Privacy Policy (GDPR Compliant)
1. Data Controller
2. Personal Data We Collect
We may collect the following information:
• Full name
• Phone number
• Instagram username
• WhatsApp contact
• Appointment details (service, date, time)
• Photos (only with verbal consent)
Gala Studio does not collect payment card numbers or sensitive financial data.
3. How We Collect Data
Data is collected through:
• Instagram Direct Messages
• WhatsApp messages
• Phone communication
• In-person bookings
No automated marketing systems are used at this time.
4. Why We Collect Your Data
Your personal data is used for:
• Scheduling appointments
• Service-related communication
• Confirmations or changes to your booking
• Maintaining internal records
Future marketing communication may be introduced only with clear client consent.
5. Legal Basis (According to GDPR)
Data is processed under:
• Contractual necessity — to provide the service you booked
• Legitimate interest — to communicate with clients
• Consent — for photos and any future marketing
6. Photos & Media
Before/after photos may be taken only with verbal consent.
Images are stored securely and used exclusively for portfolio or social media, if the client agrees.
7. Data Storage & Retention
Data is stored securely via:
• Internal booking records
Data is kept for up to 24 months, unless the client requests earlier deletion.
8. Sharing of Data
Personal data is never shared with third parties except:
• Marketing specialists working directly with the salon (if needed)
• Legal authorities, if required by Belgian law
No data is sold, rented or transferred for commercial use.
9. Your Rights (GDPR)
Clients have the right to:
• Access their data
• Correct inaccuracies
• Request deletion
• Withdraw consent (e.g., remove photos)
• Request information about processing
To exercise these rights, contact: galinadegrande@gmail.com
10. Security
We take reasonable technical and organizational measures to protect your data.
However, communication through Instagram or WhatsApp may involve third-party platforms outside our control.
11. Changes to Policy
We may update this Privacy Policy periodically.
Updated versions will be available upon request. Last updated: September 2024