Privacy Policy

Effective date: 19 October 2026

This policy explains how Glow Assist handles personal data. It covers our website, our work for salons and barbers, and the messages we help them answer on Instagram.

1. Who we are

Glow Assist is a business name registered with the Companies Registration Office in Ireland, owned and operated by Adeniyi Lawal as a sole trader, based in Dublin, Ireland.

Contact: [email protected]

In this policy, "Glow Assist", "we", "us" and "our" mean Glow Assist. A "salon" means a hair salon, barber or similar business that uses our service. A "client" means a person who messages a salon.

2. What we do

We set up and run an automated assistant for salons. The assistant replies to messages sent to the salon's Instagram account, answers common questions, checks availability and books appointments in the salon's own booking system (such as Wix Bookings). It can also send appointment reminders, manage cancellations and waitlists, and ask for reviews.

The assistant only replies to people who message the salon first. It never sends unsolicited messages.

3. Our role under data protection law

When you message a salon. The salon is the data controller for your personal data. It decides why and how your data is used. Glow Assist is a data processor. We handle your data only on the salon's behalf and on its instructions, under a data processing agreement with each salon.

When you deal with Glow Assist directly. If you visit our website, email us, or run a salon that is our customer, Glow Assist is the data controller for that data.

4. Data we process

When you message a salon on Instagram

• Your Instagram-scoped user ID (a number Meta gives us to identify your conversation with that salon)
• Your Instagram username and name, as provided by Meta
• The content of your messages and the replies sent to you
• Booking details you give, such as your name, phone number or email address (if you share them), the service you want, and the date and time
• A log of the conversation and of any bookings, changes or cancellations

We only receive data through Instagram when you send a message to a salon that uses our service. We do not access your followers, posts or other accounts.

When you contact us or use our website

• Your name, email address and anything else you include in your message
• Basic technical data needed to deliver the website securely, such as IP address and browser type, processed by our network provider

When you are a salon customer of Glow Assist

• Business and contact details of the salon owner and staff
• Account details needed to connect the salon's Instagram and booking system
• Billing records, quotes and invoices
• Our correspondence with you

5. How we use data

On behalf of salons, we use client data only to:

• read and reply to messages sent to the salon
• answer questions about services, prices, opening hours and policies
• check availability and create, change or cancel bookings
• send reminders, waitlist updates and review requests related to a client's booking
• pass a conversation to a member of the salon's team when needed
• keep the service secure, working properly and free of abuse

For our own purposes as controller, we use data to reply to enquiries, provide and bill for our service, meet our legal obligations, and keep our systems secure.

6. Legal basis

Where the salon is the controller, it decides the legal basis, which is usually taking steps at your request to book an appointment (contract) or its legitimate interest in answering messages.

Where Glow Assist is the controller, we rely on:

• contract, to provide our service to salons
• legitimate interests, to answer enquiries, keep our service secure and improve it
• legal obligation, to keep tax and accounting records

7. The automated assistant

Messages to a salon may be answered with help from an automated assistant. An AI service drafts replies based on the salon's own information, such as its services, prices, hours and policies.

• The assistant does not make decisions about you that have legal or similarly significant effects.
• Bookings are confirmed back to you before they are made.
• You can ask to speak to a person at any time, and the conversation will be passed to the salon's team.
• Anything the assistant is unsure about is passed to the salon.

8. Who we share data with

We do not sell personal data. We do not use it for advertising, and we do not share it with data brokers.

We share data only with service providers we need to run the service (our sub-processors):

Each provider may only use the data to provide its service to us. We may also disclose data where required by law or to protect rights, safety or property.

9. Transfers outside the EEA

We aim to keep data in the European Economic Area. Where a provider processes data outside the EEA, we make sure the transfer is protected by an adequacy decision of the European Commission or by Standard Contractual Clauses, with extra safeguards where needed.

10. How long we keep data

• Instagram conversation logs: kept for up to 90 days after the last message, then deleted, unless the salon tells us to delete them sooner.
• Booking records: kept in the salon's booking system for as long as the salon decides. Any copies we hold are deleted in line with the salon's instructions, and in any case when our service to the salon ends.
• Enquiries to Glow Assist: kept for up to 12 months after our last contact, unless they lead to a customer relationship.
• Salon customer and billing records: kept for the length of our agreement and then for 6 years, as required for tax and accounting.

When a salon stops using our service, we delete or return its clients' data as set out in our data processing agreement.

11. Security

We protect data with access controls, encrypted connections, secure storage of access tokens, limited staff access, and monitoring. Access to Instagram and booking accounts is limited to what the service needs. No system is perfectly secure, but we work to protect your data and will act promptly if something goes wrong, including notifying the salon and, where required, the Data Protection Commission.

12. Your rights

Under the GDPR you have the right to:

• access the personal data held about you
• rectification of data that is wrong or incomplete
• erasure of your data
• restriction of how your data is used
• object to processing based on legitimate interests
• data portability, to receive your data in a usable format

If you messaged a salon, the quickest route is to contact that salon, as it is the controller. You can also write to us at [email protected] and we will pass your request to the salon and help it respond.

If your data is held by Glow Assist as controller, email [email protected]. We will reply within one month.

To ask for your data to be deleted, see our Data Deletion page.

You also have the right to complain to the Irish Data Protection Commission at www.dataprotection.ie. We would appreciate the chance to help first.

13. Children

Our service is designed for salons and their adult clients. We do not knowingly collect data from children for our own purposes. If a child messages a salon, the salon handles that conversation as controller.

14. Instagram and Meta

We use Instagram data only to provide the service described in this policy, in line with Meta's Platform Terms and Developer Policies. We do not use it to build profiles, target advertising, or for any purpose a salon or client has not asked for.

15. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with its effective date. If a change is significant, we will tell our salon customers directly.

16. Contact

Glow Assist, Dublin, Ireland
Email: [email protected]