How Lorenly protects client data & photos
Client records, photos and signed consent forms are sensitive. Lorenly is built so this information is only visible to your team, never to the public.
Client photos and signatures are private#
Client photos and consent signatures are not publicly accessible. Even a direct link will not open them. Access is granted only through Lorenly (the console or the mobile app) to signed-in members of your team, and those links expire quickly. Public content, such as the pictures on your booking page, stays public as normal.
Control who sees what#
- Every role has its own permissions, see Team members, roles & permissions.
- Turn off See client email & phone for roles that do not need it. They then see masked contact details in lists, bookings, search and exports.
- Your business email and phone are shown on your public pages in a way that automated scrapers cannot harvest.
Erase a client's data#
When a client asks to be forgotten, open their record in Clients and choose Erase (GDPR). Their name, email and phone are removed from bookings, redemptions and purchases, and the client record is deleted. Booking history is kept for your figures, without the personal details.
Marketing consent#
Only clients who gave marketing consent receive marketing messages or are synced to an email marketing tool. The opt-in box on your booking page records it, and you can tick Marketing consent on a client when they agree in person.
Good practice#
- Keep everyone on their own login so access can be traced in the audit log and removed when someone leaves.
- Only capture the photos and information you need for the client's care.
- When someone leaves, deactivate them in Settings → Team straight away.