Your data and rules

What ILLA Spa keeps

• Your name and username.
• The email, phone and emergency contact you or an admin enter.
• Your start date and how you're paid.
• Every visit, tip, sale, adjustment and payout logged for you, and a history of who changed what.
• When you sign in, and from which internet address.
• Notes admins write about you. You can ask to see them.

It doesn't keep your Social Security number, tax ID, bank details, date of birth or home address.

Why

To work out and record what you're paid, and so the spa can reach you.

Who sees it

You see your own details, entries and payouts. The spa's admins and managers see everyone's. Notes are seen by admins only. Your data isn't sold or shared, unless the law requires it.

How long it's kept

Pay records are kept for at least 4 years after you leave or are last paid, as tax rules require. After that, an admin can erase your contact details. Your name and pay records stay.

Cookies and fonts

Two cookies: one keeps you signed in, and one, only if you tick "Remember me on this device", keeps your username filled in on it for 30 days and stops wrong passwords typed there being blamed on everyone at the spa. You can remove a device from your profile. There's no tracking and no ads. The page fonts load from Google Fonts, which sees your internet address.

Using your account

• Your account is for you only. Don't share your password or let anyone else sign in as you.
• A new password is checked against Have I Been Pwned's list of leaked passwords. Only the first 5 characters of a scrambled (hashed) copy are sent; your password itself is never sent.
• Only log your own work, and log it truthfully.
• Tell an admin straight away if your phone is lost or someone may know your password.
• The spa can turn off an account that breaks these rules, or when you stop working with the spa.

Questions

If a payout looks wrong, or you want to see or correct your data, ask an admin. If your data is ever exposed, the spa will tell you as soon as it can.