Privacy policy
Updated 5 October 2026. Demo version – fill in the real controller details before going public.
This policy explains which personal data we process when you visit our website, book an appointment, order products or write to us, why we do it, and what rights you have under the General Data Protection Regulation (GDPR, EU 2016/679).
Who is responsible for your data
The data controller is the MONIKA HAIR salon (company name and code are shown at the bottom of the site). For any data protection question write to labas@monikahair.lt.
What we collect and why
Appointments. Name, e-mail, phone, the chosen service, specialist, date and time, and your requests. We use them to book, confirm, remind you of or change your visit and to contact you. Legal basis – entering into and performing a service contract (GDPR art. 6(1)(b)).
Shop orders. Name, e-mail, phone, delivery address or parcel locker, company name (if you need an invoice) and the products ordered. Used to fulfil the order and for accounting. Legal basis – performing a contract (art. 6(1)(b)) and a legal obligation (art. 6(1)(c)).
Contact form and e-mails. Name, e-mail, phone (optional) and your message, so we can reply. Legal basis – your request and our legitimate interest in answering it (art. 6(1)(b) and (f)).
Newsletter. E-mail address and language – only if you subscribe. Legal basis – your consent (art. 6(1)(a)).
Anonymous visit statistics. We count visitors, device type, language and whether they came through our QR code or campaign. No IP address or identifier is stored and no cookies are used. Legal basis – legitimate interest in improving the site (art. 6(1)(f)).
Security. To block spam, our forms run a short computing task in your browser, and your IP address is held briefly in server memory to limit requests. If a submission is rejected as spam, only an irreversibly hashed, shortened IP code is logged. Legal basis – legitimate interest in security (art. 6(1)(f)).
We do not sell data and do not use it for profiling or automated decisions.
How long we keep it
- Appointments – 2 years after the visit (so we can see your earlier services if you come back).
- Orders and correspondence – 3 years from the last contact.
- Invoices and accounting records – 10 years, as required by law.
- Newsletter subscription – until you unsubscribe.
- Anonymous statistics – no longer than 24 months.
- Backups – 14 days.
Who we share data with
- Our server provider – the website and data are kept on a rented server in the European Economic Area.
- Our e-mail provider – to send confirmations and replies.
- Couriers and parcel-locker networks – only the data needed for delivery.
- Our accountant and public authorities – where the law requires it.
Fonts and all other files load from our own server only – the site does not contact Google, Facebook or any other third party. The “Open in maps” link opens Google Maps only when you click it.
Cookies and browser storage
The public website does not use cookies. Only these entries are kept in your browser's local storage:
- luxary-cart-v1 – the products in your cart. Necessary for the site to work.
- lux-consent – your statistics choice. Necessary. Kept for 12 months.
- lux-utm – which QR code or campaign brought you here. Stored only if you agree. Kept for 30 days.
You can change your choice at any time with “Cookie settings” at the bottom of the site.
Your rights
You have the right to access, correct and erase your data, restrict or object to processing, receive your data in a structured format and withdraw consent at any time. Send your request to labas@monikahair.lt – we reply within one month. You can complain to the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt) or the authority in your country.
How we protect data
All traffic is encrypted (HTTPS), the administration system requires a personal account (two-factor authentication available), and daily backups are kept.
Changes
If our processing changes, we will update this policy and the date at the top.
