Privacy policy

Effective from 3 October 2026. This translation is provided for your information – the Czech version is legally binding.

1. Who processes your personal data

The controller of your personal data is Kristýna Horáčková, operator of the Lady Blue salon, Jiráskova 1246/13, 692 01 Mikulov, Czech Republic (the “controller”).
Contact: [email protected], tel. +420 730 656 688.

2. What data I process and why

• Booking an appointment (online booking form, phone, e-mail): first and last name, e-mail, phone, chosen service, date and any note. Purpose: arranging, confirming and reminding you of the appointment and providing the service. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Client care: information needed to carry out the treatment safely (e.g. allergies or sensitive skin), if you share it with me. Legal basis: performance of a contract; for health data, your explicit consent (Art. 9(2)(a) GDPR).
• Accounting and taxes: data on payment receipts. Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).
• Communication: when you write to me or call me, I process the data needed to deal with your enquiry. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Website statistics and marketing: I use Google Analytics cookies and the Meta (Facebook) pixel only with your consent, given in the cookie banner (Art. 6(1)(a) GDPR). You can withdraw your consent at any time using the “Manage consent” link. Details are in the Cookie policy.

3. How long I keep data

• Booking data and client records for as long as we work together, and no longer than 3 years after your last visit.
• Accounting and tax documents for the period required by law (usually 5–10 years).
• Correspondence for as long as needed to deal with your enquiry, no longer than 1 year.
• Data processed on the basis of consent until you withdraw it, and no longer than the period stated in the Cookie policy.

4. Who I share data with

I do not sell personal data. I use the following processors and services: web hosting and e-mail providers, the Bookly booking system running on this website (including sending confirmation e-mails and text messages), Google (Analytics, Maps, YouTube, reviews) and Meta Platforms (Facebook pixel) – these services only with your consent or when you interact with them yourself. Some of these providers may process data outside the EU; in that case this is based on a European Commission adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses.

Euro price conversion: On the German and English versions of the website, your browser fetches the current European Central Bank reference rate from the Frankfurter service (api.frankfurter.dev) on pages that show prices. Your IP address and standard technical browser data are sent to this service; no cookies are used, and the rate is only stored in your browser’s local storage for 12 hours. Legal basis: legitimate interest in showing approximate prices in euros (Art. 6(1)(f) GDPR).

5. Your rights

You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability, and to object to processing based on legitimate interest. You can withdraw your consent at any time without affecting the lawfulness of processing before the withdrawal. Please send your requests to [email protected]; I will deal with them without undue delay and within one month at the latest.

If you believe that the processing of your data breaches the law, you can lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, www.uoou.gov.cz) or with the data protection authority in your country of residence.

6. Security

The website runs over a secure connection (HTTPS), and only I and the website’s technical administrator, who is bound by confidentiality, have access to the data.