Privacy statement
Template: Chelsey must review and complete this text. This is not legal advice.
Who is responsible for your data? Hair Care by Chelsey, Chelsey, [address]. You can reach us at [email address] or [phone number].
What data do we process?
- your name, email address and mobile number;
- your appointments, the chosen services and prices;
- information about your hair (type, structure, thickness, length, natural colour) and colour formulas;
- allergies or a sensitive scalp, if you share them;
- photos: inspiration photos you send yourself and before and after photos of a treatment;
- if you join the waiting list: your name, email address, mobile number, the chosen services, the days and parts of the day that suit you, and your language;
- if you create an account: your password (stored only in encrypted form).
Why, and on what legal basis?
- To schedule your appointments, remind you and treat you well. Legal basis: the performance of our agreement with you.
- Allergies and a sensitive scalp are health data. We only use them to treat you safely, and only with your explicit consent. You can withdraw that consent at any time.
- To meet our legal obligations, such as bookkeeping.
How long do we keep your data?
- inspiration photos: 6 months after your visit;
- client data: up to 5 years after your last visit;
- invoicing data: as long as the law requires;
- receipts, invoices and other sales records are kept for 7 years, as bookkeeping law requires. If you have your data erased, we unlink them from you.
The waiting list If no slot is free, you can join the waiting list. We use your details to email you when a slot opens up that fits your choice. Chelsey may also call you or contact you on WhatsApp about a free slot; that is why we keep your mobile number. Legal basis: your consent, which you give when you sign up and can withdraw at any time by unsubscribing. You confirm your sign-up with a link in an email, within 48 hours; if you do not, it is deleted. Your sign-up ends when you book an appointment, unsubscribe, Chelsey removes it or it expires (when all your desired days have passed, or 8 weeks after you confirm if you chose as soon as possible). After that we keep it for another 30 days and then delete it. You can unsubscribe at any time with the link in every waiting list email, or by contacting us.
Reviews on the website On the website we show a selection of reviews that clients posted on Google, with first name and the first letter of the surname.
Who sees your data? Only Chelsey. We work with these processors:
- Brevo, to send emails (confirmations, reminders, waiting list emails, receipts and, after a visit, an email asking for a review; you can opt out with one click);
- Cloudflare, for the secure connection to this website;
- Apple (iCloud), for Chelsey's calendar: it only holds your name, the chosen services and the time of your appointment.
We never sell your data and use no trackers or advertising cookies.
Your rights You have the right to access, correct and delete your data, and to object to its use. With an account you can download your data and delete your account yourself. If you are not satisfied with how we handle your data, you can file a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit, www.dataprotectionauthority.be).
Contact Questions about your privacy? Email [email address] or call [phone number].