Lubna Beauty Center

Privacy Policy

Last updated: 2026-10-26

Privacy Policy

This Privacy Policy explains how Lubna Beauty Center (Durar Lubna) (“Lubna Beauty Center”) (“we”, “us”) collects, uses, and shares personal data when you use the employee app Lubna Staff and its related APIs (the “App”).

1. Who we are

  • Legal name: Lubna Beauty Center (Durar Lubna)
  • Brand: Lubna Beauty Center
  • Address: Saudi Arabia
  • Website: staging-lubna-beauty-center.on-forge.com

We are the data controller for personal data processed through the App in connection with your employment or engagement with us in Saudi Arabia.

2. Information we collect

Account and identity

  • Name, email, phone number
  • Login credentials and authentication tokens (including OTP when enabled)
  • Employee profile (job title, department, branch, manager, employee ID, photo if uploaded)

HR and work activity

  • Attendance (check-in / check-out, schedule, location policy data if enabled)
  • Leave, advances, requests, approvals, and related notes
  • Payslips and other payroll self-service data you are allowed to view
  • Custodies, insurance records, violations or acknowledgements when enabled
  • Bookings and salon operations data you access through the App when those modules are enabled

Precise location

  • We collect your device’s precise location (GPS) when you check in and check out to verify that you are at your assigned workplace.
  • When your company enables location verification, the App uses your location in the background (including when the App is closed or not in use) via geofencing during your shift only, to detect when you leave or return to the workplace area. That information is sent to our servers so it can be shown to your direct manager.
  • Location collection starts when you check in and stops when you check out. We do not track your location outside working hours.
  • We also detect the use of mock / fake location apps to prevent attendance fraud.
  • You can turn off location permission in your device settings; note that check-in requires it when location verification is enabled.

Device and notifications

  • Push notification tokens (Firebase Cloud Messaging)
  • Device / installation id, platform (iOS / Android), OS version, app version, locale

Technical logs

  • IP address, timestamps, and diagnostic logs needed to secure and operate the API

We do not sell your personal data.

3. Why we process your data

  • Authenticate you and provide employee self-service
  • Run attendance, requests, team workflows, HR, and enabled salon operations
  • Verify attendance location and geofencing during your shift when location policy is enabled
  • Send operational notifications (approvals, reminders, alerts)
  • Protect security, prevent abuse, and troubleshoot issues
  • Meet legal and employment obligations in Saudi Arabia

4. Legal bases (summary)

Where the Saudi Personal Data Protection Law (PDPL) applies, we rely on the employment / contractual relationship, legitimate operational interests (security and service delivery), and legal obligations.

5. Sharing

We may share data with:

  • Cloud hosting, database, and email providers that operate the service
  • Firebase / Google for push notifications when enabled
  • Panorama Tech as software vendor under our instructions
  • Authorities when required by law

6. Retention

We keep data as needed for employment, operations, legal retention, and disputes. Device tokens are deactivated on logout or when invalid.

7. Security

We use HTTPS, authenticated APIs, and access controls. No transmission or storage method is completely secure.

8. Your rights

Subject to applicable law, contact [email protected] or phone +966531949494 to request access, correction, deletion, or to raise a privacy complaint. Some employment records must be retained.

9. Children

The App is for adult employees and authorized staff only.

10. International transfers

If data is processed outside Saudi Arabia (for example cloud regions), we take steps consistent with applicable requirements and vendor agreements.

11. Changes

We may update this policy. The “Last updated” date on this page will change when we publish a new version.

12. Contact

For more help, see our Support page.

Designed & managed by Panorama Tech