Privacy Policy

1. Introduction

This Privacy Policy describes how Hair Chief ("we", "our", or "us") collects, uses, and protects your personal information when you use our website and services. We are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and applicable Dutch data protection laws.

By using our website and booking services, you agree to the collection and use of information in accordance with this policy.

2. Data Controller

The data controller responsible for processing your personal data is:

3. Information We Collect

We collect the following types of personal information:

• Contact Information: Name, email address, and phone number when you book an appointment
• Booking Information: Selected service, date, and time of your appointment
• Technical Information: IP address, browser type, device information, and usage data collected through cookies and similar technologies
• Communication Data: Any correspondence you send to us via email or contact forms

4. How We Use Your Information

We use your personal information for the following purposes:

• To process and manage your appointment bookings
• To communicate with you about your appointments and services
• To send appointment confirmations and reminders
• To respond to your inquiries and provide customer support
• To improve our website and services
• To comply with legal obligations
• To protect our rights and prevent fraud

5. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal bases:

• Contractual Necessity: Processing is necessary to fulfill our contract with you (booking and providing services)
• Legitimate Interests: Processing is necessary for our legitimate business interests (improving services, website analytics)
• Consent: Where you have given explicit consent for specific processing activities
• Legal Obligation: Processing is necessary to comply with legal requirements

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Booking records are retained for a minimum of 7 years as required by Dutch tax and accounting laws
• Marketing communications data is retained until you withdraw consent or opt-out
• Technical and analytics data is retained for up to 2 years

7. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our website and conducting our business (e.g., hosting providers, email services)
• Legal Requirements: When required by law or to respond to legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you have given explicit consent for sharing

8. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

• Right of Access: You can request a copy of your personal data we hold
• Right to Rectification: You can request correction of inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: You can request limitation of how we process your data
• Right to Data Portability: You can request your data in a structured, machine-readable format
• Right to Object: You can object to processing based on legitimate interests
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us at contact@example.com. We will respond to your request within one month.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience. Cookies are small text files stored on your device.

We use cookies for:

• Essential website functionality
• Analytics and performance monitoring
• Remembering your preferences

You can control cookies through your browser settings. However, disabling cookies may affect website functionality.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (SSL/TLS)
• Secure server infrastructure
• Regular security assessments
• Access controls and authentication

11. International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other legally recognized transfer mechanisms

12. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

14. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us: