Draft for review. This page has not been legally reviewed and is not yet FERTI's final policy. Items marked [To confirm] are still being finalised. Questions: hello@tryferti.com.
Who we are
FERTI is operated by FERTI LTD, which is the data controller for the personal data described here. Registered office address and company number: [To confirm]. You can contact us about anything in this policy at hello@tryferti.com.
What we collect
- Account details. Your email address, how you sign in (email and password, or Google), and the account type you choose (personal, professional or business).
- Profile details you add. Name, @username, photo, bio, location, pronouns and links. Professionals and businesses can also add services and prices, opening hours, available appointments, and optional "Getting here" details such as an area, nearest station, bus routes and arrival notes. A venue address is only ever shown publicly if you switch that on yourself.
- Content you post. Looks (photos and videos), Stories, captions, comments, likes, saves, follows and reviews.
- Messages. Messages you send to other FERTI accounts, including message requests.
- Contact enquiries. When you use our contact form: your name, email, optional city, topic and message. We also store a one-way hash of your IP address, used only to limit abuse of the form.
- Credential submissions. If you're a professional or business, any credentials you submit for review, including private evidence files. Evidence is visible only to you and our review team.
- Service Profile (optional and private). If you choose to fill it in, details about your hair, skin or wellness preferences — which can include health-related information such as allergies. This is private by default, is never published, and is only shared with a professional if you explicitly choose to share it.
- Usage events. First-party events (for example, views of a professional's content) used to show providers how their content performs and to keep FERTI secure.
How we use it, and why
We use the data above to:
- run your account and keep you signed in;
- show your public profile and content to other people, where you've made it public;
- deliver messages and message requests;
- personalise discovery where you've allowed it (your Service Profile is never published);
- review credential submissions and show badges only after review;
- respond to your enquiries and send account emails (such as verification and welcome emails);
- keep FERTI safe — preventing abuse, spam and fake reviews.
The UK GDPR lawful basis for each use — for example, performing our contract with you, our legitimate interests in running and securing the service, and your explicit consent for optional health-related Service Profile details: [To confirm].
What others can see
Public profiles and their Looks can be seen by anyone, including people without an account. Private accounts show their content only to followers they've approved. Your appointments, Service Profile, credential evidence and contact enquiries are never public. You can manage visibility in Privacy & Safety when signed in, and you can block or restrict other accounts at any time.
Booking handoffs
When you follow a provider's booking link, you leave FERTI. The provider and their booking platform handle that booking — including any payment, deposit or cancellation — under their own privacy terms. FERTI does not currently process payments.
Service providers and where data is stored
We use service providers to run FERTI: cloud hosting and database, file storage for photos and videos, sign-in (including Google sign-in), and email delivery. These providers process data on our instructions. The full list of processors and the countries where data is stored: [To confirm].
Cookies and device storage
FERTI stores your sign-in session and some preferences (such as your appearance and city choices) on your device so the app works. We don't use advertising or third-party tracking cookies. Details are in our cookie & storage policy.
Retention and your rights
You can edit your profile, delete your posts and delete your account from Account settings. When you delete your account, your public content is removed; some records (for example, abuse-prevention logs) may be kept for a limited period. Specific retention periods: [To confirm].
Depending on where you live — including the UK, Nigeria and the US — you may have rights to access, correct, delete or move your data, or to object to how it's used. To make a request, email hello@tryferti.com. If you're in the UK, you can also complain to the Information Commissioner's Office (ICO). Details of rights by region: [To confirm].
International use
FERTI is used in several countries, and some of our service providers process data outside your country. The safeguards we rely on for international transfers: [To confirm].
Age
You must be at least [To confirm] to use FERTI. We don't knowingly collect data from children below that age; if you believe a child has an account, contact us and we'll remove it.
Changes to this policy
If we change this policy we'll update this page and, for significant changes, let you know by email or in the app. Effective date: [To confirm].