Privacy Policy

Who this applies to

This notice covers two groups: salon owners and staff who use Multiglow to run their business, and the customers who book appointments through a salon's Multiglow booking page. If you are a customer, the salon you booked with is who you dealt with directly — Multiglow provides the software they use to manage that relationship.

What we collect

• Salon accounts: your name, email, phone, salon name and address.
• Customers: name, phone number, and — only if you choose to provide them — email and a birthday. We do not ask for IC number, race, or religion.
• Booking history: which services you booked, when, and with which stylist.
• Payment information for a salon's Multiglow subscription is handled by Stripe — we do not store card numbers ourselves.

Why we collect it

To run your booking, show it on the salon's calendar, send WhatsApp booking confirmations and reminders, and operate any loyalty programme the salon has turned on. We do not use your data for advertising, and we do not sell it.

Who we share it with

The salon you booked with can see your booking details — that is the point of the service. Beyond that, a small number of processors handle data on our behalf:

• Supabase — hosts our database and authentication (Singapore).
• Meta / WhatsApp Business — delivers booking confirmations and reminders.
• Stripe — processes a salon's subscription payment to Multiglow.
• Google Wallet — only if you choose to save a loyalty card to your phone.

Where your data is stored

Our database is hosted in Singapore, not Malaysia. Malaysia's PDPA permits transferring personal data abroad under conditions set out in the Act. If you are a distributor or larger organisation with your own data-residency requirements, contact us before signing any data-sharing agreement.

Your rights

Under the PDPA you can ask to see or correct the data we hold about you, and you can withdraw your consent to us processing it (Section 38) — after which we stop using it for that purpose. You can also ask us in writing to stop using your data for direct marketing (Section 43). Malaysian law does not give a blanket right to demand deletion the way some other countries' laws do; instead, we keep data only as long as it serves the purpose it was collected for, or as long as another law (such as tax record-keeping) requires. As a customer, you can ask for this at any time: every salon's booking page has a "Delete my data" link (/[salon]/my-data). Enter the mobile number you booked with and the salon is notified; they check with you that the request is really yours, then remove your name, phone, email and notes and cancel any upcoming bookings, within 21 days.

Children

Multiglow accounts are for adults. If a child is the one receiving a salon or grooming service booked through Multiglow, a parent or guardian should be the one making the booking and consenting on the child's behalf.

Contact

Questions about your data, or a request under any of the rights above, can be sent to [contact email — to be added].