Privacy Policy
1. Who we are / Data controller
The controller of your personal data is [▸▸ REPLACE: business/company name, address, tax ID ◂◂].
You can reach us by phone at +48 791 759 798 or by email at biuro.k.beautystudio@gmail.com.
This policy has been in effect since [▸▸ REPLACE: date ◂◂].
2. What data we collect
Through the contact form, we receive your name, phone number, and the city you selected.
When you visit the site, technical data - your IP address and server logs - is recorded automatically.
If you contact us directly (call, message) or book an appointment through alteg.io, we receive the data you provide during that process.
3. How we use your data
We use your data solely to contact you regarding an appointment or consultation, and to keep the site running securely.
We don't send marketing newsletters or use your data for marketing purposes.
If that ever changes, we will update this policy in advance.
4. Who we share data with
To handle inquiries and keep the site running, we rely on: Cloudflare (processing contact-form requests and site infrastructure), Telegram (delivering your message to the salon's staff chat; its servers may be located outside the EEA, but this transfer is necessary to fulfil your request), alteg.io (online booking), Google (the map on the contact page, loaded on click), and Netlify (site hosting).
We never sell your personal data.
5. Cookies
We use several categories of cookies: necessary, functional, analytics, and marketing.
Non-essential cookies (analytics and marketing) are only set with your consent, given through the on-site banner.
Analytics tools are not connected yet, so we currently collect no visit statistics.
You can change your cookie choices at any time via the "Cookie Settings" button in the footer.
6. Data retention and protection
Data from the contact form is kept until your inquiry is resolved, and for no longer than [▸▸ REPLACE: N months ◂◂], after which it is deleted.
We protect your data with HTTPS and restricted access to the salon's staff chat.
7. Your rights
Under the GDPR, you have the right to access your data, correct it, have it deleted, restrict its processing, object to its processing, and withdraw consent at any time.
To exercise any of these rights, contact us using the details in section 1.
You also have the right to lodge a complaint with the supervisory authority - the President of the Personal Data Protection Office (UODO, uodo.gov.pl).
8. Changes to this policy
We may update this policy - the current version is always published on this page along with its update date.
We recommend checking back periodically.