Privacy Policy

01Who we are

This Privacy Policy explains how BUBA ("we", "us"), run by ToolMusk, collects, uses and protects your personal data when you use buba.toolmusk.com, as a customer or as a beauty professional. It is written in line with India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

By using BUBA you agree to this policy. If you do not agree, please do not use the site.

02Information we collect

We collect only what we need to run the service. Here is each kind of data, why we need it, who sees it and how long we keep it:

Data	Why	Who sees it	Kept for
Name, email, mobile	Your account, login codes, booking updates	BUBA team; your professional (name and phone)	While your account is active
Gender, date of birth, photo (optional)	Your profile, if you add them	BUBA team	Until you remove them
Saved addresses and map pins	So a professional can reach you	BUBA team; your professional for that booking	Until you delete them
Bookings, coupons, ratings, reviews	Running and improving the service	BUBA team; your professional	As long as tax and accounting laws require
Payments and refunds (amount, status, reference)	Taking payments, refunds and your wallet	BUBA team; Razorpay	As long as tax and accounting laws require
Messages to us	Answering your questions	BUBA team	As long as needed to help you
Newsletter email	Offers and beauty tips, if you subscribe	BUBA team	Until you unsubscribe
IP address, browser, pages visited	Security, your approximate city, fixing problems	BUBA team; our hosting provider	In our server logs

If you join as a professional

We also collect your skills, service area, availability and working hours, and the documents you upload when you register (such as your PAN card and training certificates). Our team uses them to verify you before you can take bookings. We also keep your bookings, earnings, wallet, ratings and reviews.

03How we use it

To create your account and log you in, including the one-time codes we email you.
To show the services available at your address, take your booking, assign a professional near you and keep you updated at every step.
To take payments, give refunds and keep your BUBA wallet.
To verify professionals, match them to bookings and pay them for their work.
To send you the newsletter, only if you subscribed. Every newsletter has an unsubscribe link.
To prevent fraud and misuse, keep the site secure and meet our legal obligations.
To answer your messages and improve BUBA.

We rely on your consent (for example when you create an account or subscribe), on what is needed to provide the service you asked for, and on our legal obligations.

We do not sell or rent your personal data. We share it only where needed to provide the service:

Your professional sees your name, phone number, the booking address and the services booked, so they can reach you and do the job. You see the name of your professional.
Razorpay processes online payments and refunds.
Google, if you choose to log in with Google.
Cloudflare, which may check forms against bots.
Our hosting and email providers, which store the site and deliver our emails.
Authorities, when the law requires it.

05Location

To show which services are available near you, we estimate your city from your IP address using the MaxMind GeoLite2 database on our own servers, so it is not sent to anyone else. We use your device's precise location only when you tap "Use my location", and only to fill in your address. We do not track your location in the background.

06Cookies and storage

We use only the cookies the site needs to work. We do not use advertising or tracking cookies.

Name	What it does	How long
`buba_session`	Keeps you logged in and remembers your cart and location during your visit	120 minutes after your last visit
`XSRF-TOKEN`	Protects forms against misuse	Same as above
`remember_web_…`	Keeps you logged in on this device	Up to 400 days, or until you log out
`tz`	Your time zone, so times show on your clock	1 year

Google (login) and Razorpay (payment) may set their own cookies when you use them. You can delete cookies in your browser settings; you will then be logged out.

07How long we keep it

Account data: while your account is active. When you ask us to delete your account, we delete or anonymise it.
Booking and payment records: as long as tax and accounting laws require, even after your account is closed.
Professional documents: while you work with BUBA, and afterwards only as long as the law requires.
Newsletter: until you unsubscribe; we keep a note that you left, so you are not added back by mistake.

08Your rights

See your dataAsk for a summary of the personal data we hold about you.

Correct itFix wrong or outdated details; most you can edit on your profile.

Delete itAsk us to delete your account and data, except what the law makes us keep.

Withdraw consentUnsubscribe from emails or stop using a feature at any time.

ComplainTell us if you think we misused your data; we will look into it.

NominateName someone to use these rights for you if you cannot.

To use any of these rights, email [email protected] from the address on your account, or use the contact form and choose "My account or personal data". We reply within 30 days.

09Security

Our site uses HTTPS encryption, logins use one-time codes or Google, and access to personal data is limited to the people who need it for their work. No system is completely secure, so please keep your email account and login codes private, and tell us at once if you think your account was used by someone else.

10Children

BUBA accounts are for people aged 18 and over. We do not knowingly collect data from children. A parent or guardian can book a service for a child from their own account.

11Changes and contact

We may update this policy as BUBA changes; the date at the top shows the latest version. For any privacy question or complaint, write to [email protected].