Privacy Policy

Last updated: September 7, 2026

Data Controller

OrientIA S.r.l.s., registered office at Via Nazionale 79, 81028 Santa Maria a Vico (CE), Italy — VAT/Tax ID IT04966350615, REA CE-369813, share capital €4,900.00 fully paid.
For any request regarding the processing of your personal data, write toinfo@orientia.it or via certified email (IT only) toorientia@pec.it.

Data collected and purposes

We collect only the data strictly necessary to provide the Beauty service: name and email for account registration (contract performance); salon name, sector and business contacts for tenant configuration and billing (contract performance); the salon's end-client data — name, phone, email, appointment history — entered by the client to manage bookings, reminders and loyalty on the salon's behalf; usage data and application logs for security, debugging and service improvement (legitimate interest); technical cookies for language preference and stored cookie choice (technical necessity). We do not collect profiling data for marketing purposes without explicit consent.

Processing methods and security

Data is processed electronically on cloud infrastructure hosted in Europe. We implement appropriate technical and organizational security measures: encryption in transit (TLS 1.2+) and at rest, multi-factor authentication for administrative access, logical data separation per tenant (multi-tenant architecture), automated daily backups with configurable retention, and access limited to authorized personnel under the least-privilege principle.

Data retention

Data is retained for the duration of the contract and, thereafter, for the period required by applicable law (typically 10 years for fiscal and accounting data). Data no longer needed is deleted or anonymized. For free trial accounts not converted to a paid plan, data is deleted within 90 days of trial expiry.

Sub-processors

We use third-party service providers that process data on our behalf, all bound by appropriate contractual guarantees: Hetzner/OVH for cloud infrastructure hosting (EU), a transactional email provider for service emails and reminders, and a WhatsApp Business API provider for reminder delivery via WhatsApp on the salon's behalf. We do not transfer data outside the EEA without adequate safeguards.

Cookies used

Analytics cookies are set only after you give consent in the banner. You can change your mind at any time — see "Manage your preferences" below.

The Beauty application (the SaaS product, on a separate domain) uses technical session cookies (HttpOnly, Secure) for authentication — not covered by this policy, which applies only to this institutional website.

Virtual assistant (chat)

The website provides a virtual assistant (chat widget in the bottom right). No registration or login is required: the chat works anonymously. Messages you write are sent to the OrientIA support platform, where they are kept to follow up on your request and, if you open a ticket, the email address you provide is used to reply to you. Do not write special category data (Art. 9 GDPR) or information you don't want kept in the chat. Legal basis: performance of pre-contractual measures and legitimate interest of the controller in providing support. Responses are generated by an AI model based on our documentation; conversation content may be reviewed by OrientIA staff for support purposes and to improve the service, and conversations are subject to automatic periodic deletion.

Transfers outside the EU

Google LLC is based in the United States. Data transfers to this provider take place on the basis of the standard contractual clauses approved by the European Commission.

Messages written in the virtual assistant are also processed by AI model providers based outside the European Union (currently DeepSeek, China, for generating responses, and OpenAI, United States, for indexing our documentation), on the basis of standard contractual clauses. For this reason, please avoid entering personal data you don't need to share in chat: for requests requiring specific data, write toinfo@orientia.it.

Your rights

Under Arts. 15-22 GDPR you have the right of access, rectification, erasure, restriction of processing, data portability and objection, exercisable by writing to info@orientia.it. We will respond within 30 days. You also have the right to lodge a complaint with the relevant supervisory authority in your EU member state.

Changes to this Policy

We may update this Policy at any time. Substantial changes will be communicated to registered users via email at least 15 days before taking effect. The last updated date is shown at the top of this page.

Manage your preferences

You can review or withdraw your consent for analytics cookies at any time: