Who we are
ReservaZap connects individual beauty professionals with customers through public booking links. Professionals create accounts and manage their own services and appointments. Customers can request a booking without creating an account.
This policy describes information handled through the ReservaZap website, booking tools, account features and related communications. The platform is operated by ReservaZap LLC, whose address and contact details appear below.
- Legal operator
- ReservaZap LLC
- Registered address
- Djure Danicica 11, Smederevo, 11300, SerbiaУлица Ђуре Даничића 11, 11300 Смедерево
- Contact
- cadjenovicr@gmail.com
ReservaZap determines how information is used to operate and protect the platform. A professional also has privacy responsibilities for customer information they use to deliver their own services. The operator must confirm the applicable controller and processor arrangements before launch.
Information we handle
- Professional accounts: phone number, verification records, password hash, account status and any optional contact information provided. Professional names are collected during onboarding.
- Professional profiles: display name, optional photo and introduction, specialty, appointment location, services, prices, availability and booking policies.
- Guest bookings: customer name and phone number, chosen professional and service, appointment times, booking status, cancellation or rescheduling activity and verification permissions. An email address or customer account is not required to book.
- Customer records and support: appointment history, notes entered by the professional, and information you provide when seeking assistance.
- Security and technical information: session identifiers, verification attempts, IP addresses and request information used to authenticate access, investigate problems and limit abusive requests.
- Landing-page enquiries: the name, email address and message submitted through this website’s contact form are sent through Web3Forms to the configured enquiry recipient.
Please avoid placing medical histories, identity documents, payment card details or unnecessary sensitive information in profile descriptions, customer notes or support messages. Discuss service-specific safety needs directly with the professional through an appropriate channel.
Why we use information
We use information to create and secure accounts, display professional profiles, calculate availability, process booking requests, manage appointment changes and provide support. Verification and booking checks help prevent impersonation, spam, duplicate appointments and abusive requests.
Where data protection law requires a legal basis, processing may be necessary to provide a requested service or perform an agreement, meet legal obligations, or pursue legitimate interests such as proportionate fraud prevention and service security. We rely on consent where required, including the permission presented for WhatsApp verification. The operator must confirm the legal basis for each activity in its launch markets.
We do not treat permission to receive a verification code as general permission for unrelated marketing. Any marketing use would require an appropriate legal basis and separate choices where required.
Visibility and sharing
- With your professional: booking information, contact details and appointment history are available to the professional you book with so they can manage the request and deliver the service.
- With customers and the public: published professional profiles, photos, service information, appointment locations and available times can be viewed by people visiting the booking page. Customer identities and appointment histories are not public profile content.
- With service providers: hosting, data storage, messaging and email providers may process the information needed to deliver their services. WhatsApp/Meta and a delivery provider such as Twilio may be involved when the relevant messaging features are enabled.
- For legal and security purposes: information may be disclosed when legally required, to address fraud or safety concerns, or to establish, exercise or defend legal claims.
Customer contact details are intended for booking and service-related purposes, not for sale as contact lists or for unrelated advertising. Professionals must use customer information lawfully and respect applicable communication permissions.
The landing website uses Web3Forms for contact-form delivery and loads fonts from Google Fonts. Web3Forms processes submitted contact details and messages; font requests involve information normally sent by your browser when retrieving a resource. See the Web3Forms Privacy Policy and Google Privacy Policy for those providers’ practices. The operator must confirm its form-recipient configuration and relevant provider arrangements before publication.
Phone verification and WhatsApp
Customers verify control of their phone number using a WhatsApp code and the permission shown in the booking flow. Professional registration and password recovery currently use phone verification codes delivered by SMS. Message availability depends on the enabled service, provider and network.
Verification involves sharing the destination number and the necessary message and delivery information with communication providers. If appointment notifications are available, they relate to the booking. Direct chat links open WhatsApp so the customer and professional can communicate with each other.
Using ReservaZap does not give us general access to your personal WhatsApp inbox. A conversation you start directly with a professional is also subject to their practices and WhatsApp’s terms. Communication providers may process messages and delivery metadata required for their services.
You can decline an optional communication or withdraw consent where applicable. If phone verification is necessary for a booking or account action, that action cannot be completed without verification. Stopping a conversation or blocking messages does not itself cancel an appointment; use the booking management tools or contact the professional.
See the WhatsApp Privacy Policy and Twilio privacy information for information about those providers.
How long information is kept
Account and appointment information is kept for as long as needed to operate the service, maintain booking records, resolve disputes, protect against abuse and meet applicable legal obligations. Retention depends on the type of record, whether an account remains active, outstanding appointments and any required legal retention or preservation period.
Verification codes, temporary permissions and sessions have expiry limits. Expiry prevents further use of a credential; it does not necessarily mean that every related security or booking record is immediately erased. Deleted information may remain temporarily in protected backups until those backups are replaced under the operator’s retention arrangements.
The operator must document its production retention and backup schedule before publication. You may request information about retention or deletion using the contact details shown in this policy.
International processing
Hosting and communication providers may process information in countries other than where you live. The operator must identify the actual hosting provider, processing locations and any required international-transfer safeguards before launch.
Where applicable law restricts international transfers, the operator must use an appropriate lawful mechanism and make information about relevant safeguards available on request. This draft does not represent that any particular hosting region, adequacy decision or contractual safeguard has already been selected.
Security and automated checks
The platform uses safeguards such as password hashing, access controls, protected verification flows, restricted booking management links and rate limits. Security depends on deployment and operational practices as well as software; no internet service can promise absolute protection.
Keep passwords, verification codes and booking management links private. Contact support if you believe your account, number or booking link has been misused.
Automated checks can limit requests, reject invalid codes, enforce booking limits or expire requests. If you believe a restriction is incorrect, contact the operator for assistance. Any rights concerning automated decisions apply according to the law governing the processing.
Your privacy rights
Depending on applicable law, you may have rights to access or correct your information, request deletion or restricted processing, object to certain uses, receive portable data, or withdraw consent. These rights have conditions and exceptions; withdrawing consent does not undo earlier lawful processing.
Requests can be made to the operator using the contact details above. We may need proportionate identity verification to protect the information. Requests will be addressed within the time required by applicable law. For a professional’s independent use of your information, you may also need to contact that professional.
You may have the right to complain to your competent data protection authority. If Serbian law applies, information is available from the Serbian Commissioner. Where the GDPR applies, the European Data Protection Board’s guide explains the relevant rights.
Children’s information
Professional accounts are intended for adults with legal capacity to operate their services. Where a professional permits services for a child, a parent or legal guardian should make the booking and provide only information necessary for the appointment, in accordance with applicable law.
If you believe a child’s information has been submitted without the required authority, contact the operator so the circumstances can be reviewed.
Changes and contact
This policy may be updated as the service or its legal requirements change. The latest revision date appears at the top. Material changes will be communicated where required, and new consent will be requested when legally necessary.
Contact cadjenovicr@gmail.com for privacy questions or requests. You can also find our available contact channels in the homepage Contact us section. Before publication, this draft still requires review of actual providers, data practices and launch-market requirements.
For the rules governing accounts and appointments, read our Terms and Conditions.