Privacy Policy

The data controller is Hair Craft Salon & Academy, operating under the commercial name Hair Craft Salon & Academy.

CUI: 46119892. Trade Registry no.: J23/3090/2022. Registered office: Str. Horoscopului nr. 30, Domnești, jud. Ilfov. Salon: Str. Horoscopului nr. 30, Domnești, jud. Ilfov.

Privacy contact: contact@haircraftsalon.ro, phone +40735226072.

• technical and security data: IP address, user-agent, accessed pages, access times, technical errors and security logs;
• cookie consent data: consent ID, timestamp, banner/policy version, selected categories, page and language;
• appointment or request data: name, phone number, message, desired service, scheduling preferences and replies sent by phone or WhatsApp;
• photos or hair information voluntarily sent for consultation, including color history or the desired objective;
• billing data only if invoices or accounting documents are issued.

• website delivery, security and abuse prevention — legitimate interest;
• answers to requests, consultation and appointments — pre-contractual steps or contract performance;
• issuing and keeping accounting documents, where applicable — legal obligation;
• storing and proving cookie choices — legal obligation and limited legitimate interest;
• analytics, marketing or optional external content cookies — consent, if such technologies are activated.

We do not use legitimate interest for non-essential cookies, retargeting or electronic marketing without consent.

The website uses a consent banner that allows accepting, rejecting or customizing optional categories. Before consent, the website currently sets only strictly necessary technologies for remembering choices and operating the site.

Details about the hc_consent cookie, localStorage and settings are available in the Cookie Policy.

Data may be accessed by providers that support website operation and client communication: hosting (necomunicat), email (necomunicat), analytics (nu este activat), marketing pixel (nu este activat) or booking tools (nu este activat) if activated.

WhatsApp and Instagram are external Meta services. If you contact us through these platforms or open social profiles, further processing may also follow Meta policies.

If a supplier involves transfers outside the European Economic Area, we will use appropriate GDPR mechanisms such as standard contractual clauses and additional measures where necessary.

We keep data only as long as needed: ordinary requests up to 12 months, appointment data up to 24 months, technical/security logs 6-12 months, cookie consents up to 6 months after withdrawal or expiry, and accounting documents according to applicable Romanian legal periods.

You have the right of access, rectification, erasure, restriction, portability, objection, consent withdrawal and the right not to be subject to solely automated decisions with significant effects. Send requests to contact@haircraftsalon.ro.

You may complain to ANSPDCP, the Romanian data protection authority: dataprotection.ro.