Personal data

Privacy policy

Updated 30 September 2026

This policy explains how Lūna Hair Studio handles your data when you book online, send us a message or visit this website.

Who is responsible for your data

The data controller is UAB „Lūna“ (example), company code 000000000, Užupio g. 00, Vilnius. Email labas@luna.lt, phone +370 600 00000.

What data we collect and why

• Booking: your name, phone number, email address (if you give it), the service, specialist and time you choose, and any note. We need these to book your visit and send you a confirmation, a reminder and a link to move or cancel it (performance of a contract, Article 6(1)(b) GDPR).
• Visit history and notes: services you’ve had, colour formulas, your stylist’s notes – so that you get the same result next time (legitimate interest, Article 6(1)(f)). We only record health information (e.g. allergies) with your consent.
• Messages: what you write to us via “Message us”, and your name, phone number and email address – so that we can reply (Article 6(1)(b) and (f)).
• Payments: deposits and full payments are processed by Stripe; we never see your card details. We only receive the payment status.
• Waiting list: your name, phone number, email address and the time you’re waiting for – so that we can let you know when it frees up. We keep these while you’re waiting (until the date you chose); you can leave at any time using the link in the email.
• Gift cards: the buyer’s name and email address, the recipient’s name (and email address, if we send the code to them), the personal message, the gift card balance and its use – so that we can issue the gift card and you can pay with it (performance of a contract).
• Online courses: your name, email address, the courses you’ve bought, the lessons you’ve watched and your certificates – so that we can give you access to the courses, show your progress and issue your certificate (performance of a contract). If you leave a review, it is shown on the course page with your first name and the initial of your surname.
• Marketing: we only send you news if you ticked a separate consent box; you can withdraw your consent at any time.

Who else sees the data

• Costa Studio (MB Kava Plius, Lithuania) – the booking and salon management system; processes data only on our instructions (data processor).
• Cloudflare – hosting of the website and database (European region).
• Brevo (France) – emails and text messages.
• Stripe (Ireland) – online payments.
• OpenStreetMap (OSMF, United Kingdom) – the map in the contact section; receives your IP address in order to show the map and uses no tracking cookies.
• Google – only if you click the map or “Directions”: Google Maps opens (under Google’s own privacy policy). The website itself loads no Google content or cookies.

Some providers may process data outside the EEA; such transfers are covered by the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

How long we keep it

Contact details and visit history – for as long as you keep visiting us and for 3 years after your last visit; messages – for 2 years; payment and accounting data – for as long as the law requires. After that, we delete the data.

Your rights

You can ask to access your data, have it corrected or deleted, restrict its processing, receive it in a portable form or object to its processing – write to labas@luna.lt and we’ll reply within 30 days. You can lodge a complaint with the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija), the Lithuanian supervisory authority (vdai.lrv.lt).

Cookies

The website uses no advertising or analytics cookies. Your browser only stores the key to your chat with the salon, so that you can see the reply, and the choices you’ve made on the page.