Data controller. Aram Manoukian Hair Studio, Geelvinckssteeg 10-A, 1017 BE Amsterdam, The Netherlands. For any privacy request, write to manoukian.hairstudio@gmail.com.
What we collect
We keep data collection to a strict minimum. Depending on how you interact with the studio, we may process:
- Your name, email address and phone number — provided when booking an appointment or contacting us.
- Appointment details — service selected, date, time and any notes you choose to share.
- Messages — content of any inquiry submitted through our contact or collaboration form.
- Technical data — basic, anonymised information about your device and browser, only if you accept non-essential cookies.
Why we collect it
- To confirm, prepare and manage your appointment at the studio.
- To communicate with you regarding bookings, changes or cancellations.
- To respond to collaboration, partnership, press or general inquiries.
- To comply with our legal obligations (e.g. accounting, fiscal records).
The legal basis for processing is your explicit consent (Art. 6(1)(a) GDPR) for forms and communications, the performance of a service contract (Art. 6(1)(b)) for bookings, and our legitimate interest (Art. 6(1)(f)) in operating and improving the studio.
How long we keep it
- Booking records — kept for up to 24 months from your last visit, then deleted or anonymised.
- Contact & collaboration messages — kept for up to 12 months, unless an ongoing conversation requires longer.
- Accounting records — retained for 7 years where required by Dutch tax law.
Who has access
Only Aram and authorised studio staff handle your information. We may use trusted, GDPR-compliant third-party processors strictly to operate the studio, including:
- Secure cloud hosting and database providers within the EU.
- Email delivery services for confirmations and replies.
- Calendar integrations (e.g. Google Calendar) used solely to manage appointment scheduling.
These processors act on our instructions, under a Data Processing Agreement, and never use your data for their own marketing purposes. We never sell your data to anyone.
Security
The website is served exclusively over HTTPS. Form submissions are encrypted in transit, and personal data is stored in access-controlled databases with row-level security policies. Only the studio owner can read submitted inquiries and booking details.
Your rights
Under the GDPR / AVG you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete information.
- Erasure — request deletion of your data ("right to be forgotten").
- Restriction — limit the way we use your data.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on our legitimate interest.
- Withdraw consent — at any time, without affecting prior lawful processing.
To exercise any of these rights, email manoukian.hairstudio@gmail.com. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
Cookies
We use only what is strictly necessary to make this site work. Any non-essential cookie requires your prior, freely given consent — see our Cookie Policy.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Material changes will be highlighted on this page.