Privacy Policy
Last updated: June 2026
Who we are
Frontline ("we," "us," "our") is a WhatsApp-native client engagement platform for salons and spas, operated by Frontline (frontline-performance.com). For privacy enquiries, contact us at hello@frontline-performance.com.
Scope
This policy explains how we collect, use, store, and protect data in connection with our platform services. Our clients are salon and spa operators ("Operators"). We process data on their behalf as a data processor under applicable data protection law.
3. Data we process
On behalf of Operators, we process the following categories of data:
Operational data — branch information, staff records, service and product catalogues, appointment data, and scheduling information imported from or connected to the Operator's point-of-sale system (Phorest).
Client data — salon client names, phone numbers, appointment history, purchase history, loyalty points, tier status, voucher and stamp card records, and payment transaction data.
WhatsApp messaging data — message content, delivery status, read status, and action button interactions processed via the Meta WhatsApp Business API.
Payment data — online payment transactions processed via Stripe. Frontline does not store card details. Payment data is processed directly by Stripe in accordance with their privacy policy and PCI-DSS compliance standards.
We do not sell, rent, or share Operator or client data with third parties for marketing purposes.
4. How we use data
We process data solely for the purpose of delivering the Frontline platform services to Operators, including:
Automating booking confirmations, reminders, and post-appointment communications via WhatsApp
Processing online payments via Stripe
Managing loyalty programmes, stamp cards, vouchers, and marketing campaigns
Providing analytics and reporting dashboards to Operators
Maintaining platform security and performance
5. Third-party processors
We use the following third-party processors in delivering our services:
Meta (WhatsApp Business API) — for sending and receiving WhatsApp messages on behalf of Operators. Data processed subject to Meta's Data Processing Terms.
Stripe — for processing online payments. Data processed subject to Stripe's Privacy Policy and PCI-DSS standards.
Phorest — for point-of-sale integration. Data exchanged subject to Phorest's API terms.
Render — for cloud hosting and database storage. Data stored on Render's infrastructure in accordance with their data processing agreement.
6. Data retention
We retain Operator and client data for the duration of the service agreement and for 30 days following termination, during which time data is available for export. After 30 days, data is permanently deleted from our systems.
7. Data security
We implement appropriate technical and organisational measures to protect data against unauthorised access, loss, or disclosure, including encrypted connections, access controls, and regular security reviews.
8. Data subject rights
Salon clients whose data is processed by Frontline on behalf of an Operator should direct any data access, correction, or deletion requests to the relevant Operator. Operators may contact us at hello@frontline-performance.com to facilitate such requests.
9. International transfers
Data may be processed and stored on servers located outside the UAE. We ensure appropriate safeguards are in place for any international data transfers in accordance with applicable law.
10. Cookies
Our website (frontline-performance.com) uses cookies for performance and analytics purposes. By continuing to use our website you consent to our use of cookies. You may disable cookies in your browser settings, though this may affect website functionality.
11. Changes to this policy
We may update this policy from time to time. We will notify Operators of material changes via email or through the platform. Continued use of the platform following notification constitutes acceptance of the updated policy.
12. Contact
For privacy-related enquiries, please contact us at hello@frontline-performance.com.
Governing law — this policy is governed by the laws of the United Arab Emirates.