1. Data Controller

The controller responsible for processing your personal data is:

POLITOU V KAI SIA EE
Trading name: POINT OF BEAUTY / Politou Vasia
Address: 17 Kerasountos Street, Aigaleo, 12242, Greece
VAT Number: 800476876
Phone: +30 211 4124763
Email: vasia@politouvasia.com

2. What data we collect

• full name,
• phone number,
• email address,
• city or service area,
• information submitted through contact, quote or appointment forms,
• service-related details,
• natural hair information such as length, density, colour, desired result and previous extensions history,
• appointment preferences,
• photos you choose to send us,
• newsletter details such as email, name, city and marketing preferences,
• technical browsing data such as IP address, browser, device, cookies and website interaction,
• technical anti-spam data processed through Google reCAPTCHA.

3. How we collect your data

• when you complete contact, quote or booking forms,
• when you contact us by email, phone or social media,
• when you send us photos for service assessment,
• when you subscribe to our newsletter,
• when you visit our website and interact with cookies, analytics tools or anti-spam technologies.

4. Purposes of processing

• to respond to enquiries and requests,
• to provide pricing information and service recommendations,
• to assess your needs and suggest the most suitable hair extension service,
• to arrange, confirm or amend appointments,
• to provide our services,
• to issue invoices and legally required tax documents,
• to analyse website traffic through Google Analytics,
• to protect forms and the website from spam, bots and abuse through Google reCAPTCHA,
• to send newsletters, updates and marketing emails through Mailchimp where you have provided the appropriate consent or where another lawful basis applies.

5. Legal bases

• Consent: when you subscribe to our newsletter, accept non-essential cookies or provide optional material.
• Pre-contractual steps / Contract: when you request a quote, appointment or service.
• Legal obligation: when we are required to keep accounting, tax or legal records.
• Legitimate interests: for website security, abuse prevention, request handling and service improvement, always balanced against your rights and freedoms.

6. Forms, photos and service delivery

Our website forms may ask for details such as service area, requested service, natural hair characteristics, appointment preferences and previous extension history so that we can properly evaluate and respond to your request.

If you send us photos of your hair for assessment or quotation purposes, these photos are used solely to handle your request and communicate with you about the service.

Any publication of client photos, before / after images or other identifiable material on our website, social media or in promotional content is carried out only where separate and explicit consent has been obtained, where required.

7. Newsletter & Mailchimp

If you subscribe to our newsletter, we may collect details such as your email address, name, city and marketing preferences in order to send you updates, news, offers and other relevant content.

We may use Mailchimp to manage and send newsletter communications. If you subscribe, your data may be transferred to Mailchimp for processing in accordance with its service infrastructure and settings.

You can unsubscribe at any time באמצעות the unsubscribe link included in our emails or by contacting us at vasia@politouvasia.com.

8. Data recipients

Your data is accessible only to the persons or partners strictly necessary for operating our business and website.

• hosting providers,
• email or SMTP providers,
• website, form or CRM support providers,
• Google, where services such as Google Analytics and Google reCAPTCHA are used,
• Mailchimp, where used for newsletter sign-up forms, mailing lists and email campaigns,
• accountants or tax professionals, where required,
• public or tax authorities, where required by law.

We do not sell or rent your personal data to third parties.

9. Transfers outside the EEA

Some technical service providers we use, including Google and Mailchimp, may process data outside the European Economic Area, depending on how their services operate.

Where this happens, transfers are carried out only on the basis of appropriate lawful transfer mechanisms and safeguards, where required by applicable law.

10. Data retention

We retain your personal data only for as long as necessary for the purpose for which it was collected and in accordance with our legal obligations.

• contact, quote and enquiry requests: for a reasonable period so we can handle and follow up on your request,
• appointment and client relationship data: for as long as needed to provide services and post-service support,
• newsletter / marketing data: until consent is withdrawn or the data is no longer needed,
• accounting and tax data: for as long as required by applicable law,
• data processed solely on the basis of consent: until consent is withdrawn or the data is no longer needed.

11. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, disclosure or destruction.

However, no method of internet transmission or electronic storage can guarantee absolute security.

12. Your rights

You may have the right to:

• be informed,
• access your personal data,
• rectify inaccurate data,
• request erasure,
• request restriction of processing,
• data portability,
• object to processing,
• withdraw consent at any time where processing is based on consent.

13. Exercising your rights

If you wish to exercise any of your rights regarding your personal data, please contact us at vasia@politouvasia.com.

We will make every effort to respond without undue delay and within the time period required by applicable law.

14. Cookies & related technologies

Our website uses cookies and similar technologies for proper functionality, traffic measurement, form security and, where applicable, communication or marketing purposes.

For more information, please read our Cookie Policy.

15. Third-party services

We may use third-party services to operate and improve our website, including:

• Google Analytics for traffic analysis,
• Google reCAPTCHA for spam and abuse protection,
• Mailchimp for newsletter and email marketing management.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

16. Children

Our services and website are not intentionally directed to children without the necessary parental or guardian consent where this is required.

17. Complaints

If you believe that the processing of your personal data infringes applicable law, you have the right to lodge a complaint with the Hellenic Data Protection Authority.

Website: www.dpa.gr

18. Changes to this Policy

We may update this Privacy Policy from time to time to reflect legal, technical or operational developments. Any updated version will be published on this page with a revised update date.