Privacy Policy

Last updated: 31 May 2026

What We Collect

Depending on how you use the website, we may process contact details, appointment details, application details, review comments, cart contents, pickup details, payment status, and technical information such as browser, device, IP address, timestamps, and security logs.

Please do not send health, medical, biometric, or other sensitive information through open text fields unless we specifically ask for it and explain why it is needed.

Why We Process Data

We process personal data to answer enquiries, manage appointments, handle job applications, display cart and coupon features, process payments, prevent spam and misuse, keep the website secure, comply with legal duties, and improve our services.

Legal bases may include contract preparation or fulfilment, consent, legitimate interests, and legal obligations under the GDPR.

Forms and Applications

Career applications and review forms are submitted through the website hosting/form provider. We use this information only to respond, review applications, manage feedback, and protect the forms from spam. Application data should be deleted when it is no longer needed for recruitment unless legal retention duties apply.

Bookings

Appointment booking is provided through Calendly. Calendly may process appointment details, contact details, technical data, and cookies according to its own policies. The embedded booking calendar loads only after you accept third-party services or choose to load it.

Checkout and Payments

Product checkout uses PayPal. PayPal receives the information required to display payment buttons and process payments, including payment and transaction details. PayPal is responsible for its own payment processing environment. PayPal scripts load only after you accept third-party services or choose to load PayPal checkout.

Local Storage and Cookies

The website uses essential browser storage for cart contents, coupon codes, and privacy preferences. These features help the website work and are stored on your device. You can delete them through your browser settings at any time.

Third-party services such as Calendly, PayPal, Google Maps, Instagram, WhatsApp, and TikTok may set their own cookies or collect technical data when you load or open them.

Recipients and Transfers

Data may be shared with service providers needed to run the website, booking, forms, payments, communication, hosting, and security. Some providers may process data outside the European Economic Area. Where required, transfers should rely on appropriate safeguards such as standard contractual clauses or provider data protection terms.

Your Rights

You may request access, correction, deletion, restriction, portability, or objection to processing. Where processing is based on consent, you may withdraw consent for the future. You may also lodge a complaint with a data protection supervisory authority.

To exercise your rights, contact ebzoeysalon@gmail.com.

Retention

We keep personal data only as long as needed for the relevant purpose, legal duties, dispute handling, accounting, or security. Retention periods vary by data type and legal requirement.

Security

We use reasonable technical and organisational measures to protect personal data. No online service can be guaranteed completely secure, so please avoid sending unnecessary sensitive details through the website.