Legal
Privacy policy
This policy explains how Hotlah handles personal information when you browse the marketplace, create an account, book a service, or offer nail services.
Last updated: 22 September 2026
Information Hotlah collects
Hotlah collects information you provide, information created through marketplace activity, and limited technical information needed to operate the service.
Account and profile information
- Your name, email address, profile image, account identifier, and sign-in status
- For nailists: studio or business name, service area, business type, biography, address, phone number, specialties, working hours, booking policy, services, prices, and portfolio photos
Information from sign-in providers
If you continue with Google, Facebook, or another enabled provider, Hotlah receives account information that provider makes available. This can include your provider account identifier, name, email address, email-verification status, and profile image. Hotlah also stores the account-link and authentication tokens needed to maintain your sign-in.
Marketplace activity
- Booking requests, appointment details, selected services, dates, times, prices, and booking status
- Messages, reviews, notifications, saved preferences, availability blocks, and account or merchant settings
- Interactions such as service impressions, profile views, and call or WhatsApp actions
Device and location information
Hotlah processes session information such as your Internet Protocol address and browser user agent for authentication and security. If you allow browser location access, Hotlah uses your approximate coordinates to filter nearby results. You can search by area without sharing device location.
Why Hotlah uses this information
Hotlah uses personal information to operate the marketplace and support the relationship between customers and nailists.
- Create and secure accounts
- Display approved nailist profiles and service menus
- Process booking requests, messages, notifications, reviews, and availability
- Share approved appointment details, including private contact or address information when the product says it will
- Measure service discovery and marketplace engagement
- Prevent misuse, investigate errors, enforce platform rules, and protect users
- Meet applicable legal obligations
How information is shared
Hotlah shares information only as needed to operate the service, provide requested marketplace features, or comply with legal obligations.
- Customers and nailists: Profile, service, booking, review, and conversation information is shared with the people involved. A nailist’s exact address and phone contact remain restricted until the booking reaches the required approval state.
- Service providers: Infrastructure, database, file storage, authentication, social sign-in, and email-delivery providers process information for Hotlah. Current integrations can include Cloudflare, Better Auth, Google, Facebook, and Resend.
- Safety and legal requests: Hotlah may disclose information when required by law or when necessary to protect the service, its users, or others.
Hotlah does not currently sell personal information or process customer payments for nail services. Customers pay nailists at the appointment.
Retention
Hotlah keeps personal information while your account is active and as needed to provide the marketplace. Retention can continue when records are needed for security, dispute handling, fraud prevention, backups, or legal obligations. Hotlah removes or de-identifies information when it is no longer needed, subject to those limits.
Security
Hotlah uses reasonable technical and organizational safeguards designed for the service. These include authenticated access, role and ownership checks, restricted private booking details, secure session cookies, and access controls around stored data. No online service can guarantee absolute security.
Your choices and deletion requests
You can choose which social provider to use, decline browser location access, and update available profile information in the product. Hotlah does not currently offer self-service account deletion.
To request deletion, follow the steps on the Hotlah data deletion page.
Contact Hotlah
Send privacy questions or requests to hotlahmalaysia@gmail.com.
