Henva privacy notice
Last updated 25 October 2026
Henva runs booking, till and staff software for salons. This notice is for the people who sign in to it: salon owners, technicians and Henva's own team. If you're a salon's client, the salon's own privacy notice (linked from its booking page) explains how your details are used.
Two roles
- Henva decides (it's the controller) about your sign-in: your email address, your password (stored scrambled, so nobody can read it), your two-step login, and the records of when you signed in, kept to keep accounts safe.
- The salon decides about everything it uses Henva for, including its team's details: technicians' names, rotas, clock-in times, breaks and time off. Henva looks after these for the salon under a data processing agreement. Ask the salon about them first.
What Henva keeps about you
- Your name and email address, and the salon you work with or own.
- Your sign-ins, two-step login and password resets.
- What you change in the salon's admin and on the till, in the salon's activity log (refunds, voids, devices, changes to walk-ins), kept so the salon can see who did what.
- Emails Henva sends you: invitations, password resets and the salon's messages about your time off.
- Salon owners: the salon's business details and its acceptance of Henva's terms.
Why
- To provide the service the salon signed up for and let you use it (our contract with the salon, and your job there).
- To keep accounts and the salon's data safe, and to look into problems (Henva's legitimate interests).
- To keep records the law asks for.
Henva doesn't send you marketing and doesn't sell your details.
Who else sees them
The salon's owner sees their team's details. Henva's support team can open a salon's admin, read only, when the salon asks for help, and every visit is logged. Henva uses these companies to run the service:
| Company | What for | Where |
|---|---|---|
| SupabaseThe database and sign-ins: where all the data is kept | The database and sign-ins: where all the data is kept | London, UK |
| NetlifyRuns the website and the app | Runs the website and the app | USA |
| ResendSends emails | Sends emails | USA |
| The SMS WorksSends text messages, when the salon switches texts on | Sends text messages, when the salon switches texts on | UK |
| Meta (WhatsApp)Sends WhatsApp messages, when the salon switches them on | Sends WhatsApp messages, when the salon switches them on | Ireland and USA |
| SquareTakes card payments on the salon's card machine | Takes card payments on the salon's card machine | UK and USA |
| SentryTells Henva when something breaks (without names, emails or phone numbers) | Tells Henva when something breaks (without names, emails or phone numbers) | Germany (EU) |
| CloudflareChecks that bookings and password resets come from people, not bots | Checks that bookings and password resets come from people, not bots | Worldwide |
Where a company keeps data outside the UK, it's protected by the UK's data adequacy rules or by the UK's approved contract terms for international transfers.
How long
- Your sign-in lasts while you work with a salon on Henva. When you leave, ask the salon or Henva to delete it.
- The activity log is kept for 7 years, with the salon's sales records.
- Emails Henva sends you are kept in the salon's message log; their wording is deleted after 12 months.
Your rights
You can ask for a copy of your details, to correct them, to delete them, or object to how they're used. For your sign-in, email hello@henva.co.uk; for your work records (rotas, timesheets, time off), ask the salon. We reply within a month. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Cookies
Henva only uses what it needs to work: your sign-in, the salon you're using, and, on the till, the copy of today's sales it keeps in the browser so it can carry on when the internet drops. There's no advertising or tracking, so there's no cookie banner.
Changes
If this notice changes, the new version goes on this page with a new date. Salons' terms are here.