Privacy policy

1. Who we are

Groomik (groomik.com) is an online service for groomers: an online booking page, a schedule and a client base. The service is provided by Rustem Galeev, Serbia.

For any question about personal data, write to 9273033@gmail.com.

2. Who is responsible for which data

We are responsible for the data of the salons and groomers who sign up to Groomik.

The data of a salon’s clients — the people who book with a groomer — is collected and used by the salon for its own work. The salon is responsible for it; Groomik stores and processes it only on the salon’s behalf, so that the service works. A client with a question about their data should contact the salon first; if you write to us, we will help the salon handle the request.

3. What data we process

• Salon account: email, name or salon name, phone, address, salon description and photo, opening hours, services and prices, staff names and schedules. With Google sign-in — the name and email of your Google account; we never receive your Google password.
• Salon clients: name, phone, email (if given), pets (name, species, breed, size, coat, photo, notes), appointments and visit history (services, prices, notes, before and after photos), consent records and language. This is entered by the client on the booking page or by the salon in its account, including by importing contacts.
• Service data: when the salon last opened its account, how it signed up, where the visitor came from before signing up (link, utm tags), anonymous usage events without names or phone numbers (e.g. “appointment created”), daily view counts of the booking page.
• Website statistics: on the home page and the sign-in and sign-up pages — anonymous visit statistics (Vercel Web Analytics), without cookies and without tracking across other sites.

4. Why

• To run the service: show the booking page, receive and store appointments, keep the schedule and the client base.
• To send service emails: email confirmation, password reset, a new-booking notice to the salon. To a client — emails about their appointment, only if they agreed to them.
• To protect the service from abuse and improve it using anonymous statistics.

Legal bases: performance of our contract with the salon (the terms of use), our legitimate interest (security and anonymous statistics), and consent where we ask for it.

We do not sell data, do not use it for advertising and do not share it with anyone except the providers below that run the service.

5. Who else processes data

• Supabase — database, account sign-in, photo storage.
• Vercel — website hosting and visit statistics.
• Resend — sending emails.
• Google — only if you sign in with Google.
• GitHub — storage of encrypted database backups (30 days); only we can decrypt them.

These providers’ servers may be located outside Serbia, including in the European Union and the United States. They process data only to run Groomik and under their own data protection terms.

6. Cookies

We use only necessary cookies and browser storage: the sign-in session, the chosen language, where you came from before signing up (30 days) and the account interface settings. There are no advertising or third-party tracking cookies.

7. How long we keep data

For as long as the salon account exists. After an account is deleted, we delete its data and its clients’ data within 30 days, except what the law requires us to keep. A client can ask the salon to delete their data at any time.

8. Your rights

Under the Law on Personal Data Protection of the Republic of Serbia, you can find out what data about you is stored, get a copy of it, including in a portable format, correct or delete it, restrict its processing, object to it and withdraw consent (this does not affect processing before the withdrawal).

Write to 9273033@gmail.com — we reply within 30 days. You can also lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs).

9. Security

The connection to the website is encrypted (HTTPS). Each salon’s data is available only to its own account — this is enforced in the database. Passwords are stored only in hashed form by the sign-in provider. Pet and visit photos open by a long, unguessable link.

10. Age

Only adults (18 and over) — salon owners and staff — may create a Groomik account.

11. Changes

If this policy changes materially, we will update the date at the top and let salons know by email or in their account.