Privacy Policy

Data controller

The data controller is Debs Hair Beauty, located at 150A Rue de Laeken, 1000 Brussels, Belgium. For any question about your personal data, you can reach us by phone at +32 472 34 19 68 or visit us directly at the salon.

Data we collect

When you book a service or buy a product in our shop through this site, we collect: your first and last name, your phone number, the date and time of the appointment or order, and any notes you add to the form (allergies, preferences, special requests). When you pay, your card number is entered directly on our payment provider Stripe's secure page: we never receive or store your card number. We only keep the payment confirmation (amount, currency, transaction ID).

Why we use this data

This data is used exclusively to: confirm and fulfil your booking or order, contact you if needed (rescheduling, a question about your order), process payment, and meet our legal and accounting obligations. We never use your data for marketing or advertising without your explicit consent, and we do not carry out any automated profiling.

Who your data is shared with

Your data is never sold. It is only passed on to the following providers, strictly necessary to run the website and the salon:

— Stripe (online payment): processes payment data within a PCI-DSS certified infrastructure. — Neon (database): securely hosts booking and order information. — Vercel (website hosting): technically hosts this site.

About WhatsApp: after a paid booking, the site offers you a pre-filled link that opens WhatsApp on your own phone if you choose to click it — no message is ever sent automatically by us, and Meta/WhatsApp only receives your data if you decide to send that message yourself.

How long we keep your data

Data linked to a paid booking or purchase is kept for the legal retention period for accounting records in Belgium (7 years), in line with our tax obligations. After that period, it is deleted or anonymised.

Cookies

This site uses a single technical cookie ("NEXT_LOCALE") that remembers the language you chose during your visit, so you don't have to select it again on every page. It is not used for advertising tracking or behavioural analysis, and is never shared with any third party. This site currently uses no audience-analytics tool (such as Google Analytics) and no targeted advertising.

Your rights

Under the General Data Protection Regulation (GDPR), you have the following rights over your personal data at any time: access, rectification, erasure, restriction of processing, portability, and objection. To exercise any of these rights, contact us at +32 472 34 19 68 or directly at the salon, 150A Rue de Laeken, 1000 Brussels.

Supervisory authority

If you believe your rights are not being respected, you can lodge a complaint with the Belgian Data Protection Authority (APD/GBA): www.autoriteprotectiondonnees.be.

Changes

This policy may be updated from time to time, for example if our providers or practices change. The date of the last update appears at the top of this page.