Privacy Policy
Effective Date: 01.04.20261. Introduction
Welcome to Beauty Market, an integrated digital ecosystem connecting beauty clients, professionals, and workspace providers across Israel (the "Platform Services").
B.M. Beauty Market LTD ("Beauty Market", "BM", "we", "us", or "our") operates several interconnected platforms:
- Beauty Market - marketplace where clients discover, book, and pay for beauty services or purchase beauty products;
- Beauty Calendar - software for professionals, salons, and independent specialists to manage appointments, clients, marketing, and payments;
- Beauty Space - a book and pay system for beauty coworking spaces and rental stations for professionals.
This Privacy Policy (the "Policy") explains how we collect, use, store, and protect personal information across all our platforms and related mobile and PWA applications (collectively, the "Beauty Market Services").
By using any of our platforms, you confirm that you have read and understood this Policy and agree to its terms.
2. Scope and Data Controller
This Policy applies to all personal information processed by Beauty Market in connection with:
- your use of our websites, mobile apps, and booking tools;
- your business or professional account within the Beauty Calendar platform;
- your workspace booking or host account within the Beauty Space platform.
B.M. Beauty Market LTD, registered in Israel under number 516797941 and based in Ashdod, Israel, acts as the Data Controller for the purposes of the Protection of Privacy Law, 1981 and other applicable regulations.
3. Information We Collect
3.1. For Clients (Beauty Market or Beauty Space users)
When you use the Beauty Market or Beauty Space to book services or rent spaces, we may collect:
- Personal details: name, surname, gender, date of birth, contact number, and email address;
- Booking information: appointment date, time, service type, professional or workspace selected;
- Payment Information: Payments on the Beauty Market platform are processed exclusively by certified third-party payment processors (such as AllPay, Hyp, or other certified payment processors). Beauty Market does not store or have access to complete payment card numbers, CVV codes, or full banking details. We retain only a secure non-reversible token ("card fingerprint") generated by the processor to identify transactions, prevent fraud, and allow refunds when required;
- Device and technical data: IP address, browser type, OS, and location;
- Communication history with our support team or partners.
3.2. For Professionals and Businesses (Beauty Calendar users)
When you register or use Beauty Calendar, we collect:
- Identification and contact data: name, position, phone number, business name, and email address;
- Business information: company registration, tax/VAT number, address, and bank details;
- Appointment and client data: customer lists, service history, POS transactions, analytics, and feedback;
- Marketing content: images, service descriptions, pricing, and promotional materials;
- Verification data (e.g., KYC/ID verification results — we do not store documents, only verification outcomes).
3.3. For Hosts and Workspace Operators
When you manage or rent out a beauty workspace, we collect:
- Business and venue information: address, pricing, equipment, availability, photos, and location data;
- Booking and tenant communication details;
- Payment and billing data related to workspace rentals (processed securely through third-party providers — no card data stored by Beauty Market).
4. How We Use Personal Information
We process personal data to:
- enable clients to book and pay for services or spaces;
- provide Beauty Calendar and Beauty Space services to professionals and hosts;
- operate and improve our platforms and user experience;
- manage accounts, transactions, and subscriptions;
- send appointment confirmations, updates, and technical notices;
- comply with legal and regulatory obligations (tax, accounting, and anti-fraud).
We also use aggregated, anonymized data for analytics, service optimization, and business insights.
6. Third-Party Integrations and External Services
Some features of the Beauty Market ecosystem rely on integrations with external providers. Examples include:
- Google APIs — calendar synchronization and scheduling;
- Twilio Inc. — automated SMS and notification delivery;
- Meta Platforms Inc. and Google Ads services — analytics and marketing attribution;
- Telegram — communication tools, support messaging, and service notifications;
- Hyppay — secure payment processing and transaction management;
- AllPay — payment gateway services for processing online transactions;
- Algolia — search and indexing infrastructure used to provide fast and relevant search results across the platform;
- Comsign — electronic signature and digital verification services used for agreements and document authentication.
All data sharing with these services complies with their respective policies (e.g., the Google API Services User Data Policy, including Limited Use requirements).
7. Security and Confidentiality
We implement technical and organizational measures to protect personal information from unauthorized access, alteration, disclosure, or destruction.
This includes encryption (SSL/TLS, AES), access controls, continuous monitoring, and secure data storage in certified data centers compliant with ISO/IEC 27001 and SOC 2 standards.
Payment Security
Beauty Market maintains a PCI DSS–compliant payment architecture.
All payment operations are handled by certified processors using tokenization and end-to-end encryption, ensuring that cardholder data never passes through or resides within Beauty Market systems.
We only store non-sensitive identifiers (payment tokens or card fingerprints) necessary for transaction verification and refunds.
Specialist & Client Data (Beauty Calendar Platform)
For specialists and salons using Beauty Calendar:
- All client databases are stored securely and remain the property of the respective specialist;
- Beauty Market does not access, use, or analyze client data without explicit written consent;
- All data transmission and storage are encrypted;
- Any support access to a CRM account occurs only at the partner's written request and is fully logged.
8. Data Retention
We retain personal information only as long as necessary for the purposes described in this Policy or as required by law.
Typical retention periods:
- Active accounts — as long as the user remains active;
- Closed or inactive accounts — up to 5 years for legal and auditing purposes;
- Marketing and communication logs — up to 2 years, unless consent is withdrawn;
- Payment tokens and transaction identifiers — retained only for accounting, dispute resolution, and anti-fraud obligations, and never include raw card details;
- Anonymized data — may be retained indefinitely for statistical purposes.
After the retention period, data is securely deleted or irreversibly anonymized.
9. User Rights
Subject to applicable law, you have the right to:
- access your personal information;
- request correction or deletion of inaccurate data;
- restrict or object to specific processing;
- receive a copy of your data in a structured, machine-readable format (data portability);
- withdraw consent at any time, where processing is based on consent.
To exercise these rights, contact us at support@beautymarket.co.il.
Requests will be handled in accordance with the Israeli Protection of Privacy Law (1981) and, where applicable, the EU General Data Protection Regulation (GDPR).
11. Data Processing for Business Users (DPA)
If you are a business, salon, or workspace operator processing client data within the Beauty Calendar or Beauty Space platforms:
- you act as the Data Controller of your clients' personal data;
- Beauty Market acts as a Data Processor providing software infrastructure;
- both parties must comply with applicable data protection laws;
- a Data Processing Addendum (DPA) forms part of this Policy and may be requested at any time by emailing support@beautymarket.co.il.
12. International Data Transfers
All data is primarily stored in Israel.
If we transfer data outside Israel (for example, to hosting or service providers in the EU or the United States), such transfers are carried out in compliance with applicable data protection regulations and using appropriate safeguards (e.g., standard contractual clauses or equivalent).
13. Children and Age Restrictions
Our Services are not directed at children under 18.
If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us — we will promptly delete such information.
14. Updates to this Policy
We may revise this Policy from time to time to reflect changes in our practices or applicable law.
The updated version will always be published at www.beautymarket.co.il/legal/privacy-policy with a new “Last updated” date.
If we make significant changes, we will notify users via email or in-app notice.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:
📧 support@beautymarket.co.il
📍 B.M. Beauty Market LTD, Ashdod, Israel