Privacy Policy

Last updated: 27 January 2026

1. Controller

The controller of personal data is Olga.TheHAIR, sole trader, Kraków, Poland ("we", "us"). Contact for privacy matters: [email protected].

2. Scope

This Privacy Policy applies to the website https://olgathehair.com/ and related communications.

3. Data We Collect

  • Contact data provided via direct messages (e.g. name, username, contact details, message content)
  • Booking-related information (service type, date, location)
  • Technical data: IP address, device and browser information
  • Analytics data via Google Analytics 4
  • Advertising data via Google Ads and Meta Pixel
  • Embedded content interactions (e.g. Google Maps)

4. Purposes & Legal Bases

  • Handling enquiries and bookings – pre-contractual steps / contract performance
  • Service delivery and communication – contract performance
  • Website analytics – consent
  • Marketing and advertising – consent
  • Legal obligations – legal obligation

5. Cookies & Consent

We use a custom cookie banner. Analytics and marketing cookies are blocked until consent is given. Users may withdraw consent at any time by contacting us via email.

6. Data Sharing

Data may be processed by trusted service providers, including:

  • Google (Analytics, Ads, Tag Manager)
  • Meta Platforms
  • Hosting and technical providers

Data may also be processed by Cloudflare, Inc., a provider of infrastructure and security services (including CDN and DDoS protection), to the extent necessary to ensure the security, stability, and proper functioning of the website.

Cloudflare may process technical data such as IP addresses, device information, and network traffic data. Data transfers outside the European Union are carried out only with appropriate safeguards in accordance with the GDPR, including Standard Contractual Clauses.

Data may be transferred outside the EU under appropriate safeguards.

7. Retention

  • Enquiries: standard business retention
  • Booking records: standard accounting retention
  • Marketing data: until consent is withdrawn

8. Client Photos

Client photos may be published with verbal consent obtained after the service. Consent may be withdrawn at any time by email.

9. Children

Services are available to clients under 16 only with the involvement and consent of a parent or legal guardian.

10. Your Rights

You have the right to access, rectify, erase, restrict processing, object, and lodge a complaint with the Polish data protection authority.