SECTION 1 – DATA CONTROLLER

The data controller for personal data collected through nellyhairline.com is Keep in Touch SBH, operating the Nelly Hairline brand. Contact: contact@nellyhairline.com.

SECTION 2 – DATA COLLECTED

When using the website and booking a service, the following data may be collected:

• First and last name
• Phone number (WhatsApp)
• Email address
• Accommodation type (villa, hotel, yacht)
• Requested date and time for the service
• Type of service requested

SECTION 3 – PURPOSE OF PROCESSING

Collected data is used exclusively for the following purposes:

• Processing and confirming bookings
• Communication related to the service (schedule, location, follow-up)
• Improving service quality

No data is used for advertising purposes or shared with third parties without explicit client consent.

SECTION 4 – DATA RETENTION

Personal data is retained for the period strictly necessary to fulfil the above purposes, and for a maximum of 3 years from the last contact.

SECTION 5 – YOUR RIGHTS

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access to your personal data
• Right of rectification in case of inaccuracy
• Right to erasure (right to be forgotten)
• Right to restriction of processing
• Right to data portability
• Right to object to processing

To exercise these rights, please send your request to: contact@nellyhairline.com.

SECTION 6 – COOKIES

The nellyhairline.com website does not use advertising cookies or third-party trackers. The only technical elements loaded are Google Fonts, required for the display of the site. No browsing data is sold or used for commercial purposes.

SECTION 7 – SECURITY

Nelly Hairline implements all appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure.

SECTION 8 – CONTACT AND COMPLAINTS

For any question regarding this policy or to exercise your rights: contact@nellyhairline.com. If your concern is not resolved, you may lodge a complaint with the relevant data protection authority in your country of residence.