Privacy Policy
Code Studio Global (Pvt) Ltd, Colombo, Sri Lanka operates openbook.lk (“Open Book”), booking software for salons in Sri Lanka. This page explains what we hold, why, and who else sees it. If anything here is unclear, write to hello@openbook.lk and we will answer in plain language.
Two different people, two different roles
Open Book has salon owners as customers, and those salons have customers of their own. The distinction matters, because our responsibilities differ.
- Salon owners. We decide what we collect and why, so the responsibility is ours.
- A salon’s customers. The salon decides what it collects and how it uses it. We hold that information on the salon’s behalf and act on its instructions. If you booked an appointment and want your details changed or removed, ask the salon first — and if you cannot reach them, write to us and we will help.
What we hold about a salon owner
- Name, email address and mobile number, given at sign-up.
- Salon name, address, opening hours, staff names, services and prices.
- Plan, renewal date, and a record of payments made to us.
- Ordinary web-server records: IP address, browser, and pages visited.
What a salon holds about its customers, through us
- Name and mobile number, and an email address if one is given.
- Appointments: service, staff member, date, time and price.
- Notes the salon adds, and anything asked on its own booking form.
We do not sell any of it, we do not use a salon’s customer list to market to those customers, and one salon can never see another’s.
Why we hold it
- To run the booking page, calendar and customer list a salon signed up for.
- To send appointment reminders and confirmations by SMS and email.
- To take payment for a paid plan and to tell an owner when it is due.
- To answer support questions and to keep the service secure and working.
Who else sees it
- An SMS gateway in Sri Lanka. To deliver a reminder we pass the recipient’s mobile number and the message text to a licensed local SMS provider. They deliver it and keep their own delivery records.
- PayHere. Card and wallet payments for a paid plan are handled by PayHere, a licensed Sri Lankan payment provider, on their own systems. We never see or store your card number.
- Our hosting provider, which stores the database the service runs on.
We disclose data otherwise only if the law requires it. We do not share it with advertisers.
Messages, and how to stop them
Reminders and confirmations are part of the service a salon booked, so they are sent as a matter of course. Any recipient can stop them by replying STOP to the message; we honour that immediately and it applies to future messages from that salon.
How long we keep it
A salon’s data stays while the account exists, including after a paid plan lapses — the account simply returns to the free plan. Ask us to delete an account and we will remove it and its customer records within 30 days, apart from payment records we are required to keep for accounting.
Your rights
You may ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. We aim to follow Sri Lanka’s Personal Data Protection Act No. 9 of 2022. Write to hello@openbook.lk and we will respond within 30 days.
Cookies
We use the cookies WordPress needs to keep you signed in and to remember what you are doing while you book. We do not run advertising or tracking cookies on this site.
Security
The site is served over HTTPS, passwords are stored hashed, and each salon’s records are separated from every other salon’s. No system is perfect; if we ever find a breach that puts you at risk we will tell you.
Children
Open Book is for businesses. We do not knowingly collect data from anyone under 16 except where a salon records an appointment booked by a parent or guardian.
Changes
If this policy changes we will update the date at the top. If a change materially affects salon owners, we will email them.