GlamNXT

Privacy Policy

Effective Date: 15 Nov 2024

Last Updated: 12 May 2026

At GlamNXT ("we," "our," or "us"), your privacy is a top priority. This Privacy Policy explains how we collect, use, share, and protect your personal data when you use our platform ("Platform") to book services offered by beauty professionals. It also outlines your rights under the General Data Protection Regulation (GDPR) and applicable Netherlands laws.

By using our Platform, you agree to the terms of this Privacy Policy. If you do not agree, please refrain from using our services.

1. Data We Collect

1.1 Information You Provide:

  • Account Information: Name, email address, phone number, and password.
  • Booking Details: Service type, time, location, and payment information.
  • Feedback and Reviews: Comments or ratings you leave for service providers.
  • Communication: Any information you provide when you contact us via email, chat, or phone.

1.2 Information We Collect Automatically:

  • Usage Data: Your interactions with the Platform, such as pages visited, and features used.
  • Device Data: IP address, browser type, operating system, and device identifiers.

2. How We Use Your Data

We use your personal data for the following purposes:

  • To provide and maintain our services
  • To process and manage your bookings
  • To process payments
  • To communicate with you about our services
  • To improve our Platform and services
  • To comply with legal obligations

3. Data Sharing

We may share your data with:

  • Beauty service providers (only necessary booking information)
  • Payment processing partners
  • Law enforcement when legally required
  • Service providers who assist in our operations

4. Your Rights

Under GDPR, you have the right to:

  • Access your personal data
  • Request corrections to your data
  • Request deletion of your data
  • Restrict processing of your data
  • Data portability
  • Object to processing of your data

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations.

7. International Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place for such transfers.

8. Google Sign-In Data

When you sign in with Google, we collect your basic profile information (name, email address) solely for account creation and authentication purposes. This data is processed in accordance with Google's API Services User Data Policy.

9. Google API Services User Data Policy

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page.

11. Public Business Data and Sales Outreach

GlamNXT may create a pre-filled professional profile for a beauty or wellness business using information the business has already made public, and send a one-time invitation to the business's public contact email. We do this to offer professionals a commission-free alternative to existing booking platforms.

We source business information from:

  • OpenStreetMap — the open contributor-maintained map database, for business name, address, and contact details.
  • Yelp Fusion API — for business details in the United States, under Yelp's developer terms.
  • Public directory pages on competing booking platforms (e.g., Treatwell, Fresha, Booksy), to identify businesses that may benefit from a commission-free alternative.
  • The business's own publicly available website — we fetch the homepage and contact page to confirm the email address and services offered.
  • UK Companies House (for UK businesses only) — to confirm the business is registered as a limited company, which we use to determine whether we are permitted to contact them under UK PECR.

Our lawful basis for this processing is legitimate interest (Article 6(1)(f) GDPR): we have a legitimate commercial interest in offering professionals a better booking platform, the data we use is already public business contact information, and the impact on the recipient is limited to one invitation email with an easy opt-out. We do not use this channel for individuals acting in a personal capacity.

12. Your Options When You Receive a Sales Invitation

If you receive an invitation email from GlamNXT, the email links to a page (glamnxt.com/claim-profile/…) where you can:

  • Claim the profile: Take ownership of the pre-filled profile by completing a short sign-up. Your profile becomes a normal GlamNXT provider account under your control.
  • Delete the profile: Permanently remove the pre-filled profile and all associated data from GlamNXT. This is a hard deletion — we do not retain a shadow copy. We also add your email address to our suppression list so we do not re-scrape you.
  • Do nothing: If you take no action, the pre-filled profile and the invitation link are automatically and permanently deleted 15 days after we sent the invitation. No further email is sent.

Every invitation email includes a one-click unsubscribe link. Using it adds your address to a permanent suppression list that is checked before any future outreach. You can also email support@glamnxt.com to request immediate removal, erasure of any stored data about your business, or an objection to processing on legitimate-interest grounds.

13. Third-Party Processors Used by Our Outreach System

To operate the sales outreach described in sections 11–12, we share a limited set of data (typically your business name, public email, city, and the draft invitation content) with the following processors:

  • Amazon Web Services (AWS) — hosts our databases (Amazon DynamoDB, eu-north-1) and runs the Lambda functions that scrape public sources, send outreach, and process replies.
  • Brevo (formerly Sendinblue, EU-hosted) — the transactional email provider that delivers invitations and processes bounce, open, click, and unsubscribe webhooks.
  • DeepSeek — the language model we use to draft personalised invitation copy from your public business information. No personal information beyond your business name, city, and public categories is sent to the model.
  • Google Analytics 4 via Measurement Protocol — we record aggregated outreach metrics (how many invitations were sent, opened, or claimed) to improve the system. The data is pseudonymised with a per-business identifier; no recipient email address is sent to Google.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

support@glamnxt.com

GlamNXT B.V., 96 Kalorama, Hoofddorp, Netherlands

You can reach our Data Protection Officer at support@glamnxt.com