What we use
We use essential cookies for the service and to remember your choices. On our public marketing website, you can also choose to allow Google Analytics. We do not load Google Analytics or set its cookies before you allow it. Rejecting analytics does not stop you using the site. We do not use Google advertising features or sell your browsing data.
Optional Google Analytics. When you allow analytics, Google receives public-page visits, trial-button clicks, browser and device information and cookie identifiers to produce reports for us. We send page addresses without query strings or fragments and reduce referring addresses to their origin. We do not send form entries, account identifiers, client records, booking details or payment data. Analytics is limited to our main marketing website, excluding sign-up, login, the dashboard, client booking pages and salon subdomains. We also keep it off when your browser sends Do Not Track or Global Privacy Control. Google may process analytics data outside the UK. See how Google uses information from sites that use its services.
Anonymous page counting. To understand which of our public pages get visited, we count page views on our marketing pages (the homepage, pricing, find-a-salon and public salon pages) using our own first-party system. It sets no cookies and stores nothing on your device. We record the page, the site you arrived from (domain only), any campaign tag in the link you followed (such as ?via=flyer: letters, numbers and hyphens only), whether the device was a phone or a computer, and which country the visit came from, as two letters. On the sign-up page we also note, once, that someone has started filling in the form and, if they leave without sending it, which box they were last in, never what they typed. We also note, once, that we’ve emailed someone a code, and that a code they typed didn’t work, never the code or the email. We do not store your IP address or browser details. They are combined into an anonymous code that changes every day, so we can count visitors for a day but can never identify you or follow you over time. If your browser sends a “Do Not Track” or Global Privacy Control signal, we don’t count you at all. Nothing is counted this way inside the dashboard, the client portal or Your bookings.
Bot checks. Forms that could be abused, such as sign-up, login, booking, the waiting list, the tanning portal and signing in to see your bookings, use Cloudflare Turnstile to check you’re a person. It runs in a small frame from Cloudflare and sets no cookies on our site.
Local storage. If you use the chat on our website, your browser keeps that chat until you close the tab, so it’s still there as you move between pages. On a phone, if you close the prompt that suggests our iPhone app, or adding Covered Beauty or Your bookings to your home screen, your browser remembers that for 30 days so we don’t ask again. It stays on your device and isn’t sent to us. If you open Your bookings from your home screen, your browser keeps the date, so we note that only once a day. If you use our iPhone app for clients, it also keeps your phone’s notification token and whether someone is signed in on it, so signing out stops that phone’s reminders. Unlike the rest, we get that token too, only to send your reminders, as our privacy policy explains. If you make a price list with our free price list maker or booking page from a photo tool and go on to sign up from that page, your browser keeps that list so it’s ready to add once you’re in. It stays on your device and isn’t sent to us unless you add it. We only offer it for 30 days. It’s deleted when you add it or say no thanks. If you do neither, it’s deleted the next time you open either tool or your Treatments page after the 30 days are up. On the sign-up page, what you type (never your password) is kept in your browser tab as you go, so it’s still there if you leave and come back. It stays on your device and isn’t sent to us unless you send the form, and it’s deleted when you close the tab or once your salon is made. Once we’ve emailed you a code, your tab also keeps which email it went to and when (never the code itself), so the page still asks for it if you check your email and come back. If a booking page opens in a browser that hasn’t been to our site before, the tab notes that it has checked once, so the check doesn’t run again. It’s deleted when you close the tab and isn’t sent to us.
Essential cookies do not depend on your analytics choice. The separate optional analytics cookies are off unless you accept them. “Your settings” cookies are only set when you pick a setting yourself.
Stripe (payment pages)
When a client is paying a deposit, the booking flow temporarily redirects them to Stripe’s hosted Checkout page. Stripe sets its own cookies on that page for fraud prevention and PCI-DSS compliance. Those cookies are governed by Stripe’s cookie policy. We never see the contents of those cookies.
Contact
Questions about this policy? Email hello@covered.technology.
You also have the right to lodge a complaint with the UK Information Commissioner’s Office at ico.org.uk.
Covered Beauty is a trading name of HAMR Ltd. Registered in England and Wales. Company no. 17190046
25 Lowther Street, Whitehaven, CA28 7DG
© 2026 HAMR Ltd. All rights reserved.