Privacy Policy

1. Introduction

AriStyle ("we", "us", "our") operates the website aristyle.hair and the hAIr product. We are committed to protecting your personal data and being transparent about how we use it.

This Privacy Policy describes what personal data we collect when you visit aristyle.hair, why we collect it, how long we keep it, who we share it with, and the rights you have under the General Data Protection Regulation (GDPR) (EU) 2016/679.

2. Who We Are (Data Controller)

The data controller responsible for your personal data is:

3. Personal Data We Collect

3.1 — Contact form submissions

When you submit the demo request form on aristyle.hair, we collect the following personal data that you voluntarily provide:

• Name — your first and last name
• Salon name and city — the name of your salon and the city it is located in
• Email address — so we can reply to your enquiry
• Device type — whether your stylists use Android, iOS, both, or you are unsure
• Message — a free-text description of your salon and the consultations you would like hAIr to help with

Form submissions are processed by FormSubmit.co, a third-party service, which forwards them to our email address. We do not use this data for any purpose other than responding to your enquiry.

3.2 — Analytics data (Google Analytics)

With your consent, we use Google Analytics 4 (property ID: G-0SSY5FDJZQ) to understand how visitors interact with aristyle.hair. Google Analytics may collect:

• Pages visited and time spent on each page
• How you arrived at the site (referral source, search terms)
• Browser type and version, operating system, screen resolution, and device type
• Approximate location (country and city, derived from a truncated IP address)
• Interaction events such as clicks, scroll depth, and carousel navigation

Google Analytics sets cookies in your browser. For details on which cookies are used and how to control them, see our Cookie Policy. We have enabled IP anonymization, meaning Google truncates IP addresses before storage.

Google Analytics will only be loaded after you have provided your consent via the cookie consent banner displayed on the site.

3.3 — Technical / server log data

Our hosting provider automatically logs standard technical data for each HTTP request, including your IP address, request timestamp, URL requested, HTTP status code, and browser User-Agent string. This data is used solely for operating and securing the service.

4. Legal Basis for Processing (GDPR Art. 6)

5. How Long We Keep Your Data

• Contact form data — retained for as long as needed to respond to and follow up on your enquiry, and in any case no longer than 2 years after our last communication.
• Analytics data — Google Analytics retains user and event data for 14 months (Google's default retention period). You may request earlier deletion at any time.
• Server log data — typically retained for up to 90 days by our hosting provider.

6. Processors and Third Parties

We do not sell your personal data. We share data only with the following processors:

Google LLC (Google Analytics)

Google processes analytics data on our behalf as a data processor. Google may transfer data to servers in the United States under Standard Contractual Clauses approved by the European Commission. For more information, see Google's Privacy Policy and Google Analytics data privacy information.

FormSubmit.co

Your contact form submissions are received and forwarded by FormSubmit.co, which acts as a data processor. FormSubmit processes your data solely to deliver the form submission to our email address. For more information, see FormSubmit's Privacy Policy.

7. International Data Transfers

Both Google Analytics and FormSubmit.co may process personal data outside the European Economic Area (EEA), including in the United States. Such transfers are covered by appropriate safeguards, including Standard Contractual Clauses adopted under GDPR Article 46, ensuring an adequate level of protection for your personal data.

8. Cookies

We use cookies solely for analytics purposes (Google Analytics), and only after you have given your consent. We do not use any tracking, advertising, or functional cookies beyond this.

For a full list of cookies used, their purpose, and how to control or delete them, please read our Cookie Policy.

9. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights:

• Right of access (Art. 15) — you may request a copy of the personal data we hold about you.
• Right to rectification (Art. 16) — you may ask us to correct inaccurate or incomplete data.
• Right to erasure (Art. 17) — you may ask us to delete your personal data, subject to certain conditions.
• Right to restriction of processing (Art. 18) — you may ask us to restrict how we process your data in certain circumstances.
• Right to data portability (Art. 20) — you may request your data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21) — you may object to processing based on our legitimate interests.
• Right to withdraw consent (Art. 7(3)) — where processing is based on your consent, you may withdraw it at any time via the cookie settings on our website, without affecting the lawfulness of processing before withdrawal.
• Right to lodge a complaint (Art. 77) — you have the right to lodge a complaint with a supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens.

To exercise any of these rights, please contact us at arina.capatina@gmail.com. We will respond within 30 days.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically to stay informed about how we protect your data.

11. Contact

For any privacy-related questions, requests, or complaints, please contact us: