Implementation: Qudini Solutions and Data Subjects

Data type

What it means

Personal Data

means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (Art 4 GDPR).

Sensitive Data

refers to data that enables you to understand the data subjects racial or ethnic origin, political opinions, religious beliefs, physical or mental health status, sex life, trade union membership, financial background, criminal background, genetic data and biometric data (Art 9 GDPR).

Data subject

How it is used

Type of data 

Controller

Where stored

How long stored

Customer personal data

To send your customers requiring services transaction-focused communications about the service they have requested. The communications sent are configured by you as the client.

If stored (at your request), this personal data can also be used to look-up a customer’s loyalty status when they return.

Data can also be exported to your CRM at your request.

Some clients export this data into a CSV, we don't advocate this method but as you are the data controller we can provide your selected users with rights to do so. Our permission levels enable you to control who can access this and they must acknowledge the personal nature of the data and adherence to your privacy processes before doing so.

Personal data: 

• Name

• Phone number (optional)

• Email address (optional) 

• Product/service interest

• IP address

• Address/postcode (if requested)

• Order number (for click and collect)

Using Qudini you can customise further questions to ask customers before, during or after service. This could be used to capture further customer data as your require.

Sensitive Data: 

Not usually: Only if you request certain pieces of information using our customizable Customer Questions feature.

You, as the client.

Your privacy policy is therefore relevant to customers.

Within the EEA or the USA

(unless you as the controller request otherwise)

We enable you to customise how long data is stored for within our platform.

Most of our clients ask us to delete the personal data as soon as the customer has left the queue or finished their appointment. 

Anonymous "Client derived data" can still be retained for analytics purpose.

Some clients export customer data into their CRM.

Client derived data

Qudini anonymises customer and employee records and passes their service information to our third party BI analytics tool in order to provide you with analytics on your operations and general customer activity.

Generic data: eg:

• Visit time

• Product/service interest

• Wait time

• Service time 

• Service status 

• Staff member who served

• Outcomes

• Survey feedback

You, as the client.

Within the EEA or the USA

(unless you as the controller request otherwise).

Indefinitely or as requested by you. 

Some clients export this data into third-party applications via a secure SFTP file.

Customer payment card data

(optional if you are accepting payments)

In order to take payment for the customer’s service, as required by you the client, we use a PCI compliant payment gateway who process the data. Qudini do not process any payment data ourselves.

Personal data and payment data:

• Customer name

• Billing address

• Credit/debit card number

You as the client (or the payment provider in instances like paypal).

Within the EEA or the USA

(unless you as the controller request otherwise).

As defined by you or the payment gateway used.

Venue (store) level employee data 

In order to provide a login for your store level users to access and use Qudini to manage and serve customers and their shop floor. Different users can be be provided with different access levels to:

• Manage store settings; 

• View manage all customers; or 

• Just to view and manage their own customers.

• Employee name

• Employee ID

• Business email

• Business phone number

• Shift hours

• Length of service (by default through account duration)

You as the client.

Within the EEA or the USA

(unless you as the controller request otherwise).

As requested by you during your term using Qudini.

We recommend an annual clean-up.

No more than 6 months after the end of your Qudini contract.

Head office employee data

In order to create a login for your head office users to use Qudini to manage settings, bookings and analytics. Different users can be provided with different levels with stores they can access in order to:

• Edit settings;

• View analytics; 

• Manage appointments on behalf of customers;

• View and manage events;

• Employee name

• Employee ID

• Business email

• Business phone number

• Shift hours

• Length of service (by default through account duration)

You as the client.

Within the EEA or the USA

(unless you as the controller request otherwise).

As requested by you during your term of using Qudini.

We recommend an annual clean-up.

No more than 6 months after the end of your Qudini contract.

Content (hyperlink)

Purpose

Our corporate privacy policy

Our full company privacy policy expanding on the different types of data that we work with and how it is stored and processed (this includes corporate users of our own company website, job candidates and our client's customer and personal data). For consumers using our platform within your business your privacy policy should be displayed because you are the data controller.

Terms and privacy links