Salon TEST E2E privacy notice
Last updated: 13 November 2026
This page explains what personal data we process when you book at Salon TEST E2E, in the app, on the salon's site (also without an account, through the booking link) or at the salon, why, how long we keep it and what you can ask for.
Who is responsible for your data
The data controller is TEST E2E SRL, tax ID (CUI) 12345674, registered at Str. Testului 1, București, București.
Trade register number: J40/9999/2026.
For any question about your data, write to staging-salon-test-e2e@lexicon-software.ro.
The app and the salon's pages run on the platform of LEXICON TASKFORCE SRL (CUI 46908853, J2022019135403, Str. Luica 168, Sector 4, Bucharest, Romania). Lexicon processes the data only on our behalf, on our instructions and under a contract that obliges it to protect them (Art. 28 GDPR). Lexicon does not use your data for any other purpose and does not sell it.
What we process
- Your account: name, phone, optionally e-mail and sex, and the consents you give or withdraw: the date of each, where you gave it (the app, the salon's site, the salon or the unsubscribe link) and the version of the text it refers to.
- Your bookings: services, date and time, specialist, location, price, cancellations and no-shows.
- Booking without an account, through the booking link on the salon's site: your first and last name, phone, optionally e-mail (required only when a code is asked by e-mail), the boxes you ticked, where you opened the link from (for example Google, Instagram, Facebook or a QR code) and, while the booking is "to be confirmed", a cryptographic hash of your IP address. To stop fake bookings: hashes of the codes sent by e-mail and of their addresses and, after a fake booking, the 30-day blocks. The details are in the section "Booking without an account".
- Notes the salon adds to your record, such as preferences. Allergies and sensitivities are kept apart, in a dedicated field, only with your explicit consent; the specialist sees them before a service.
- Messages sent to you: confirmations, reminders and verification codes, by text and e-mail.
- Reviews, if the salon uses them: the 1 to 5 star rating you give the specialist after a completed booking, the optional comment and the date. Other clients see only each specialist's average and the number of ratings, from 3 ratings; only the salon sees the comment.
- Your answers to "How was it?", if the salon uses it: the 1 to 5 rating you give the visit, the optional comment for the salon, the date and whether you opened the salon's Google reviews page.
- App notifications, if the salon uses them: the notification identifier of the app on your phone.
- The loyalty program, if the salon has one and you join it: the date and version of the rules you accepted, your tier, accumulated and available points, their history (earned, spent, returned, corrected, with the reason), the vouchers you bought and the desk's requests to use them, with your answer.
- Sign-in: your app sessions and, if you use them, passkeys. A passkey stays on your device; we keep only its public part.
- Technical data: server logs, with the IP address, and attempt counts, to stop abuse.
- Visit statistics on the salon's site (Google Analytics), only if the salon uses them and only if you accept the analytics cookies. The details are in the section "Cookies and visit statistics".
Booking without an account
- On the salon's site you can also book without an account, through the booking link: you give us your first and last name and phone and, if you wish, your e-mail. You get no code by text.
- If the salon does not have your number yet, we create a client record without an account, with your name and phone and without the e-mail. If the number already has a record, the booking goes on it and the record does not change.
- The name and e-mail typed in the form stay only on the booking. Only the salon's staff see them, and they are deleted together with your record.
- The booking shows at the salon as "to be confirmed" and only the front desk confirms it.
- We send no text messages for this booking. If you give us your e-mail and tick the notifications, we e-mail you the confirmation, the cancellation link and a reminder 24 hours before. You can withdraw this consent at any time, at the salon or at staging-salon-test-e2e@lexicon-software.ro.
- You cancel it with the cancellation link, which you see on screen after booking and receive by e-mail if you gave it, or by calling the salon. The link is signed and works only for your booking.
- We keep on the booking where you opened the link from (for example Google, Instagram, Facebook or a QR code), so the salon knows where its bookings come from.
- To stop fake bookings, we check automatically on sending that you are not a robot. Lexicon's servers do the check, with no other provider and no cookies. We use your IP address and phone number for a while, for a limit on attempts: at most 5 an hour from the same address and 3 bookings a day for the same number.
- When the salon gets many bookings without an account in a short time (more than 5 bookings or more than 15 attempts in 30 minutes), the e-mail becomes required and we e-mail you a 6-digit code, valid for 10 minutes, which you type in the form; you have at most 5 tries. The same applies, for 24 hours, to a network (IP address) from which bookings were made at almost equal intervals; for this we note, at each booking, the IP address (for IPv6, the /64 network) for 30 minutes. Of the code and the e-mail address we keep only cryptographic hashes.
- So that these e-mails are not abused, we send at most 3 codes an hour to the same e-mail address, 5 from the same IP address, 20 for the salon and 50 for the whole platform.
- The salon can have at most 10 unconfirmed bookings without an account (or another limit set for the salon). When the limit is reached, the booking link asks you to call the salon, and the salon gets an e-mail so that it confirms them.
- If the front desk finds that a booking is fake, it cancels it as a "fake booking". The record created by that booking is then deleted too, if it is not in use, and, at this salon only, no bookings can be made through the link with the phone number or the e-mail typed on the booking for 30 days, nor from the IP address it was made from for 24 hours. You can still book by phone or at the front desk.
- A person at the salon decides the block, not a program. The code asked automatically does not refuse your booking: you can make it with the code or by calling the salon.
- For a block we keep only cryptographic hashes of these details and a masked hint for Lexicon's staff (the last 3 digits of the phone, the first letter and the domain of the e-mail; no hint for an IP address). A block expires after 30 days (for an IP address, after 24 hours). If it is a mistake, write to staging-salon-test-e2e@lexicon-software.ro and we lift it.
- The hash of the IP address stays on the booking only while it is "to be confirmed": it is deleted when the salon confirms the booking or changes its status, when it is cancelled and when your record or your data are deleted. For a fake booking, it moves into the block.
- When a booking cannot be made because of a block, a paused link or a limit on codes, the message is the same: online bookings are temporarily unavailable. The message does not say whether a number is blocked or has an account.
- You can have a record made this way deleted at the salon's front desk or by asking at staging-salon-test-e2e@lexicon-software.ro.
Why, and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Your account, bookings and their confirmations | performance of our contract with you, Art. 6(1)(b) |
| Booking without an account: the details in the form, the record, the front desk's confirmation and the cancellation | steps taken at your request before entering into a contract, and its performance, Art. 6(1)(b) |
| The e-mails of a booking without an account: the confirmation, the cancellation link and the reminder 24 hours before | your consent, Art. 6(1)(a), given when you tick the notifications in the form; you can withdraw it at any time, as set out in "Booking without an account" |
| Where you opened the booking link from | the salon's legitimate interest in knowing where its bookings come from, Art. 6(1)(f) |
| The e-mail asked, with the code sent by e-mail, when the salon gets many bookings without an account | steps taken at your request before entering into a contract, Art. 6(1)(b) |
| Booking reminders | your consent, Art. 6(1)(a); you can turn them off at any time in the app or at the salon |
| Health-related notes (allergies) | your explicit consent, Art. 9(2)(a): you give it at the salon or in the app, apart from your other consents, and can withdraw it at any time; withdrawing it deletes the note |
| Offers and promotions | your consent, Art. 6(1)(a); you can withdraw it at any time in the app, at the salon or through the unsubscribe link in every message |
| The reminder to book again and the "How was it?" question after the visit, if the salon uses them | your consent to marketing messages, Art. 6(1)(a); you can withdraw it at any time through the link in every message, in the app or at the salon |
| Accounting records of paid services | legal obligation, Art. 6(1)(c) |
| The loyalty program, if you join it: points, tiers and vouchers | performance of the contract with you (the program rules accepted when joining), Art. 6(1)(b) |
| Specialist reviews, if the salon uses them | the salon's legitimate interest in improving its services and helping clients choose a specialist, Art. 6(1)(f); reviewing is optional |
| Security, stopping abuse and fake bookings (when booking without an account: the limits on attempts and codes, the hash of the IP address, the limit on unconfirmed bookings and the block after a fake booking) and proof of erasures | legitimate interest, Art. 6(1)(f) |
| Visit statistics on the salon's site (Google Analytics), if the salon uses them | your consent, Art. 6(1)(a), given in the cookie banner, as Art. 4(5) of Romanian Law no. 506/2004 requires for cookies; you can withdraw it at any time with the "Cookies" button |
Who else receives the data
The data is kept on Lexicon's servers. With our approval, Lexicon uses these providers:
| Provider | For | Where |
|---|---|---|
| Hetzner Online GmbH | servers and backups | Germany (EU) |
| ROMARG SRL | sending e-mails | Romania |
| DIGI România S.A. | sending text messages, from Lexicon's number | Romania |
| Google Ireland Limited (Firebase Cloud Messaging) | app notifications, if the salon uses them | EU; Google may transfer the data to the US, under the EU–US Data Privacy Framework and standard contractual clauses |
| Google Ireland Limited (Google Analytics) | visit statistics on the salon's site, if the salon uses them and you accepted the analytics cookies | EU; Google may transfer the data to the US, under the EU–US Data Privacy Framework and standard contractual clauses |
Apart from app notifications and visit statistics (the Google rows above), the data is not transferred outside the European Economic Area. Google distributes the app through Google Play but receives no account or booking data from us.
How long we keep it
- Your account and bookings: for as long as we use the Lexicon app. Once the salon's contract with Lexicon ends, the data is kept for 90 more days, then Lexicon deletes it.
- When you delete your account: your name, phone, e-mail, notes, consents and sessions are deleted at once, and your upcoming bookings are cancelled. Of past bookings the salon's accounting record remains, pseudonymised: without your name or contact details, but with the date, service and specialist of each visit. It is deleted with the rest of the salon's data, 90 days after the salon's contract with Lexicon ends. If the same phone number has several client records at the salon, all of them are deleted.
- Reviews: for as long as the account exists. When you delete your account, the comment is deleted and the rating stays with no link to you, so the specialist's average doesn't change.
- Answers to "How was it?": as long as the account exists. When you delete your account, the comment is deleted and the rating stays without any link to you.
- The notification identifier: until you sign out of the app or delete your account.
- The name and e-mail typed for a booking without an account: as long as your record exists; they are deleted with it.
- The IP address and phone number used for the limit on attempts when booking without an account: two days at most.
- The code e-mailed when booking without an account: valid for 10 minutes; its hash and the hash of the e-mail address are deleted after it expires. The count of codes sent, for their limits (the e-mail address only as a hash): two days at most.
- The IP address noted for bookings made at regular intervals: 30 minutes, and the mark put on a network, 24 hours; they are deleted daily, after two days at most.
- The hash of the IP address on a booking without an account: while the booking is "to be confirmed", and at most two days after the booking's time.
- Blocks after a fake booking: 30 days for the phone and e-mail, 24 hours for the IP address, as hashes and a masked hint.
- Visit statistics in Google Analytics, if the salon uses them: 2 months, the period Lexicon sets in the salon's Google Analytics property. The Google Analytics cookies stay in your browser until they expire, until you delete them or until you refuse the analytics cookies.
- The loyalty program: while the account exists. When you delete your account, the points are cancelled and their history stays, pseudonymised, with the booking records and is deleted with them.
- Verification codes: 10 minutes.
- Proof that an erasure was carried out, with a code instead of your data: 12 months, then monthly totals only.
How to delete your account
- In the app: Profile → Delete account.
- On https://test-site-1411.staging.lexicon-software.ro/api/customer/account-deletion: enter your phone number, receive a code by text and confirm.
- At the salon's front desk.
Your rights
You can ask to see your data, correct it, erase it, restrict its processing, receive it in a file, or object to its processing. Write to staging-salon-test-e2e@lexicon-software.ro. We check that the request comes from you without asking for copies of your documents, and we answer within one month.
If you are not satisfied with our answer, you can complain to the Romanian data protection authority, ANSPDCP (B-dul G-ral. Gheorghe Magheru 28-30, Bucharest, www.dataprotection.ro).
Cookies and visit statistics
The app and the salon's pages use no advertising cookies. The app uses only what is needed to keep you signed in; we do not ask for your consent to these.
If the salon uses visit statistics (Google Analytics), a cookie banner appears on the salon's site. If the salon does not use them, no banner appears and the points below do not apply.
- Until you choose in the banner, nothing is loaded from Google and no analytics cookies are set. The refuse button is as visible as the accept button.
- If you accept, the Google Analytics cookies (_ga and _ga_…) are set, only on the salon site's address, and Google receives: a random identifier of your browser, the pages you visit and the page you came from (the address, with no parameter other than the booking link's source), the date and time, technical data about your device and browser, and the approximate location Google derives from your IP address.
- The statistics show us how many visits the site has and where they come from. We do not use them for advertising: advertising storage and data, Google signals and ad personalisation are turned off. Lexicon runs the statistics for the salon and does not use them for its own purposes.
- Google Analytics never loads on your account pages (/contul-meu), on the booking cancellation link or on the platform's technical pages.
- Your choice is kept in your browser, in the site's local storage, not in a cookie. You can change it at any time with the "Cookies" button at the bottom of the home page. If you refuse after accepting, the Google Analytics cookies are deleted and the page reloads without them.
- The recipient and the transfer to the US are in "Who else receives the data", and how long the data is kept in "How long we keep it".
Changes
When we change this notice we update the date above. We announce an important change in the app.