Data Processing Agreement

Version 2026-08-08

This Data Processing Agreement forms part of the Styld Terms between the salon as controller and ASPIREVERSE LTD as processor for customer booking data.

Processing

We process customer identity, contact, appointment, service, assigned team member and payment-status information only to host the storefront, manage availability and bookings, deliver transactional messages, support cancellations, provide salon-facing operational insights and documented support. Per-person views are derived from salon records and are not payroll or automated employment decisions.

Instructions and confidentiality

We process data only on the salon's documented instructions, including the configuration and use of Styld, unless UK law requires otherwise. Access is limited to authorised people subject to confidentiality obligations.

Security and subprocessors

We maintain tenant isolation, access controls, encryption in transit, signed sessions, audit records, backups and incident procedures appropriate to the risk. The salon authorises the providers in our subprocessor register; equivalent data-protection obligations apply to them.

Assistance

We assist with data-subject requests, security incidents, DPIAs and regulator enquiries where relevant to our processing. The salon remains responsible for the lawfulness and accuracy of its instructions.

Deletion and return

On termination we delete or anonymise customer personal data according to the published retention schedule, unless law requires retention. Export assistance may be requested before deletion.

Audit

We provide reasonable compliance information and permit a proportionate audit where required by data-protection law, subject to confidentiality, security and cost controls.