1. Data Controller
StylishHands is the data controller responsible for your personal information.
Contact: info@stylishhands.gr · Peristeri, Athens, Greece.
2. Information We Collect
- Identity & contact details: name, email address, phone number.
- Booking details: selected service, preferred date/time, staff preference, and notes you provide.
- Technical data: IP address, browser type, device information, and pages visited (via essential cookies).
- Communications: messages sent through our contact form.
3. How We Use Your Data
- To process and manage your appointment bookings.
- To send booking confirmations and service-related communications.
- To respond to enquiries and provide customer support.
- To improve our website, services, and user experience.
- To comply with legal obligations under applicable Greek and EU law.
4. Legal Basis (GDPR)
- Contract performance — to fulfil your booking request.
- Legitimate interests — to operate and improve our salon services.
- Consent — for optional cookies and marketing communications where applicable.
- Legal obligation — where required by tax, accounting, or regulatory rules.
5. Data Retention
We retain booking records for as long as necessary to provide our services and meet legal requirements, typically up to 5 years for accounting and tax purposes unless a longer period is required by law.
Contact form messages are retained for up to 24 months unless an ongoing enquiry requires longer storage.
7. Your Rights
- Access, correction, or deletion of your personal data.
- Restriction or objection to certain processing activities.
- Data portability where applicable.
- Withdraw consent at any time for consent-based processing.
- Lodge a complaint with the Hellenic Data Protection Authority (HDPA).
8. Security
We implement appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls, and secure hosting infrastructure.
9. Contact Us
For privacy-related requests, email info@stylishhands.gr with the subject line “Privacy Request”. We aim to respond within 30 days.