, date and time, status (booked, cancelled, completed), a rating and comment if you leave one, and loyalty stamps.

–Account: email and password (the password is stored only in encrypted form) or the details from signing in with a Google or Apple account.

–Notifications: the history of messages we send you and a device identifier for push notifications, if you turn them on.

–Technical data: your chosen language and sign-in details, stored in your browser or the app so the site works.

When you sign in with a Google or Apple account, we receive only your name, email address and the account’s unique identifier. We use them solely to recognise you and create your account with the salon.

We do not access your contacts, files, calendar or any other data in those accounts. We do not sell data received from Google, share it for advertising, or use it for anything other than signing in.

–to book, confirm, change or cancel an appointment;

–to send you a confirmation, a reminder before the appointment and notices about it, including a waiting-list offer;

–so the salon can keep a record of clients and appointments, and send a message if the client allowed it;

–to protect the software from abuse and keep it running.

We do not sell your data and do not use it for third-party advertising.

The salon you book with, meaning the owner and the staff who work with you, can see your data. Some processing is handled by service providers that help the software run:

–server hosting, where the data is stored;

–Google Firebase, to send push notifications to your phone;

–an email delivery provider, for confirmations and reminders;

–Google and Apple, for signing in with their accounts, if you choose that option.

We may also disclose data to a competent authority when the law requires it.

We keep data while you have an account or while the salon is an active user of the software, and as long as needed for appointment records. When you ask for deletion, we remove or anonymise the data, except what we must keep by law.

Under the Serbian Personal Data Protection Law and the General Data Protection Regulation (GDPR), you can ask for access to your data, correction, deletion, restriction of processing and data portability, and you can object to processing. Where processing is based on your consent, you can withdraw it at any time.

You can also complain to the Commissioner for Information of Public Importance and Personal Data Protection of Serbia, or to your local data protection authority.

The connection to the site and the app is encrypted, passwords are stored only in encrypted form, and only authorised people can access data. No system is completely secure, but we protect data with reasonable technical and organisational measures.

The software is not intended for children under 16. An appointment for a child is booked by a parent or guardian.

We may update this policy from time to time. The date of the last change is shown at the top of the page. For larger changes we will let you know on the site or by email.