Privacy policy

Spot is operated by BTI Labs, SIREN 105 132 799, SIRET 10513279900013.

For questions about personal data or to exercise your rights, contact contact@spotks.com.

Spot processes data needed for the marketplace: client account, identity, email, phone, preferences, viewed salons, bookings, contact requests and support exchanges.

For salons and partners, Spot may process business, service, team, schedule, public visibility, subscription and billing data.

Technical data such as IP address, device information, logs, page events and diagnostics may be processed for security, maintenance and service improvement.

Data is used to provide salon search, manage accounts, prepare or confirm bookings, send useful notifications, answer support, secure the service and improve the platform.

Booking data may be shared with the relevant salon so the requested appointment can be fulfilled.

Billing data related to Spot Pro may be shared with Paddle or providers needed for payment, order support, fraud prevention and applicable obligations.

For a booking without an account, Spot collects the first name, last name, email address, phone number, appointment information and the history needed to manage it. The technical data described above may also be processed for security, integrity, abuse prevention, maintenance and service improvement.

This data is used to create the appointment, send the necessary information to the salon, provide the confirmation and secure management link, notify a reschedule or cancellation, send the operational reminder and, when necessary, handle support or disputes.

The information needed for the appointment is accessible to the relevant salon and, depending on its organization, authorized members of its team. It is not made public.

Confirmation, management, reschedule, cancellation and reminder emails are directly related to the appointment. They are not newsletters or marketing communications.

The management link is personal and must be kept confidential. It remains usable according to the appointment lifecycle and the service’s technical rules; some actions may revoke or replace access. Data is retained according to the criteria described in the security and retention section.

Where applicable under the regulation, you may request access, correction, deletion, restriction, objection or portability of your personal data.

We may verify your identity and your connection to the account, booking or professional workspace before answering a request.

Spot applies technical and organizational measures such as encrypted transport, access controls, roles and security monitoring.

Data is retained for as long as needed for the service, support, security, billing and applicable legal obligations.