Privacy Policy

Last updated: 2 August 2026

This policy explains what the TopOne app collects, why we collect it, and what you can do about it.

TopOne (“we”, “us”) operates the TopOne booking app. We are the data controller for the personal data described here.

Registered name: Top One Class Limited
Company number: 07989879
Salon address: 31 The Quadrant, Richmond, Surrey, TW9 1DN
Contact: enquiriesrichmond@top1one.co.uk

What we collect

When you create an account and use the app, we collect:

Data	Why we collect it
Email address	Signing in, password resets, account confirmation
Password	Signing in. Stored only as a secure hash. We never see it
First and last name	Identifying your booking to salon staff
Phone number	Contacting you about your appointment
Enquiry and message content	Answering the enquiries you send us
Enquiry history and timestamps	Managing your bookings

We do not collect your device location, contacts, photos, or camera. We do not use advertising or tracking technology, and we do not build advertising profiles.

You can browse the app as a guest without an account. In that case we collect none of the above.

Who we share it with

We do not sell your data. We share it only with the providers that run the service for us:

Supabase: database, account storage, and authentication. Your data is held in the United Kingdom (London) region.
Resend: sending account confirmation and password-reset emails. This involves your email address being processed outside the UK (United States) under the safeguards in their data processing terms.

These providers act on our instructions.

Salon staff read and reply to your enquiries in the app, so they can see your name, contact details, and messages. When your booking is agreed, a member of staff enters your appointment details into Phorest, the salon’s main booking system. The app itself does not send anything to Phorest automatically.

How long we keep it

We keep your account data until you delete your account. Deleting your account removes your profile, contact details, and enquiry history from the app immediately and permanently.

Enquiries closed by the salon are kept for 14 days, then deleted automatically along with their messages. The app shows a countdown.
Enquiries left open are deleted 90 days after the last message. An enquiry you are still using is not affected. The 90 days only begins once the conversation goes quiet.

Once a member of staff has entered your appointment into Phorest, that booking record is held under the salon’s own retention rules. Deleting your app account does not remove it, because it is a separate record of an appointment you booked.

The app does not take payments and holds no card or financial details.

Your rights and the detail

+What is the legal basis for using my data?

We rely on contract for your account details and enquiries, so we can provide the booking service you asked for, and legitimate interests for keeping the service secure and working.

+How do I delete my account?

At any time, in the app: Profile, then Delete Account. This is immediate and cannot be undone. If you cannot access the app, email enquiriesrichmond@top1one.co.uk and we will delete it for you.

+What rights do I have under UK GDPR?

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or transfer it elsewhere. Email enquiriesrichmond@top1one.co.uk and we will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner’s Office at ico.org.uk.

+Is the app intended for children?

No. The app is not intended for children under 13, and we do not knowingly collect their data.

+How will I know if this policy changes?

We will update the date at the top of this page and, where the change is significant, tell you in the app.

Need your data deleted?

If you want your account and data removed, the full step-by-step process is on our account deletion page.

How to delete your account