Last Updated on April, 15, 2026
Frissa processes personal data both as a service provider to professionals and, in limited cases, as a controller for account and business-related information.
When professionals use Frissa to manage their clients’ information, the professional is the Data Controller and Frissa acts as the Data Processor. For account registration, billing, and service operations, Frissa may act as the Data Controller for that specific data.
We may process:
account information, such as name, email address, and salon details
customer information entered by users, such as names, notes, appointment details, and images
technical and usage data required to operate and secure the service
We process personal data to:
provide and maintain the Frissa service
enable client management and appointment documentation
send summaries and follow-up communication
secure, improve, and support the service
comply with legal obligations
Where Frissa acts as Data Controller, processing is based on contract, legitimate interests, legal obligations, or consent where required. Where Frissa acts as Data Processor, processing is carried out on the instructions of the professional using the service.
We use reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or disclosure.
We retain personal data only as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required by law.
Frissa may use trusted subprocessors to provide hosting, infrastructure, analytics, authentication, and communication services. Where personal data is transferred outside the EEA, appropriate safeguards will be used where required.
9. Data Subject Rights
Where applicable, individuals may have the right to access, correct, delete, restrict, or object to the processing of their personal data, and the right to data portability.
If we become aware of a personal data breach affecting data we process as a controller, we will act in accordance with applicable law. Where we act as a processor, we will notify the relevant controller without undue delay.
If you have questions about this Privacy Policy or personal data processing, contact us at: legal@frissa.no