WhatsApp Automation for Indian Beauty Salons 2026: The DPDPA + GST + Shops Act Reality Behind Every Booking

The five compliance-plus-fit questions an Indian salon owner asks before automating WhatsApp

Before choosing a WhatsApp automation tool, an Indian salon owner in Mumbai, Delhi, Bangalore, Chennai, Kolkata, Hyderabad, Pune, Ahmedabad, Jaipur, Chandigarh, Lucknow or Kochi weighs five compliance-plus-fit questions.

1. Is my salon a proprietorship, partnership, LLP or Private Limited? The legal form determines tax obligations, GST posture, DPDP-controller responsibility, and staff-relationship framework. Most single-location salons operate as sole proprietorships under the owner's PAN with MSME Udyam Registration for policy benefits. Larger chains and franchises operate as Private Limited Companies (Pvt Ltd) with CIN issued by MCA (Ministry of Corporate Affairs) under Companies Act 2013 — providing separate legal personality, limited liability, and easier VC funding. Limited Liability Partnerships (LLP) and traditional partnerships sit in between.

2. What is my GST status and Composition Scheme election? Beauty services fall under HSN/SAC code 999722 (Beauty and physical well-being services) at standard GST rate 18%. Once aggregate turnover exceeds ₹20 lakh (₹10 lakh for special-category states) in a financial year, GST registration becomes mandatory. Salons with aggregate turnover up to ₹1.5 crore can elect the Composition Scheme paying 6% GST on services (3% CGST + 3% SGST) with restrictions: cannot claim input tax credit, cannot make inter-state supplies, must not issue tax invoices (only bills of supply), quarterly return CMP-08 + annual return GSTR-4. Once past ₹1.5 crore, mandatory standard 18% GST with monthly GSTR-1 + GSTR-3B returns.

3. Which state Shops and Establishments Act applies? Every state has its own Act — Maharashtra Shops and Establishments (Regulation of Employment and Conditions of Service) Act 2017 for Mumbai / Pune / Nagpur; Delhi Shops and Establishments Act 1954 for Delhi NCR; Karnataka Shops and Commercial Establishments Act 1961 for Bangalore; Tamil Nadu Shops and Establishments Act 1947 for Chennai; West Bengal Shops and Establishments Act 1963 for Kolkata; Telangana Shops and Establishments Act 1988 for Hyderabad; Gujarat Shops and Establishments Act 2019 for Ahmedabad; Rajasthan Shops and Commercial Establishments Act 1958 for Jaipur; Punjab Shops and Commercial Establishments Act 1958 for Chandigarh; and so on. Registration under the applicable Act is mandatory typically within 30-90 days of commencing operations. Requires: working hours declaration, weekly off, employment records, wage register, leave register.

4. What DPDP Act 2023 obligations apply to my customer data? The Digital Personal Data Protection Act 2023 was notified on 11 August 2023 with staged implementation through 2024-2026 via the DPDP Rules (draft rules published early 2025 with sector-specific timelines). Salons are Data Fiduciaries processing customer personal data (name, phone, service history, sometimes photo/before-after imagery). Core obligations: notice at data collection in clear language, consent-based lawful basis for processing (with Significant Data Fiduciary categorisation for larger scale operators), data subject rights (access, correction, erasure, grievance redressal), reasonable security safeguards, breach notification to Data Protection Board of India (DPBI) within timelines specified in DPDP Rules, DPO designation for Significant Data Fiduciaries. Penalties up to ₹250 crore per instance under Schedule 1.

5. What TRAI + WhatsApp Business Policy governs my marketing communication? TRAI (Telecom Regulatory Authority of India) operates the Do Not Disturb (DND) registry via 2442 short-code governing SMS specifically. Meta's WhatsApp Business Policy prohibits unsolicited marketing to users who have not opted in — the ban is more restrictive than TRAI for WhatsApp specifically. Meta rejects marketing templates that lack clear opt-in evidence and can restrict business accounts for repeat violations. DoT (Department of Telecommunications) rules on Unsolicited Commercial Communication (UCC) apply to voice and SMS; the DoT and TRAI have been extending scope in response to fraud concerns. Practical rule for salons: explicit opt-in at first booking + granular consent (service reminders vs marketing) + prompt opt-out honouring.

The Indian salon-management-software landscape 2026

Indian salon owners in 2026 typically choose between six category tiers of salon management + WhatsApp automation software:

• Zenoti — India-origin unicorn (founded 2010 by Sudheer Koneru + team, valued at $1.5B+ per 2022 Advent International investment). Global scale with strong Indian roots. Salon + spa + medical-spa PMS with WhatsApp integration, AI-driven analytics, dynamic pricing, staff scheduling, inventory. Pricing on quotation typically ₹5,000-₹25,000+ per location per month depending on modules and location count. Suits larger chains and premium multi-service operations.

• Fresha — UK-founded (2015) global salon booking platform with marketplace + salon PMS. Positioning: PMS free with 20-50% commission on marketplace bookings; PMS-only usage without marketplace also available. Strong in urban tier-1 cities (Mumbai, Delhi, Bangalore) with English-speaking premium salon customer base. WhatsApp integration via BSP partners.

• MioSalon (Adam Softech India) — India-focused salon PMS with strong small-to-mid-scale positioning. Booking + POS + inventory + staff commission + WhatsApp integration. Pricing typically ₹1,500-₹5,000 per location per month.

• Salonist (Shrivra Technologies India) — India-based salon PMS positioning for single-location and small chain. Booking + POS + membership + loyalty. Pricing typically ₹1,000-₹4,000 per location per month.

• Vagaro — US-origin but with growing Indian presence. Salon PMS with WhatsApp integration.

• Zoconut — wellness-and-nutrition-adjacent PMS used by some salons offering wellness services.

• MakeMyLoyalty, Salon Ninja, Beauty Salon Solutions, Salon Iris, Belliata, Timely — various niche and regional options.

Choice depends on:

1. Scale — Zenoti for 3+ locations or premium single-location; Fresha for marketplace-friendly single/small chain; MioSalon / Salonist for cost-efficient single location.
2. Vertical mix — pure salon vs medical spa vs wellness centre affects choice; Zenoti stronger for medical spa given its historical positioning.
3. Integration needs — Payment gateway (Razorpay, CCAvenue, PayU, Cashfree), accounting (Zoho Books, TallyPrime, Vyapar), CRM.
4. Language and staff usability — Hindi + English UI is table stakes; regional languages (Tamil, Telugu, Marathi, Bengali, Gujarati, Kannada, Malayalam, Punjabi) matter for staff comfort in non-metro operations.
5. WhatsApp Business API integration depth — native integration vs bolt-on BSP.

WhatsApp Business API BSPs serving Indian salons:

• Interakt (Haptik parent → Reliance Jio ecosystem) — India-native, from ₹999/month base tier, template management, chatbot builder.
• WATI — Hong Kong / India-focused, $29-299/month tiers, shared inbox, template management.
• Kaleyra (Tata Communications) — India-based enterprise BSP, CPaaS platform.
• Gupshup — India-origin fintech-scale, WhatsApp + SMS + voice + email unified.
• Yellow.ai — India-based enterprise conversational AI, WhatsApp + voice bots, larger enterprises.
• Freshworks Freshchat — Chennai-based, part of Freshworks NASDAQ-listed group.
• MessageBird, Twilio, 360dialog — global BSPs.
• BossBot — WhatsApp + Telegram + email + integrations for SME salons with India-tuned templates.

DPDP Act 2023 — Data Protection Board of India, notice + consent + rights + breach

The Digital Personal Data Protection Act 2023 (DPDPA) was notified on 11 August 2023 and represents India's first comprehensive personal data protection statute. Implementation is staged through 2024-2026 via the DPDP Rules (draft rules published in early 2025 by the Ministry of Electronics and Information Technology (MeitY) with sector-specific commencement timelines). The Data Protection Board of India (DPBI) is the enforcer.

Key obligations for an Indian salon as Data Fiduciary:

Section 5 DPDPA — Notice. At the time of collecting personal data, the Data Fiduciary must give the Data Principal a notice in clear, plain language covering: personal data proposed to be processed, purpose of processing, mechanism for grievance and consent withdrawal, communication with DPBI. Notice must be available in English and any of the 22 languages under the Eighth Schedule of the Constitution (Hindi, Bengali, Marathi, Telugu, Tamil, Gujarati, Kannada, Malayalam, Odia, Punjabi, and others) at the Data Principal's choice.

Section 6 DPDPA — Consent. Consent must be free, specific, informed, unconditional, unambiguous, and given by clear affirmative action for a specified purpose. Deemed consent applies in limited legitimate uses (Section 7). Consent must be withdrawable as easily as given.

Section 8 DPDPA — Data Fiduciary obligations. Reasonable security safeguards, breach notification to DPBI and affected Data Principals, data accuracy, data minimisation, deletion after purpose fulfilled or consent withdrawn.

Section 10 DPDPA — Significant Data Fiduciary (SDF). Larger-scale operators processing large volumes of personal data, or handling sensitive personal data at scale, or otherwise identified by DPBI, may be classified as SDF. SDF-additional obligations: DPO appointment (India-based), data protection impact assessment, periodic audit by independent data auditor, other DPBI-notified obligations.

Sections 11-14 DPDPA — Data Principal rights. Right to information about processing (with 30-day response window typically), right to correction and erasure, right to grievance redressal, right to nominate.

Section 33 + Schedule 1 DPDPA — Penalties. Up to ₹250 crore per instance for failure to prevent personal data breach where reasonable security safeguards were not implemented. Lower penalties for other violations (up to ₹200 crore for children's data misuse, up to ₹150 crore for non-fulfilment of Data Fiduciary obligations, etc.).

Cross-border data transfer — Section 16 DPDPA. Central Government may notify countries or territories to which personal data may not be transferred (blacklist model rather than adequacy whitelist). Meta / WhatsApp servers globally include US locations — cross-border transfer proceeds under commercial contract until specific restriction notified.

Salon-specific practical implications:

• Consent must be captured at first booking or website form with clear notice in English (and Hindi / regional language at Data Principal's choice); consent must be granular (service reminders vs marketing communications should be separate consents).
• Customer photo / before-after imagery requires additional explicit consent for that specific use if used in marketing.
• Staff data (bank details for salary, PAN for TDS, Aadhaar authentication where used) has its own consent framework; treat as separate flow from customer data.
• Breach notification pipeline — designated internal person, contact channel to DPBI, template notification to customers.
• Data retention — clear policy on how long customer data is kept after last transaction (typical: 3 years for service records + longer for accounting-mandated retention under Income Tax Act + Companies Act).

IT Act 2000 (still in force) — Section 43A (compensation for failure to protect data) + Section 72A (punishment for disclosure in breach of contract) and 2011 Sensitive Personal Data or Information Rules (SPDI) continue to apply until DPDPA fully replaces them via rule notifications. MeitY has indicated SPDI Rules will be gradually superseded.

GST for Indian salons — 18% standard + Composition Scheme 6% + HSN/SAC + returns

GST (Goods and Services Tax) applies to Indian beauty salons under Chapter Heading 9997 / SAC 999722 (Beauty and physical well-being services) at standard rate 18% (9% CGST + 9% SGST, or 18% IGST for inter-state).

Registration thresholds:

• ₹20 lakh aggregate turnover in a financial year — mandatory GST registration for services in most states.
• ₹10 lakh aggregate turnover for special-category states (Arunachal Pradesh, Assam, Jammu and Kashmir, Manipur, Meghalaya, Mizoram, Nagaland, Sikkim, Tripura, Uttarakhand and Himachal Pradesh) — lower threshold.
• Voluntary registration available below thresholds if the salon wants to claim input tax credit on rent, supplies, equipment.
• Aggregate turnover includes taxable + exempt + export + inter-state supplies across all locations under same PAN.

Composition Scheme (Section 10 CGST Act) for services:

• Aggregate turnover up to ₹1.5 crore in preceding financial year — eligible.
• Composition rate for service providers: 6% of turnover (3% CGST + 3% SGST).
• Restrictions:
  • Cannot claim input tax credit on inputs/services.
  • Cannot make inter-state supplies.
  • Must issue Bill of Supply (not Tax Invoice).
  • Must display 'Composition taxable person, not eligible to collect tax on supplies' at place of business.
  • Cannot supply through e-commerce operator required to collect tax at source (impacts UrbanClap / Urban Company etc if aggregator tax rules apply).
• Quarterly return CMP-08 for payment; Annual return GSTR-4 by 30 April following FY end.
• Suits small single-location salons with mostly local customers and simple operations.

Standard GST regime for salons above ₹1.5 crore or opting out of Composition:

• 18% GST on services (9% CGST + 9% SGST for intra-state; 18% IGST for inter-state).
• Tax Invoice with GSTIN, HSN/SAC code, taxable value, tax breakup, rate, place of supply.
• Monthly GSTR-1 (outward supplies) by 11th of following month.
• Monthly GSTR-3B (summary + payment) by 20th of following month (staggered dates for smaller assessees under QRMP scheme).
• Annual GSTR-9 by 31 December following FY end.
• Input Tax Credit available on eligible business purchases (rent, product supplies, equipment, professional fees).

QRMP (Quarterly Return Monthly Payment) scheme for taxpayers with aggregate turnover up to ₹5 crore — quarterly return filing with monthly IFF (Invoice Furnishing Facility) + monthly payment via PMT-06. Reduces filing frequency while maintaining payment cadence.

E-invoicing under GST Rule 48(4) — mandatory for taxpayers with aggregate turnover above ₹5 crore in any FY from 2017-18 onwards; below threshold voluntary. Invoice Reference Number (IRN) generated via Invoice Registration Portal (IRP). Most Indian salons operate below threshold; larger chains crossing ₹5 crore aggregate turnover need e-invoicing.

TDS on services — customer paying salon may deduct TDS under Section 194J or 194C if customer is a business exceeding thresholds; salon then claims TDS credit against GST/income tax liability.

GST-compliant accounting integration:

• TallyPrime — dominant Indian accounting software with native GST compliance.
• Zoho Books India — cloud-based, strong for small-mid salons.
• Vyapar — mobile-first Indian small business accounting.
• Quickbooks India / Sage 50 India — international brands with India localisation.
• ClearTax — dedicated GST compliance tool; integrates with accounting software.

Most Indian salon PMS (Zenoti, MioSalon, Salonist) integrate with these accounting tools via API or CSV/XML export.

Shops and Establishments Act + BWSSC + local licences

State-specific Shops and Establishments Act registration is mandatory for every Indian salon typically within 30-90 days of commencing operations. Each state maintains its own Act with different specifics — key states:

• Maharashtra Shops and Establishments (Regulation of Employment and Conditions of Service) Act 2017 — Mumbai, Pune, Nagpur, Nashik, Thane. Online registration via labourmumbai.gov.in and shopact.mahaonline.gov.in. Weekly off + working hours + record-keeping.
• Delhi Shops and Establishments Act 1954 — Delhi NCR. Registration via labour.delhigovt.nic.in.
• Karnataka Shops and Commercial Establishments Act 1961 — Bangalore, Mysuru, Mangaluru. Registration via labour.karnataka.gov.in.
• Tamil Nadu Shops and Establishments Act 1947 — Chennai, Coimbatore, Madurai. Registration via labour.tn.gov.in.
• West Bengal Shops and Establishments Act 1963 — Kolkata, Howrah. Registration via wblabour.gov.in.
• Telangana Shops and Establishments Act 1988 — Hyderabad, Secunderabad. Registration via labour.telangana.gov.in.
• Gujarat Shops and Establishments Act 2019 — Ahmedabad, Surat, Vadodara. Registration via labour.gujarat.gov.in.
• Rajasthan Shops and Commercial Establishments Act 1958 — Jaipur, Jodhpur, Udaipur.
• Punjab Shops and Commercial Establishments Act 1958 — Chandigarh, Ludhiana, Amritsar.

Common requirements across state Acts:

• Registration within specified window post-commencement (typically 30-90 days).
• Declaration of employees, weekly working hours (typically max 48 hours/week, 9 hours/day), weekly off day.
• Wage register, muster roll, leave register, holiday register.
• Maintenance of records for statutory retention period (typically 3-5 years).
• Notice-board display of Act extracts.
• Annual renewal typically required (some states permanent registration).

Beauty and Wellness Sector Skill Council (BWSSC) — established under NSDC (National Skill Development Corporation) with government + industry partnership. Promotes standardised skill certification for beauty and wellness professionals via National Occupational Standards (NOS) and Qualification Packs (QP). Roles include Beauty Therapist, Nail Technician, Hairstylist, Spa Therapist, Cosmetologist. Certification is voluntary but increasingly demanded by premium salon chains, franchises, and corporate clients. Government promotes via Pradhan Mantri Kaushal Vikas Yojana (PMKVY). BWSSC-certified staff often command higher wage rates. For a salon owner: certification is a differentiator for premium positioning and a defence against skill-gap criticism.

Local municipal trade licence — separate from Shops Act registration, required by many municipal corporations (Brihanmumbai Municipal Corporation BMC in Mumbai, Municipal Corporation of Delhi MCD in Delhi, BBMP in Bangalore, etc.) for commercial establishment operation. Annual renewal typical.

Health / hygiene licences — for salons offering specific services (waxing, threading, chemical peels, hair colouring with chemical processes, nail-fungal-adjacent treatments) local health department requirements may apply. State-specific and municipality-specific.

FSSAI licence — required if salon sells any food/beverage/nutraceutical to customers (some wellness-adjacent salons sell health supplements or nutritional products) — FSSAI (Food Safety and Standards Authority of India) licensing separate from salon licensing.

Drugs and Cosmetics Act 1940 + Rules 1945 — governs cosmetics manufacture and sale in India. Salons using cosmetic products should ensure suppliers are DCGI (Drug Controller General of India) compliant. Salons that formulate their own cosmetic products (private label) need to comply with Cosmetics Rules 2020 registration.

Employees' State Insurance (ESI) Act 1948 — mandatory ESI contributions for salons with 10+ employees earning below wage threshold (revised periodically). ESI covers medical, maternity, disability, unemployment benefits.

Employees' Provident Fund (EPF) Act 1952 — mandatory EPF contributions for salons with 20+ employees.

Professional Tax — state-level tax on employees + directors, thresholds and rates vary by state.

Local municipal signage, fire safety, building use certificate, pollution control may apply depending on scale.

UPI + PhonePe + Google Pay + Paytm + Razorpay — payment collection for WhatsApp-driven bookings

India's payment stack is UPI-first at consumer level with multiple layered options for salons:

UPI (Unified Payments Interface) — real-time bank-to-bank rail launched 2016 by NPCI (National Payments Corporation of India). Free for consumer person-to-person and person-to-merchant transactions under UPI merchant framework. Dominant apps by market share (2024-2025 NPCI data):

• Google Pay (Google Pay India) — ~45% UPI market share.
• PhonePe (Flipkart / Walmart) — ~45% UPI market share.
• Paytm (One97 Communications) — ~10-15% UPI market share, plus dominant wallet.
• Amazon Pay India, Cred Pay, BharatPe, MobiKwik, WhatsApp Pay India — remainder.

UPI QR — merchant displays static QR + customer scans in any UPI app → instant transfer to merchant bank account. Zero merchant fee under UPI framework for most transaction categories. Dominant physical-payment method in Indian salons.

UPI collect via API — merchant sends collect request → customer receives push notification in their UPI app → approves. Merchant integration via Razorpay, PayU India, CCAvenue, Cashfree Payments, PhonePe Business, Google Pay for Business, Paytm for Business. Enables WhatsApp-driven pre-booking deposit collection.

Card acquiring via payment gateways:

• Razorpay — Indian fintech unicorn, dominant modern PG. Pricing typically 2% + GST for domestic cards with volume tiers; UPI transactions often bundled at 0-0.5%.
• CCAvenue (Infibeam Avenues) — long-established Indian PG, wide card + net-banking + wallet + UPI coverage.
• PayU India — global PayU network Indian entity, wide coverage.
• Cashfree Payments — Bangalore-based PG with strong SME focus.
• Instamojo — self-serve PG for micro-merchants.
• Paytm Payment Gateway — Paytm's PG offering.

Card schemes: RuPay (NPCI domestic), Visa, Mastercard, American Express, Diners Club International, JCB (limited).

Digital wallets: Paytm Wallet, PhonePe Wallet, MobiKwik, Amazon Pay Balance, Freecharge, Ola Money, Cred.

BNPL (Buy Now Pay Later): Simpl, LazyPay (PayU), ZestMoney, Kissht, KreditBee, Cashe, Amazon Pay Later, PayLater by Flipkart.

Cash on service delivery still material for many salons particularly in tier-2 and tier-3 cities.

Cheque payment — declining in relevance for salon transactions.

Typical WhatsApp-commerce payment workflow for Indian salon:

1. Customer books via WhatsApp → PMS captures booking → payment link generated (Razorpay / Cashfree link, or UPI collect via API).
2. Customer receives WhatsApp message with payment link OR UPI QR image OR direct UPI intent link (upi:// scheme).
3. Customer pays via preferred method → webhook to PMS marks payment received → automated confirmation to customer.
4. Post-service: GST-compliant tax invoice generated (Tax Invoice for 18% GST salons, Bill of Supply for Composition Scheme salons) — sent via email or WhatsApp document attachment.

WhatsApp Pay India (Meta) — launched 2020 in limited rollout, expanded 2022-2025. Native UPI-integrated payment within WhatsApp chats. Adoption growing but not yet dominant. For merchant collection, standard PG integration remains the primary route.

RBI Guidelines on Digital Payments (2022 + subsequent updates) — governs payment aggregators and payment gateways. Salons themselves are typically merchants (not payment aggregators) so direct RBI compliance is via the PG. Salons should ensure their PG is RBI-authorised (Razorpay, CCAvenue, PayU, Cashfree — all authorised).

The defensible WhatsApp-automation stack for an Indian beauty salon in 2026

Combining the layers, the stack an Indian salon can defend before DPBI (for DPDP), GST authorities (Central + State), state Labour Department (for Shops and Establishments Act), local municipal authorities, and RBI-authorised payment aggregators, in 2026:

1. Business entity + registrations:

• Sole proprietorship for single-location small salons — PAN-based, Udyam Registration for MSME benefits, no separate legal personality.
• Private Limited Company (Pvt Ltd) for scale + investor readiness — CIN via MCA under Companies Act 2013, minimum 2 directors + 2 shareholders, DIN + DSC required.
• LLP as middle ground — MCA registered, limited liability partnership structure.
• Partnership firm — traditional, unregistered or Registrar of Firms registered.

2. GST registration: GSTIN via gst.gov.in once turnover crosses threshold (₹20L / ₹10L special-category states). Composition Scheme election if turnover under ₹1.5 crore (6% quarterly filing) or Standard scheme (18% monthly filing). Integration to accounting software (TallyPrime, Zoho Books India, Vyapar, QuickBooks India, ClearTax).

3. State-specific Shops and Establishments Act registration — as per operating state.

4. Local municipal trade licence + fire safety + building use + any specialty health licences.

5. Salon PMS + WhatsApp Business API layer — Zenoti + Interakt (India-native) for premium multi-location; Fresha + Kaleyra for marketplace-friendly; MioSalon or Salonist + WATI or Interakt for cost-efficient single-location; or BossBot for CRM-integrated Indian SME salons with India-tuned templates. Payment gateway integration (Razorpay dominant + Cashfree / CCAvenue / PayU / Instamojo alternatives).

6. DPDP-compliant customer data workflow:

• Privacy notice on website + at first booking, in English + Hindi + regional language.
• Granular consent capture (service reminders vs marketing).
• Data subject rights response pipeline (30-day standard).
• Breach notification pipeline to DPBI + affected customers.
• Retention policy (typically 3 years post last transaction for service records + longer for accounting-mandated retention).
• For Significant Data Fiduciary (SDF) classification (if applicable to larger chains): DPO appointment, DPIA, independent audit.

7. TRAI DND + WhatsApp Business Policy compliance:

• Marketing sent only to opted-in customers.
• Prompt opt-out honouring.
• Meta template registration with clear opt-in evidence.
• Separate marketing flow from utility (booking confirmation, appointment reminder) flow.

8. Written policy on what is NOT automated:

• Service-quality complaint requiring senior therapist judgement.
• Refund dispute (Consumer Protection Act 2019 sensitivity).
• Medical-adverse-event (allergic reaction to hair colour, chemical burn, infection) requiring clinical judgement.
• Staff HR matter (grievance, termination, appraisal).
• Franchise operational dispute (for franchise operators).

Typical profile — single-location salon in Andheri Mumbai with 5 staff and ₹40 lakh annual turnover: Sole proprietorship or Pvt Ltd + Udyam Registration + GST Composition Scheme 6% + Maharashtra Shops Act registration + MioSalon PMS (₹2,000/month) + WATI Standard $29/month + Razorpay PG (2% + GST per card, 0-0.5% UPI) + TallyPrime or Vyapar accounting (₹800-2,000/month) + Google Business Profile + basic Instagram presence. Total tech stack ~₹5,000-10,000/month + payment gateway per-transaction. First-year setup + running ~₹1-2.5 lakh including registrations and first-year operational tech.

Typical profile — 5-location premium chain in Delhi NCR with 45 staff and ₹5 crore aggregate turnover: Private Limited Company + CIN + GST Standard scheme + Delhi Shops Act registration + Zenoti PMS (₹15,000-40,000/location/month depending on modules) + Kaleyra or Interakt Enterprise for WhatsApp + Razorpay Enterprise for payments + Zoho Books for accounting with ClearTax for GST + BWSSC-certified staff for premium positioning + local Delhi trade licences + ESI + EPF + Professional Tax + Meta Business Suite for Facebook/Instagram + Google Business Profile for each location. Tech stack ~₹1.5-4 lakh/month + payment gateway. DPDP: SDF classification likely once large-volume customer data, requires DPO appointment + DPIA + annual independent audit.

Five documents separate the compliant Indian salon from the informal:

• Certificate of Incorporation (Pvt Ltd) or Udyam Registration + PAN/GST (proprietorship) — business entity proof.
• GSTIN certificate with Composition Scheme election if applicable, or standard scheme registration.
• State-specific Shops and Establishments Act registration certificate for each operating state.
• DPDP-compliant privacy notice published on website + first-contact delivery + consent management framework with granular options + breach notification pipeline to DPBI.
• Local municipal trade licence + fire safety certificate + any specialty health licences + BWSSC certification records for premium salon positioning.