1. Data Controller

1.1. The controller of your personal data is the LuxyBook platform.

1.2. For any data protection questions, you can contact us at: data-protection@luxybook.com

2. What Data We Collect

2.1. Data you provide: first and last name, email address, phone number, password, profile picture.

2.2. Booking data: selected services, appointment dates and times, payment method.

2.3. Technical data: IP address, device type, browser, platform usage data.

2.4. Location data: only with your explicit permission, to show nearby salons.

3. Purpose of Processing

3.1. Providing platform services: account creation, booking appointments, notifications.

3.2. Communication: sending confirmations, reminders and information related to your bookings.

3.3. Service improvement: analysing platform usage and optimising the user experience.

3.4. Legal obligations: fulfilling legal requirements and preventing misuse.

4. Legal Basis for Processing

4.1. Your consent (e.g., for marketing communications).

4.2. Performance of a contract (e.g., processing a booking).

4.3. Legitimate interest (e.g., protecting the platform from misuse).

4.4. Legal obligation (e.g., retaining accounting records).

5. Sharing Data with Third Parties

5.1. With booked salons – only data necessary to fulfil the booking.

5.2. With payment processors – solely for transaction processing (e.g., PayPal).

5.3. With service providers (hosting, email delivery) – under strict confidentiality agreements.

5.4. With competent authorities – only when required by law.

5.5. LuxyBook NEVER sells your personal data to third parties for marketing purposes.

6. Data Retention

6.1. We retain data only as long as necessary for the purposes for which it was collected.

6.2. Account data is retained while the account is active; after deactivation it is deleted within 30 days, unless the law requires otherwise.

6.3. Accounting data is retained in accordance with legal retention periods (at least 10 years).

7. Your Rights

7.1. The right to access your data.

7.2. The right to rectify inaccurate data.

7.3. The right to erasure ("the right to be forgotten").

7.4. The right to restrict processing.

7.5. The right to data portability.

7.6. The right to object to processing.

7.7. The right to withdraw consent at any time.

7.8. The right to lodge a complaint with the competent data protection authority.

8. Data Security

8.1. We use technical and organisational protective measures (encryption, secure servers, access control).

8.2. Passwords are stored in hashed form and are never visible to us or third parties.

8.3. Payment card data is NOT stored on our servers.

9. Cookies

9.1. We use necessary cookies for the platform to function.

9.2. We use analytical and marketing cookies only with your consent.

9.3. You can manage cookie settings in your browser at any time.