Privacy Policy

Last updated: 19 July 2026

This Privacy Policy explains how The Gossip Hall handles information when customers use The Gossip Hall customer loyalty application.

1. Who we are

The Gossip Hall
171 Queens Road
Nuneaton
CV11 5NB
United Kingdom

Telephone: 07399 147866

For privacy enquiries, customers may contact the salon using the telephone number above and state that the request relates to The Gossip Hall loyalty application.

2. Information we collect

• Customer name and email address.
• Firebase Authentication user identifier.
• Loyalty stamp balance and lifetime stamp activity.
• Earned rewards, reward status and redemption history.
• Account creation and update timestamps.
• Security and audit records connected to loyalty activity.
• QR stamp-session information.
• Technical information required by Firebase and Google services to operate and protect the application.

The application does not store customer passwords in The Gossip Hall database. Password authentication is handled by Firebase Authentication.

3. How we use information

• Create and manage customer accounts.
• Authenticate customers securely.
• Store loyalty stamps and rewards.
• Prevent duplicate, fraudulent or unauthorised stamp activity.
• Confirm reward entitlement and redemption.
• Provide password-reset functionality and customer support.
• Process account-deletion requests.
• Maintain the security, integrity and reliability of the application.
• Keep necessary audit records for fraud prevention and dispute resolution.

4. Camera and QR-code scanning

The application uses the device camera only when the customer chooses to scan a salon-issued QR code. Camera access is used to detect and read the QR code.

The application does not use camera access to collect personal photographs, inspect the customer’s photo library or record video for marketing purposes. QR codes are validated through the secure backend before a stamp is issued.

5. Firebase and Google services

The application uses Firebase Authentication, Cloud Firestore, Cloud Functions, Firebase App Check and Google Play Integrity. These services may process account identifiers, device information, security signals, app-integrity information and technical information needed to provide authentication, data storage, server-side loyalty processing and fraud prevention.

6. Data sharing

The Gossip Hall does not sell customer personal information. Information may be processed by service providers used to operate the application, including Google Firebase and Google Cloud.

Information may also be disclosed where required by law, regulation, legal process or a valid request from a public authority.

7. Advertising and analytics

The current loyalty application does not contain third-party advertising and does not use advertising identifiers for personalised advertising. The current application does not include an analytics SDK.

8. Data security

The application uses authenticated customer accounts, server-side loyalty processing, Firestore Security Rules, secure Cloud Functions, role-based staff access, single-use and time-limited QR stamp sessions, Firebase App Check and Google Play Integrity.

No online service can guarantee absolute security.

9. Data retention

Customer account and loyalty information is retained while the account remains active and for as long as reasonably necessary to provide the service, complete deletion requests, prevent fraud, investigate security incidents, resolve disputes or comply with applicable legal obligations.

Where appropriate, retained records may be anonymised so they no longer directly identify the customer.

10. Account deletion

Customers may request deletion directly inside The Gossip Hall application. Customers may also read the deletion instructions at the-gossip-hall-website.vercel.app/delete-account/.

Deleting an account may permanently remove the Firebase Authentication account, customer profile information, loyalty stamp balance, active rewards, personal reward history and other personal information associated with the account.

11. Customer rights

Depending on applicable data-protection law, customers may have rights relating to access, correction, deletion, restriction, objection, data portability and complaints to an applicable data-protection authority. Requests may require identity verification.

12. Children

The loyalty application is not specifically designed for young children.

13. Changes to this policy

This Privacy Policy may be updated when the application, its services or legal requirements change. The latest version will be published on this page with an updated revision date.

14. Contact