On this page:
1. Who we are and how to contact us
2. What data we collect
3. How we use your data
4. Who we share your data with
5. Data sent outside the EU
6. Cookies and third-party content
7. Customer reviews and photos
8. How long we keep your data
9. Keeping your data safe and secure
10. Your rights and how to use them
11. Bookings for children
12. Updates to this policy

1. Who we are and how to contact us

Screen Professional Hair Salon Qormi by Josephine is an independently run salon within the Screen Salons franchise, owned by [NAME SURNAME]. We are responsible for the personal data you share with us, such as your contact details, booking details, appointment history and any messages you send us. We look after this information and decide how it is used, which makes us its "data controller". You can read more about this in section 3, "How we use your data".

This policy explains what personal data we collect when you visit our website, book an appointment or contact us, why we use it, who we share it with, and what rights you have under the EU General Data Protection Regulation (GDPR) and Malta's Data Protection Act (Cap. 586).

Contact us:

• Address: 254, Triq Santa Katerina, Qormi, Malta
• Email: screensalonqormi@gmail.com
• Phone / WhatsApp: +356 2149 0411

2. What data we collect

We collect only the information necessary to manage your appointments and provide our services. This includes:

Online bookings: your name, surname, email address, telephone number, requested service, preferred date, and any additional comments you provide.

Messages and calls: your telephone number, the name displayed on your WhatsApp profile, and the content of any messages you send us.

Website visits: limited technical information, such as your IP address, browser type and the time of your visit. This information is collected automatically to ensure the website functions correctly and securely.

Photos: before-and-after photos and gallery photos of your hair, only if you agree to be photographed (see section 7).

Health information: for your safety and comfort, we ask that you do not include medical details (such as allergies, skin or scalp conditions, pregnancy or medication) in the booking form. Please discuss any such matters with your stylist in person. Where you choose to share health information with us, it will be used solely to ensure your safety during treatment, with your consent, and will be deleted upon request.

3. How we use your data

We use your information only for the purposes listed below. The law requires us to have a valid reason for each one, known as a "legal basis", which is shown in the second column.

We may occasionally send existing clients offers about our salon services via WhatsApp or SMS, and you may opt out at any time. We never sell your personal data.

4. Who we share your data with

Your booking details are seen by our salon staff and by the service providers below, who help us run our website and bookings:

We may also share your data with our accountant, or with authorities if the law requires it.

5. Data sent outside the EU

Most of your data stays in the European Union. Meta, which provides WhatsApp and the Facebook video on our homepage, may process data in the United States. Where that happens, the transfer is protected by the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses. You can read more in Meta's Data Privacy Framework disclosure, or ask us for more detail.

6. Cookies and third-party content

Essential cookies. Our website (built on Odoo) uses a small number of cookies it needs to work, for example to keep the booking form running and remember your cookie choice. Because these cookies are strictly necessary for the website to provide the services you request, the law allows us to use them without asking for your permission first.

Facebook video. Our homepage shows a video hosted on Facebook. Facebook can set cookies and collect information about your visit when this video loads. The video only loads after you click "I agree" on our cookie banner. Meta's own privacy policy applies to that data.

Links to other sites. Our Facebook, Instagram, Google Maps and Google Reviews links take you to those services, whose own privacy policies apply once you are there.

You can change your cookie choice at any time using the cookie settings link at the bottom of the page, or by clearing cookies in your browser.

7. Customer reviews and photos

Reviews. We show a selection of reviews that customers have posted publicly on Google, with the reviewer's name as it appears there. You can read all our reviews on our Google Business Profile. If you wrote one of these reviews and would like it removed from our website, contact us and we will take it down.

Photos. We only photograph and publish photos of clients who agree to it. If you would prefer your face not to be shown, simply let your stylist know and we will photograph only your hair or keep your face hidden. You can withdraw your permission at any time, and we will remove your photos from our website and social media.

8. How long we keep your data

You can ask us to delete your data sooner at any time, unless the law requires us to keep it, as with invoices.

9. Keeping your data safe and secure

Protecting your personal data is important to us. We use appropriate technical and organisational measures to keep it safe from loss, misuse and unauthorised access.

• Secure connection: everything you send through our website, including booking requests, is encrypted using HTTPS.

• Restricted access: your booking details, such as your name, contact details, chosen service, preferred date and any comments, can be seen by our salon staff and by Centric, our IT provider. Our staff use these details to manage your appointments, while Centric uses its access solely to maintain the booking system and support our staff.
  

• Protected accounts: everyone with access must log in with a password-protected account, and access is removed as soon as a staff member leaves the salon.

If a security incident ever affects your personal data, we will act quickly to contain it. Where required by law, we will also inform you and Malta's data protection authority, the Information and Data Protection Commissioner (IDPC).

10. Your rights and how to use them

You can ask us to:

• get a copy of your data (access)
• correct any mistakes (rectification)
• delete your data, including our WhatsApp chats with you (erasure)
• pause the use of your data while a concern is checked (restriction)
• receive your data in a digital format or have it sent elsewhere (portability)
• stop reminders, offers or other uses based on our legitimate interest (objection)
• withdraw your consent, for example for photos or health information (withdrawal of consent)

How to ask. Call or send a WhatsApp message to +356 2149 0411, or ask us in the salon.

Complaints. If you are unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to Malta's data protection authority, the Information and Data Protection Commissioner (IDPC), at idpc.org.mt.

11. Bookings for children

We advise that appointments for young clients are booked by a parent or guardian. Clients under 16 must be accompanied by a parent or guardian at their appointment. For hair colouring or other chemical treatments, a parent or guardian must be present to give their permission before the treatment can go ahead.

12. Updates to this policy

We may update this policy when our services or the law change. The date at the top shows when it was last updated. We encourage you to check this page from time to time.