Privacy Policy

1. Data Controller

Pstefany Beauty, LDA — Registered office: Av. Capitão Salgueiro Maia, 8C, 1885-091 Moscavide, Lisbon, Portugal. Tax No. 517 828 559. Contact: +351 924 434 549 · @santofiohairclub

2. Data Collected and Purpose

We collect only the data you provide voluntarily (name, service of interest and an optional message), in order to respond to your booking request. This data is transmitted directly to WhatsApp — +351 924 434 549 (Salon) or +351 923 338 447 (Academy) — and is not stored on any server of ours.

Should you accept cookies (see section 4), we also collect technical and browsing data — IP address, device and browser type, pages visited and cookie identifiers — for statistical and marketing purposes. Without your consent, this data is not collected.

3. Legal Basis (Art. 6 GDPR)

The processing is based on point (a) of Article 6(1) of the GDPR (Regulation (EU) 2016/679) — the data subject's consent, given freely when submitting the form or initiating contact via WhatsApp/Instagram.

4. Cookies and Third-Party Services

The fonts are hosted on the site itself, with no connection to external servers. For location purposes, the Contact page embeds a Google Maps map — this Google service may receive your IP address when the map loads, and is governed by Google's privacy policy.

With your prior consent, this site uses cookies and measurement technologies for analytics and marketing. Until you accept on the cookie banner, none of these tools is loaded (consent denied by default — Google Consent Mode v2). The tools are:

• Meta Pixel (Meta Platforms Ireland Ltd.) — measures visits and actions on the site and makes it possible to display relevant ads on Facebook and Instagram, including remarketing.
• Google (Google Ireland Ltd.) — Google Analytics 4 (usage statistics) and Google Ads (conversion measurement and remarketing), through the Google tag.

These technologies use cookies and identifiers that may involve the transfer of data outside the European Economic Area (e.g. the USA), under the applicable safeguards (Standard Contractual Clauses / EU-US Data Privacy Framework). The legal basis is consent (Article 6(1)(a) of the GDPR).

You may accept or refuse on the banner shown on your first visit and change your choice at any time via Manage cookie consent. Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.

Cookies have varying durations (typically up to 90 days in the case of Meta and up to 14 months for Google Analytics) and may be deleted at any time in your browser settings.

5. Rights of the Data Subject (Arts. 15–22 GDPR)

• Access (Art. 15) — confirmation and a copy of the data processed
• Rectification (Art. 16) — correct inaccurate data
• Erasure (Art. 17) — delete your data
• Restriction (Art. 18) — restrict the processing
• Portability (Art. 20) — receive the data in a structured format
• Objection (Art. 21) — object to the processing
• Withdraw consent (Art. 7(3)) — at any time, including for cookies, without affecting the lawfulness of prior processing

To exercise these rights, contact us via the WhatsApp number above. You also have the right to lodge a complaint with the CNPD (cnpd.pt).