Setting it up properly from the start
Collecting a name, contact details and service information carries obligations to tell people what you're collecting, why, how long you keep it and how they can exercise their rights. Several states now have comprehensive privacy laws with specific requirements, and federal consumer-protection rules apply to how you describe your practices.
Photographs need extra care. Using an image to document a service in a technical record is one thing; publishing it on the salon's channels is another: those are different purposes requiring separate, specific and withdrawable consent. Where images of the face are processed for analysis, some states regulate biometric identifiers specifically, with notice, consent and retention requirements.
Retention is the most neglected aspect. Keeping data and images indefinitely isn't a neutral choice: it builds an archive the salon is responsible for. Setting a retention period and honouring it reduces both risk and clutter.
Where problems concentrate
The chart is qualitative and shows how far each area is a source of irregularity in salons that don't set it up at the start.
Different purposes, different consents
The table separates the uses of data and what each requires.
| Use | Requires | Note |
|---|---|---|
| Delivering the service | Notice | The basis of the business |
| Photo in the technical record | Specific consent | Limited retention |
| Publishing on your channels | Separate, withdrawable consent | Not assumed from the previous one |
| Marketing communications | Separate consent | With simple opt-out |
How to set it up
Prepare the notice
Before the first appointment.
Separate the consents
Technical record and publication are different purposes.
Define retention
How long you keep data and images.
Name a point of contact
Who handles deletion requests.
Before opening
- Prepare a notice and separate consent forms by purpose.
- Define how long you keep data and images.
- Decide who in the salon handles deletion requests.
Separate consents by purpose are also a practical choice: a client may accept a photo in her technical record and refuse publication, and having them separate avoids giving up both or proceeding improperly.
Deciding who handles requests is the detail that matters when they arrive. A deletion request bouncing between people who don't know what to do produces delay and bad feeling, and it's easily avoided by naming a point of contact at the start.
The service to include in the new salon
Saloria enters the opening project as a consultation tool, not as management software. The new salon can use it to guide the first visit, analyze the face, build the look plan and generate a protocol useful for the team. This way technology isn't an accessory: it becomes part of positioning and professional sales.
To consult before deciding
These sources are reliable starting points to verify requirements, procedures and tools. For operational decisions, checks with local city office, state board, IRS, accountant and technical consultants are always necessary.
- SBA: 10 steps to start your business
- IRS: starting a business and tax obligations
- OSHA: personal care services and salon safety
- DOL: state labor offices and wage rules
- EPA: safer chemical products in salons
- FTC: privacy and data security for businesses
- Google: guidelines for local businesses
- LoopNet: commercial real estate for lease
- Crexi: commercial property marketplace
- SCORE: free business mentoring
Frequently asked questions
Do you need consent for client photos?
Yes, with separate consents by purpose: one for use in the technical record and a separate one for publication on your channels.
How long can you keep data?
For a defined period stated in your notice. Keeping it indefinitely builds an archive the salon is responsible for.
When should you set this up?
Before opening: obligations apply from the first appointment, not from when the business grows.