Privacy Policy

Xuuri ("Xuuri", "we", "us") operates the Xuuri platform — a marketplace that connects customers with beauty and wellness businesses, together with the tools those businesses use to manage their operations. This Privacy Policy explains what personal information we collect, how we use it, and the choices you have.

Information we collect

• Information you give us: your name, email address, phone number and password; for businesses, your business details, services, staff and opening hours; booking details and any notes you add; and photos or media you upload.
• Booking and activity information: the services you request, appointment details, and messages exchanged to complete a booking.
• Information collected automatically: device and usage data, IP address, cookies, and approximate location (used to show businesses near you).
• Information from third parties: sign-in providers (for example Google) and payment processors, where you choose to use them.

How we use your information

• To provide and operate the platform, including accounts, bookings and business tools.
• To connect customers with businesses and handle booking requests.
• To communicate with you — confirmations, updates and support.
• To improve, personalise and secure the service, and to prevent fraud and abuse.
• To comply with our legal obligations.

How we share your information

When you request a booking, the details needed to fulfil it — such as your name, phone number and the services requested — are shared with the business you are booking, and relevant business details are shown to you. Beyond that, we share personal information only:

• with service providers who help us run the platform (hosting, analytics, communications and payments), under contract;
• where required to comply with the law or to protect the rights, safety and property of Xuuri, our users or the public;
• in connection with a business transfer, such as a merger or acquisition.

We do not sell your personal information.

Signing in with Google

If you choose to sign in with Google, we use Google OAuth to authenticate you. Xuuri's access to, and use, storage, sharing, retention and deletion of, Google user data complies with the Google API Services User Data Policy, including its Limited Use requirements.

• Data we access: only your basic Google profile — your name, email address and profile picture. We do not access Gmail, Google Drive, Calendar, Contacts or any other Google service or data.
• How we use it: to create and secure your account, sign you in, identify you within the service, and contact you about your account and bookings. We do not use Google user data for advertising, and we do not use it to develop, improve or train general-purpose AI or machine-learning models.
• How we share it: we do not sell Google user data or transfer it to third parties, except to the service providers that help us operate the platform (hosting, authentication and communications) under contract, or where required by law. When you request a booking, only the details needed to fulfil it are shared with the business.
• How we store and protect it: Google user data is held on our secured infrastructure, encrypted in transit, with access limited to what is needed to run the service.
• Retention and deletion: we keep this data while your account is active. You can revoke Xuuri's access at any time from your Google Account settings, and you can delete your account or request deletion of your data by emailing support@getxuuri.com; on deletion we remove or anonymise it.

Data retention

We keep your information for as long as your account is active or as needed to provide the service, resolve disputes and meet our legal obligations, after which we delete or anonymise it.

Your rights and choices

You may access, correct, export or delete your personal information, and object to or restrict certain processing. To exercise these rights, or to close your account, contact us at support@getxuuri.com.

Security

We use reasonable technical and organisational measures to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Cookies

We use cookies and similar technologies to keep you signed in, to remember preferences such as your location, and to understand how the service is used. You can control cookies through your browser settings.

Younger users

Xuuri may be used by younger people to discover and book beauty and wellness services. You must be at least 16 to have a Xuuri account. If you are under 18 (or the age of majority where you live), you may use Xuuri only with the involvement and consent of a parent or guardian, who is responsible for your use of the service. We collect only the information needed to provide the service and take particular care with information relating to younger users. If you believe a child has given us personal information without appropriate consent, contact us at support@getxuuri.com and we will take steps to remove it.

International processing

Your information may be processed outside your country by our service providers. Where it is, we take steps to ensure it remains protected.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will let you know through the service or by other appropriate means.

Contact us

Questions about this policy or your information? Email support@getxuuri.com.