Privacy Policy

Last updated: 29 October 2026 · Translation: if in doubt, the Portuguese version prevails

This policy explains which personal data Marki processes, why, and your rights, when you visit marki.pt or when a salon (and its team) uses Marki. The data of each salon’s clients, which the salon manages in Marki, is processed on behalf of that salon: see the Data Processing Agreement at the end of the Terms of Use.

1. Who is the controller

The controller is Francisco Daniel Romero Fernandez, a sole trader operating the Marki brand, Portuguese tax ID (NIF) 308404173, with address at Rua Dr. Alberto Vidal 139, 3860-368 Estarreja, Aveiro, Portugal.

For any privacy question: [email protected].

2. What data we process

  • Visitors to marki.pt: anonymous visit statistics (page viewed, where you came from, country, device type and browser), with no cookies or personal identifiers. Cloudflare also processes technical connection data (such as the IP address) to deliver and protect the site.
  • People who create an account: name, email, mobile (optional), password (stored hashed, never in readable form), salon name and address, country and language.
  • Billing: name or company name, tax ID, address, plan, charges, payments and receipts. Card details are handled by Stripe: Marki never sees or stores them.
  • Usage: logins, history of relevant changes in the account and technical error logs.
  • Communications: the emails you send us and our replies.

3. Why we use the data and on what basis

  • Providing the contracted service (account, calendar, notifications, support): performance of the contract.
  • Billing and complying with tax obligations: legal obligation.
  • Security, abuse prevention and backups: legitimate interest.
  • Anonymous visit statistics to improve the site: legitimate interest, with no personal data.
  • Notices about the account, billing and service changes: performance of the contract. We do not send marketing without your consent.

4. Who we share the data with

Only with the providers we need in order to operate, who process the data on our behalf and under our instructions:

  • Contabo GmbH (Germany): the server Marki runs on.
  • Cloudflare, Inc.: DNS, protection and delivery of the site, anonymous visit statistics and storage of encrypted backups in the European Union.
  • Sendinblue SAS — Brevo (France): sending the platform’s emails.
  • Zoho Corporation B.V. (Netherlands): the @marki.pt mailbox.
  • Stripe Payments Europe, Ltd. (Ireland): online payments.
  • Twilio Ireland Limited (Ireland): sending SMS.

Some of these providers belong to groups headquartered in the United States. Any transfer of data outside the European Economic Area is made with the safeguards required by the GDPR (EU-US Data Privacy Framework or standard contractual clauses). We do not sell data to anyone.

5. How long we keep the data

  • Account and salon data: while the account is active. After cancellation, it is deleted or returned on request within 30 days.
  • Sign-up records: 48 hours if the email is not confirmed; 30 days after confirmation.
  • Billing and receipts: for the period required by tax law.
  • Technical error logs: 14 days. Panel notifications: up to 90 days.
  • Encrypted backups: up to 6 months, then deleted automatically.

6. Cookies and browser storage

marki.pt does not use cookies. Cloudflare’s visit statistics use no cookies and store nothing in your browser, so we do not ask for consent.

The Panel (app.marki.pt) and each salon’s booking page store in the browser only what is strictly necessary: your login session and your preferences (language and theme). The service does not work without it, and it is not used for advertising or to track you on other sites.

7. Security

Encrypted connections (HTTPS), hashed passwords, daily encrypted backups, data hosted in the European Union, administration access with two-step verification and a log of support actions.

8. Your rights

You can request access to, rectification, erasure, restriction and portability of your data, and object to its processing. Write to [email protected]: we reply within one month.

You also have the right to lodge a complaint with the Portuguese data protection authority (Comissão Nacional de Proteção de Dados, CNPD), at www.cnpd.pt, or with the authority of your country.

If you are a client of a salon and want to exercise your rights over the data of your appointments, contact the salon: it is the controller of that data. If you write to us, we will pass the request on.

9. Changes

If we change this policy in a significant way, we will notify clients by email or in the Panel before the change takes effect.