Last updated 27 October 2026
GlowBook is operated by Dashttp Ltd, 04 Kundum Ave, Tema, Ghana. Dashttp Ltd is the data controller for the personal data described here, under Ghana’s Data Protection Act, 2012 (Act 843). The business you book with is separately responsible for how it uses the details it needs to serve you.
Account details: your name, phone number and email address, given when you sign up, book, or are recorded by a salon as a walk-in client. If you sign in with a one-time code by SMS, we record that your number was verified. Booking details: the business, service, stylist, date and time, any add-ons, the notes you leave for the salon, and what happened to the booking (confirmed, cancelled, completed). Payment metadata: the amount paid, when, by which method (card, mobile money, cash or gift card) and the reference Paystack gives the payment. We never hold your card number, CVV or mobile-money PIN — those are entered on Paystack’s pages and handled by Paystack directly. For businesses we also hold business details, team accounts and the payout account deposits are settled to, and a record of the paid features they use (how many AI replies, WhatsApp messages and SMS) for their usage statements. If a business saves a card to pay its statements, Paystack keeps the card; we hold only a reference to it, the card type and its last four digits. Technical data: the usual logs of a web service (IP address, device and browser type, pages requested), used to keep the service running and secure.
To make and manage bookings; to send you confirmations, reminders and payment messages; to show a business who has booked with it; to settle deposits to businesses and keep accounts; to answer your requests; and to keep the service secure and working. We use it because you asked for the service (our contract with you), because the law requires certain records, and, for reminders and similar messages, because it is in both our interests that you make your appointment. We do not sell personal data, and we do not use it for advertising.
The business you book with sees your name, phone number, email, booking details and any note you leave — it needs them to serve you. A business sees only its own customers. Paystack processes payments and receives your email address for the receipt. mNotify delivers our SMS messages to Ghanaian numbers and receives your number and the message text. We also use service providers that process data on our behalf under contract: Resend (email delivery), Meta (WhatsApp messages, all of them, including booking updates and payment links: your number and the message, sent through Meta’s WhatsApp Business Platform from GlowBook’s or the business’s WhatsApp Business number), Anthropic (the AI assistant that replies to you on WhatsApp: it receives your first name, the text of your chat and the business, service and time details it needs to answer you, and never your phone number, email address, booking links or payment details), Supabase (our database and sign-in) and Vercel (hosting). Glow AI, the assistant a business’s team uses on its GlowBook dashboard: Glow AI chats are saved for 180 days. The salon owner and GlowBook can read them. They are processed by our AI provider. Where a business links a Transparent Turtle profile, reviews are handled by Transparent Turtle. We share data with authorities when the law requires it. Nobody else. We record when you agree to WhatsApp messages and when you opt out; send STOP WhatsApp at any time to opt out.
Your account and booking data is kept while your account is active. After an account is closed, or after a walk-in client’s last visit, we keep booking and payment records for a limited period to meet tax, accounting and record-keeping obligations under Ghanaian law — up to six years — and then delete or anonymise them. Some records may be kept longer where a dispute or a legal requirement needs them.
Under the Data Protection Act you can ask us what personal data we hold about you, ask us to correct it, ask us to delete it, and object to particular uses. Businesses can update a walk-in client’s number or email from their Clients page; anyone with an account can update their own details in their profile. To make a request, email us at the address below — we will confirm who you are and respond within 30 days. Deletion has limits: payment and booking records that the law requires us to keep are kept for the period in section 5, and a request to delete does not cancel a booking already made. If you are not satisfied with our answer you can complain to Ghana’s Data Protection Commission.
When you message GlowBook’s or a business’s WhatsApp Business number, we receive, through Meta’s WhatsApp Business Platform, your WhatsApp phone number, the name on your WhatsApp profile, the text or button reply you send, the time, and the delivery status of our replies. We store these in our database so we can answer you, run your booking, show the business the conversation, and keep a record of what was sent. Photos, voice notes and other media are kept only as Meta’s reference to them, and shared contacts are not kept. We reply with automated messages and, where a business or GlowBook staff step in, with a person. We use WhatsApp conversations only to provide the service. We do not sell them, use them for advertising, or use them to build profiles for anyone else. Meta processes WhatsApp messages under its own terms and privacy policy. Send STOP WhatsApp at any time to opt out. Some of our replies are written by an AI assistant (Claude, from Anthropic). It can find businesses, services and times, look up your booking and hold a time for you, and it only makes a booking after you tap Confirm. It does not decide payments or refunds. You can ask for a person at any time. Anthropic processes your messages on our behalf and does not receive your phone number.
You can ask us to delete your personal data at any time, including data we received through WhatsApp. To do it: email dashttpltd+glowbook@gmail.com with the subject “Data deletion request”, from the email address on your account or, for WhatsApp data, tell us the phone number you messaged from. We will confirm it is you, then delete or anonymise your account, contact details and WhatsApp conversations within 30 days, and confirm by reply when it is done. Booking and payment records the law requires us to keep are kept for the period in section 5 and then deleted.
Reminders and other non-essential messages can be switched off in your notification settings. Booking confirmations and payment messages are part of the service and are sent whenever you book.
Data is encrypted in transit, stored with access controls, and each business can see only its own customers. No system is perfectly secure, so please keep your sign-in details and your gift card codes to yourself.
GlowBook is for people aged 18 and over. We do not knowingly collect data from anyone younger; if you believe we have, contact us and we will delete it.
We may update this policy. When a change matters, we will say so in the app or by message before it takes effect. The date at the top tells you when it last changed.
Privacy and legal requests: dashttpltd+glowbook@gmail.com. Dashttp Ltd, 04 Kundum Ave, Tema, Ghana. See also our Terms of Service.