Privacy notice

Who we are

Ora Nail Spot is a beauty and wellness business operating in Nairobi, Kenya. This notice explains what we do with personal information you give us through this website, and applies to bookings, memberships and enquiries made here.

It is written to reflect the Data Protection Act, 2019 of Kenya. Where this notice and the Act differ, the Act applies.

What we collect

When you book an appointment we ask for your name, your phone number, and optionally your email address, along with the branch, the treatments you have chosen and the date and time you want. If you are booking for a group we also ask how many people and a contact number for the group.

When you join a membership we additionally record the plan you chose and how you chose to pay.

When you visit the salon our technicians may record notes about your treatment — for example a scalp or skin observation, a product used, or an allergy you have told us about — so that the next person who looks after you knows what came before. You can ask to see these notes at any time.

We do not ask for, and this website does not collect, identity numbers, card numbers or bank details.

Payments

Card and mobile-money payments are processed by Paystack. You enter your payment details on Paystack's own secure page, not on ours, and we never receive or store your card number, PIN or mobile-money credentials.

What we do receive back from Paystack is confirmation that a payment succeeded or failed, the amount, and a reference number — which is what lets us match a payment to your booking or membership.

Why we use it

To make and confirm your appointment, to take payment, to look after you properly during the visit, to answer your questions, and to keep the records a business is required to keep.

We may send you a message about an appointment you have booked — a confirmation or a reminder. Marketing messages are a separate matter: we send those only where you have agreed to receive them, and you can tell us to stop at any time without it affecting your bookings.

Cookies and measurement

This website uses a small number of cookies that are necessary for it to work — for example to keep your place in the booking form.

Our membership pages also run the Meta (Facebook) Pixel, which tells Meta that a membership page was viewed or a membership purchased, so that we can measure whether our advertising is working. It is not used on our treatment or location pages. You can limit this through your browser's privacy settings or your Meta ad preferences.

Who we share it with

Our staff, so far as they need it to look after you. Paystack, to process payments. Our messaging and hosting providers, who handle the data only on our instructions and only to run the service.

We do not sell your personal information, and we do not pass it to anyone for their own marketing.

How long we keep it

We keep your client record and treatment history while you are a client of ours and for as long afterwards as is reasonable for our records and for any legal or tax obligation. When it is no longer needed it is deleted.

Your rights

You may ask us what personal information we hold about you, ask us to correct it if it is wrong, ask us to delete it, or object to how we are using it. You may also withdraw your consent to marketing at any time.

Ask us and we will act on it. If you are not satisfied with how we have handled your request, you may complain to the Office of the Data Protection Commissioner of Kenya.

Keeping it safe

Client records are held in an access-controlled system. Members of staff see only what their role requires: a technician sees the work assigned to them, and does not have access to the wider client database.

No system is perfect, and we do not pretend otherwise. If something goes wrong that affects your information, we will tell you and the regulator as the law requires.

Changes

If we change how we use personal information, we will update this page and change the date at the top of it.