Legal
Privacy notice
Version 2026-09. Written to be read, not skimmed past.
Who is responsible
BELA Technologies (Pvt) Ltd is the data controller for everything you do on BELA. Salons using BELA Pro are separate controllers for their own client records; we process that data on their instructions.
Privacy questions and requests: privacy@bela.lk. We answer within 30 days.
What we collect
Account details: name, email, phone, city and your password, which is stored only as an irreversible hash.
Booking records: the salon, professional, service, time, price and anything you tell the salon in a note.
Payments: amounts, status and the last digits of a card. Full card numbers never reach BELA — they stay with the payment provider.
Usage: pages viewed, device type and errors, used to keep the service working.
Optional extras: photos you post, reviews you write, and learning progress if you use BELA Academy.
Why we may hold it
To perform our contract with you: making bookings, taking payment, sending confirmations and reminders.
Because the law requires it: invoices and tax records.
With your consent: marketing messages and optional usage insights, both switchable at any time.
For legitimate interests: preventing fraud, resolving disputes and keeping the service secure.
Who sees it
The salon you book with sees your name, contact details and booking history with them — nothing about other salons.
Our infrastructure providers host the data under contract and may not use it for their own purposes.
Payment and messaging providers receive only what is needed to complete the payment or send the message.
We never sell personal data.
How long we keep it
Account and booking records: while your account is open, then six years for financial records the law requires.
Message logs: 24 months. Usage events: 14 months. Abandoned booking holds: 30 days.
Deletion requests erase your name and contact details immediately once verified; financial records survive without your identity attached.
Your rights
See and take a copy of your data, correct it, delete it, restrict or object to how we use it, and withdraw consent at any time.
Everything except correction can be done yourself in the app under Privacy & my data.
If you are in the EU or UK and unhappy with our answer, you may complain to your local data protection authority.
Where the data lives
BELA is hosted in cloud data centres with encryption in transit and at rest. Access inside BELA is limited to staff who need it and every privileged action is logged.
If data is transferred outside your region, the transfer relies on standard contractual clauses.