Privacy Policy

This Privacy Policy explains how Makane ("we", "us", or "our"), operated as a sole trader, collects, uses, and protects personal data when you:

• Visit makane.me or any associated subdomain
• Create a Makane account as a business owner or team member ("Shop Users")
• Book an appointment through a Makane-powered booking page ("End Customers")

For End Customers: your booking data is collected on behalf of the individual business ("Shop Owner") whose booking page you used. That Shop Owner is the data controller for your booking. Makane processes your data on their behalf as a data processor. If you have questions about how a specific business uses your data, please contact them directly.

From Shop Users (business owners and staff)

• Account data: name, email address, hashed password, shop name, subscription plan
• Business data: shop slug, timezone, address, phone number, logo URL
• Usage data: login timestamps, dashboard activity, feature usage
• Payment data: billing cycle, plan status. We do not store full card numbers — payment details are handled by our payment processor
• Communications: support emails or messages you send us

From End Customers (booking visitors)

• Booking data: full name, email address, phone number (optional)
• Appointment data: service booked, staff member, date and time, notes
• Consent data: WhatsApp / marketing consent flag if provided

Automatically collected

• Technical data: IP address, browser type, device type, referring URL, page views — collected via server logs and cookies

Where EU/EEA data protection law (GDPR) applies, we rely on the following legal bases:

• Contract performance — processing necessary to provide the service you signed up for (account management, booking delivery, reminders)
• Legitimate interests — analytics, fraud prevention, service improvement, direct marketing to existing customers
• Consent — optional WhatsApp/marketing communications where you ticked the consent box
• Legal obligation — retaining certain records as required by applicable law

We use personal data to:

• Create and manage your account
• Process bookings and send confirmation emails and reminders
• Provide the admin dashboard and analytics
• Process subscription payments
• Respond to support requests
• Detect and prevent fraud and abuse
• Improve and develop the platform
• Send service-related communications (billing, security notices, feature updates)
• Send marketing communications to Shop Users — you can opt out at any time

We do not sell personal data to third parties.

We share personal data only with:

• Payment processors — to handle subscription billing (e.g. Stripe). They process card data under their own privacy policies and PCI-DSS compliance
• Email delivery providers — to send booking confirmations, reminders, and platform notifications
• Hosting providers — cloud infrastructure that stores and serves the platform (data may be hosted in the EU, US, or other regions)
• Analytics providers — aggregated, privacy-respecting analytics to understand how the platform is used
• Law enforcement — where required by applicable law or a valid legal request

All third-party processors are contractually bound to handle data securely and only as instructed.

We are based in Lebanon. Some of our service providers are located in other countries, including the United States and European Union.

Where we transfer data from the EU/EEA to countries that the European Commission has not deemed to provide adequate protection, we rely on Standard Contractual Clauses (SCCs) or other appropriate transfer mechanisms.

• Account data — retained while your account is active, then deleted or anonymised within 30 days of account closure
• Booking data — retained for 2 years after the booking date to support dispute resolution and business analytics, then deleted
• Payment records — retained for 7 years as required for financial/tax compliance
• Support communications — retained for 2 years

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — ask us to delete your data (subject to legal retention requirements)
• Restriction — ask us to stop processing your data in certain circumstances
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests or for direct marketing
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing

To exercise any right, contact us at support.makane@gmail.com. We will respond within 30 days. We may need to verify your identity before acting on your request.

EU residents also have the right to lodge a complaint with their local supervisory authority. A list of EU supervisory authorities is available at edpb.europa.eu.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:

• HTTPS encryption for all data in transit
• Password hashing using bcrypt
• Access controls limiting who can view customer data
• Regular security reviews

No method of transmission or storage is 100% secure. If you believe a security incident has occurred, please contact us immediately at support.makane@gmail.com.

Makane is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Our service may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing any personal data.

We may update this Privacy Policy from time to time. When we make material changes, we will notify registered users by email and update the effective date above. Continued use of the service after changes take effect constitutes acceptance of the revised policy.

For privacy-related enquiries or to exercise your rights:
support.makane@gmail.com
Makane — makane.me