Privacy Policy
Privacy Policy
Effective Date: October 17, 2025
1. Introduction
Hairstudio 82 ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our barbershop, use our website, or interact with our services.
2. Information We Collect
2.1 Personal Information You Provide
We may collect the following personal information:
- Contact Information: Name, email address, phone number, postal address
- Booking Information: Appointment history, preferred services, stylist preferences
- Payment Information: Payment method details (processed securely through payment processors)
- Health Information: Allergies, skin conditions, or other health-related information relevant to our services
- Preferences: Service preferences, product preferences, communication preferences
2.2 Information Automatically Collected
When you visit our website or use our services, we may automatically collect:
- Device Information: IP address, browser type, operating system
- Usage Data: Pages visited, time spent on pages, click patterns
- Location Data: General location information (if permitted)
- Cookies and Tracking Technologies: See our Cookie Policy for details
2.3 Information from Third Parties
We may receive information from:
- Social media platforms (if you interact with us on social media)
- Payment processors (transaction confirmations)
- Booking platforms (if you book through third-party services)
3. How We Use Your Information
We use your personal information for the following purposes:
3.1 Service Provision
- Processing and managing appointments
- Providing barbering and grooming services
- Communicating about your appointments (confirmations, reminders, changes)
- Maintaining service records and preferences
3.2 Business Operations
- Processing payments and managing accounts
- Improving our services and customer experience
- Training staff and quality assurance
- Managing our business operations
3.3 Communication
- Sending appointment reminders and confirmations
- Responding to your inquiries and requests
- Sending promotional communications (with your consent)
- Notifying you of important changes to our services or policies
3.4 Legal Compliance
- Complying with legal obligations
- Protecting our rights and interests
- Preventing fraud and ensuring security
- Responding to legal requests
4. Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (GDPR), we process your personal data based on:
- Consent: When you have given clear consent for specific purposes
- Contract Performance: To fulfill our contractual obligations (providing services)
- Legal Obligation: To comply with legal requirements
- Legitimate Interests: For our legitimate business interests (e.g., improving services, security)
5. Information Sharing and Disclosure
We do not sell your personal information. We may share your information only in the following circumstances:
5.1 Service Providers
- Payment processors for transaction processing
- IT service providers for website and system maintenance
- Marketing platforms (with your consent)
- Booking system providers
5.2 Legal Requirements
- When required by law or legal process
- To protect our rights, property, or safety
- To prevent fraud or illegal activities
- In response to government requests
5.3 Business Transfers
- In the event of a merger, acquisition, or sale of assets
- Your information may be transferred as part of the transaction
5.4 With Your Consent
- We may share information with third parties when you have given explicit consent
6. Data Security
We implement appropriate technical and organizational measures to protect your personal information:
- Encryption of sensitive data in transit and at rest
- Secure payment processing
- Access controls and authentication
- Regular security assessments
- Staff training on data protection
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
7. Data Retention
We retain your personal information only for as long as necessary:
- Active Customers: While you continue to use our services
- Inactive Customers: Up to 3 years after your last appointment (unless legal requirements dictate longer retention)
- Financial Records: As required by law (typically 7 years)
- Marketing Consent: Until you withdraw consent or opt out
8. Your Rights (GDPR)
Under GDPR, you have the following rights:
8.1 Right to Access
- Request a copy of your personal data we hold
- Receive information about how we process your data
8.2 Right to Rectification
- Correct inaccurate or incomplete personal data
- Update your information at any time
8.3 Right to Erasure ("Right to be Forgotten")
- Request deletion of your personal data
- Subject to legal and contractual obligations
8.4 Right to Restrict Processing
- Request limitation of how we process your data
- In certain circumstances
8.5 Right to Data Portability
- Receive your data in a structured, commonly used format
- Transfer your data to another service provider
8.6 Right to Object
- Object to processing based on legitimate interests
- Object to direct marketing
8.7 Right to Withdraw Consent
- Withdraw consent at any time (where processing is based on consent)
- Does not affect lawfulness of processing before withdrawal
8.8 Right to Lodge a Complaint
- File a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)
To exercise these rights, please contact us using the information in Section 12.
9. Children's Privacy
Our services are not directed to children under 16. We do not knowingly collect personal information from children under 16 without parental consent. If you believe we have collected information from a child under 16, please contact us immediately.
10. International Data Transfers
Your information may be transferred to and processed in countries outside the European Economic Area (EEA). When we do so, we ensure appropriate safeguards are in place, such as:
- Standard contractual clauses
- Adequacy decisions by the European Commission
- Other approved transfer mechanisms
11. Cookies and Tracking Technologies
We use cookies and similar technologies on our website. For detailed information, please see our Cookie Policy.
12. Marketing Communications
- We will only send you marketing communications with your consent
- You can opt out at any time by:
- Clicking the unsubscribe link in emails
- Contacting us directly
- Updating your preferences in your account
- Opting out does not affect transactional communications (appointment confirmations, etc.)
13. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read their privacy policies.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Effective Date." We encourage you to review this policy periodically.
15. Contact Us
If you have questions, concerns, or wish to exercise your rights regarding this Privacy Policy, please contact us:
Hairstudio 82 Data Protection Officer Email: privacy@hairstudio82.nl Phone: [Your Phone Number] Address: [Your Address]
Dutch Data Protection Authority (Autoriteit Persoonsgegevens) Website: https://autoriteitpersoonsgegevens.nl Phone: +31 (0)70 888 85 00
Last Updated: October 17, 2025