LEGAL INFORMATION
Privacy
policy.
Your data, handled with the same care as your hair: only what we need, only for what we explain here, and never sold.
Last updated: 13 October 2026. The Spanish version prevails in case of discrepancy.
1. Data controller
- Owner: Lucía Peluquería Ecológica
- Address: C. de Pío XII, 10, bajo 1, 33013 Oviedo (Spain)
- Phone: +34 659 306 659
We process data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD).
2. What data we process
When you request an appointment
First name or nickname, surname, sex, mobile number, email address, the channel you choose to receive the proposal (email or WhatsApp), the service, the day and the time. To prevent abuse we also keep an encrypted fingerprint of your IP address, not the address itself.
If you accept the appointment, this data is used to create or update your customer record, where the salon keeps your visits, the services provided, their prices and, where applicable, whether you missed a confirmed appointment. This information is internal and never published.
When you autofill your details
If you are already a customer, you can request a one-time code that we send to the email address stored in your record. The code expires after ten minutes and does not reveal to anyone whether your phone number is registered.
When you leave a review
The code on your receipt (only to check that the visit took place), the public name you choose, your rating, your comment and, optionally, a photo. We remove the photo's metadata (location, camera, date) before storing it.
When you browse the website
Essential technical data: IP address, browser and requested pages, which the server needs to work and to protect itself from attacks. We do not use analytics, advertising or third-party tracking.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Managing your request, contacting you to validate it, sending you the proposal and providing the appointment. | Pre-contractual steps and performance of the service you ask for (Art. 6(1)(b) GDPR). |
| Keeping your customer record and visit history and issuing receipts. | Performance of the service and accounting and tax obligations (Art. 6(1)(b) and 6(1)(c)). |
| Publishing your review and, if attached, your photo. | Your consent, which you can withdraw at any time (Art. 6(1)(a)). |
| Protecting the website: limiting abusive requests, preventing fake bookings and logging security incidents. | Legitimate interest in the security of the service (Art. 6(1)(f)). |
We do not make automated decisions or build profiles with your data.
4. Who can see your data
Only the salon team. We do not sell or share your data. The following may be involved in providing the service:
- The email provider that delivers proposals and codes, when you choose email.
- WhatsApp (Meta), only if you choose that channel: the team writes to you from WhatsApp, and that service's privacy policy applies.
- Public authorities, when required by law.
The "Get directions" link takes you to Google Maps, an external service with its own privacy policy; this website does not send it your data.
5. How long we keep it
- Appointment requests: requests that are not reviewed expire after 24 hours and stop blocking the schedule. We keep the record while it is useful to answer questions about that booking.
- Customer record and history: while you are a customer and, afterwards, for the periods required by tax and consumer law.
- Reviews and photos: until you ask us to remove them or the salon stops publishing them.
- Verification codes: valid for ten minutes; useless afterwards.
- Security logs: only as long as needed to detect and resolve incidents.
6. Your rights
You can request access to, rectification or erasure of your data, restriction of or objection to its processing and data portability, and withdraw your consent at any time. Write to us, call us on +34 659 306 659 or visit the salon. We will reply within one month.
If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD).
If you are under 14, please ask a parent or guardian to book for you.