1. Who we are
XTAN LIMITED, trading as XTAN, provides salon-management software, websites, customer portals, mobile applications, bookings, memberships, passes, payments and related support services.
Where salons use XTAN to manage their own customers, the salon may be the data controller and XTAN may act as a processor on the salon’s instructions.
2. Information we collect
- Name, email address, telephone number and account details.
- Booking, membership, pass, balance and tanning-session information.
- Transaction records such as amount, currency, status, date and payment reference.
- Technical information including IP address, browser, device and security logs.
- Messages and support enquiries.
3. Card payments
Card payments may be processed by Dojo or another authorised payment provider. Card details are entered into the provider’s secure payment environment. XTAN does not intentionally store full card numbers or card security codes on its own servers.
4. How we use information
- To provide accounts, bookings, passes, memberships and paid services.
- To confirm and reconcile transactions.
- To provide customer support and service communications.
- To maintain security, prevent misuse and investigate fraud.
- To comply with legal, tax and accounting obligations.
5. Legal bases
Depending on the activity, we rely on performance of a contract, legitimate interests, legal obligations or consent.
6. Sharing information
We may share information where necessary with salons using XTAN, payment processors, hosting providers, communications providers, professional advisers, regulators and public authorities. We do not sell personal information.
7. Data retention
We keep information only for as long as needed for service delivery, security, support, fraud prevention and legal, tax or accounting obligations.
8. Security
We use reasonable technical and organisational safeguards. No online service can guarantee absolute security.
9. Your rights
Depending on applicable law, you may have rights to access, correct, erase, restrict or object to processing, request portability and withdraw consent. You may also complain to the UK Information Commissioner’s Office.
10. Cookies
Essential cookies may be used for login, security and core website functionality. Optional cookies should only be used where an appropriate consent mechanism applies.
11. Contact
Privacy enquiries: paul@xtan.co.uk.