Effective Date: 2026-11-01
Last Updated: 2026-11-01
This Privacy Policy explains how Mykati Co. (“Mykati Co.”, “Mykati”, “KATI”, “we”, “us” or “our”) collects, uses, stores and protects personal information when you use the KATI platform, website, mobile application or related services (collectively, the “Platform”).
This Privacy Policy applies to both Customers and Businesses, including salons, barbershops, hairdressers, beauty businesses and their owners, managers, employees and authorized users.
KATI is owned and operated by:
Mykati Co.
Zakho, Kurdistan Region, Iraq
Email: support@mykati.com
Website: www.mykati.com
Mykati Co. owns the KATI and Mykati brands and the intellectual property associated with the Platform.
KATI is a technology and appointment-booking platform that connects Customers with independent salons, barbershops, hairdressers, beauty businesses and other appointment-based service providers (“Businesses”).
Customers can use KATI to discover Businesses, view services and availability, make appointments, manage bookings and receive booking-related communications.
Businesses can use KATI to create profiles, publish services and prices, manage availability, receive bookings, manage appointments and use other Business tools.
KATI does not provide the underlying services booked through the Platform. The relevant Business is responsible for providing the actual service to the Customer.
Depending on how you use KATI, we may collect the following information.
This may include:
This may include:
Businesses are responsible for ensuring that they have the necessary authority to provide employee, staff or other personal information to KATI.
We may automatically collect information such as:
Where you provide permission, KATI may use location information to show nearby Businesses, improve search results and provide location-based features.
You can manage location permissions through your device settings.
KATI does not require continuous precise location tracking simply to use the basic booking functionality of the Platform.
Mykati Co. may use information to:
Where applicable, information may also be processed based on your consent or other lawful grounds recognized by applicable law.
When a Customer makes a booking, KATI may process information necessary to complete and manage the appointment.
This may include:
This information may be provided to the relevant Business so that it can prepare for and manage the appointment.
Businesses may receive access to Customer information that is reasonably necessary to manage bookings and provide their services.
Depending on the features used, this may include:
Businesses must handle this information responsibly and only use it for lawful and legitimate business purposes.
Businesses must take reasonable steps to protect Customer information and restrict access to authorized personnel.
Businesses must not sell, misuse or unlawfully disclose Customer information obtained through KATI.
Businesses using KATI are independently responsible for their own business activities and, where applicable, for personal information they receive and control through KATI.
Businesses are responsible for:
If a Customer provides information directly to a Business outside KATI — for example, by telephone, WhatsApp, email, social media or in person — that information may be handled independently by the Business and may be subject to the Business’s own privacy practices.
KATI’s standard business model is based on Business subscriptions.
Customers generally:
KATI does not generally provide the booked service or process payment for the underlying service.
Under KATI’s standard model, Customers are not charged a booking commission or booking fee.
Businesses may pay Mykati Co. a recurring subscription fee for access to KATI’s Business services.
If KATI introduces payment functionality in the future, additional terms and privacy information may apply.
KATI may allow Customers to submit ratings, reviews, comments, photographs or other content.
Reviews and ratings may be publicly visible.
Users should not publish passwords, financial information, sensitive personal information or private information about another person.
Businesses may choose to make information such as their name, location, services, prices, opening hours, photographs, descriptions, staff profiles and availability publicly available through KATI.
Businesses are responsible for ensuring that they have the necessary rights and permissions to publish information or content they provide to KATI.
Mykati Co. may remove content that violates applicable law, our Terms & Conditions or our policies.
KATI is not designed to require sensitive personal information for ordinary bookings.
Users should avoid providing unnecessary sensitive information in booking notes, reviews, comments or other free-text fields.
Businesses should also avoid requesting unnecessary sensitive information through KATI.
Where sensitive information is legitimately required for a particular service, the relevant Business remains responsible for handling that information appropriately and in accordance with applicable requirements.
We may send service-related communications through email, SMS, telephone, push notifications, in-app notifications or other supported methods.
These may include:
Where permitted by applicable law, we may also send promotional communications about KATI, features, offers or services.
You may opt out of promotional communications where an appropriate unsubscribe option is provided.
You may still receive necessary transactional or service-related communications.
KATI may use cookies, software development kits, pixels, local storage and similar technologies to:
Third-party providers may also use similar technologies when providing services to KATI.
You may be able to manage certain cookies through your browser or device settings.
We may share information where reasonably necessary with:
We do not sell personal information as a business model.
We may also use or share aggregated or anonymized information that does not reasonably identify an individual.
We may disclose information where reasonably necessary to:
Mykati Co. takes reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration and unauthorized disclosure.
Depending on the relevant service and technology, these measures may include access controls, authentication, authorization controls, monitoring, logging, secure infrastructure, backups and security procedures.
However, no online service can guarantee absolute security.
Users and Businesses are responsible for protecting their account credentials and should notify Mykati Co. promptly if they suspect unauthorized access.
If Mykati Co. becomes aware of a security incident involving personal information, we will take reasonable steps to:
We retain personal information only for as long as reasonably necessary for purposes such as:
Different types of information may be retained for different periods.
When information is no longer reasonably required, we may delete, anonymize or securely dispose of it, subject to applicable legal, security, accounting or legitimate business requirements.
Customers and Businesses may request deletion of their KATI account by contacting:
We may request reasonable information to verify the identity of the requester.
Certain information may need to be retained where necessary for:
Where information can no longer reasonably be associated with an individual, it may be retained in anonymized form.
Depending on applicable law, you may have rights concerning your personal information, including the right to:
Requests should be sent to:
We may verify your identity before processing certain requests.
KATI may integrate with or link to third-party services, including mapping, analytics, payment, communication, authentication, hosting and social media services.
Third-party services may collect and process information under their own terms and privacy policies.
Mykati Co. is not responsible for the independent privacy practices of third-party services.
Mykati Co. is based in:
Zakho, Kurdistan Region, Iraq
Some technology and infrastructure providers used by KATI may process information outside Iraq or the Kurdistan Region.
Where personal information is processed outside the Kurdistan Region of Iraq, Mykati Co. will take reasonable measures appropriate to the circumstances to protect the information and comply with applicable requirements.
KATI is intended for persons who are legally permitted to use the Platform under applicable law.
We do not knowingly seek to collect personal information from children in circumstances where such collection is prohibited by applicable law.
If you believe a child has provided personal information to Mykati Co. in circumstances where this should not have occurred, please contact:
Mykati Co. may update this Privacy Policy from time to time to reflect:
The latest version will be published on the KATI Platform.
The Last Updated date at the beginning of this Privacy Policy indicates when it was most recently revised.
Where a change is materially significant and notification is appropriate or legally required, we may provide additional notice through KATI or another appropriate communication method.
This Privacy Policy is intended to operate in accordance with the laws and regulations applicable to Mykati Co. and the KATI Platform, including applicable laws and regulations of the Republic of Iraq and the Kurdistan Region of Iraq.
Nothing in this Privacy Policy is intended to limit any mandatory legal rights that cannot lawfully be excluded or restricted.
All intellectual property relating to the KATI Platform, including but not limited to KATI, Mykati, mykati.com, logos, trademarks, service marks, designs, graphics, software, user interface, databases, text, content, product names, service names, slogans and other Platform materials, is owned by Mykati Co. or lawfully licensed to Mykati Co.
No part of the KATI Platform may be copied, reproduced, modified, distributed, republished, transmitted, displayed, sold, licensed or otherwise exploited without the prior written permission of Mykati Co., except where expressly permitted by applicable law.
Third-party trademarks, trade names and logos appearing on KATI remain the property of their respective owners.
If you have questions, concerns, complaints or requests regarding this Privacy Policy or the handling of personal information, please contact:
Mykati Co.
Zakho, Kurdistan Region, Iraq
Email: support@mykati.com
Website: www.mykati.com