Privacy Policy

This Privacy Policy explains what personal data is collected by the beauty studio Blago Spa & Beauty, how we use it, protect it, and when we may disclose it to third parties. By using our website or services, you agree to the terms of this Policy.

1. Who we are

1.1. The personal data controller is the individual entrepreneur Blago Spa & Beauty, beauty and wellness studio, Kyiv, Ukraine.

1.2. For data protection inquiries, contact: [email protected] · +38 063 048 7887.

2. What data we collect

2.1. When booking a service or ordering a gift certificate, we may collect:

• first and last name;
• phone number;
• email address;
• appointment date and time;
• selected service or programme.

2.2. When you visit the website, technical data is automatically recorded: IP address, browser type, pages viewed, time of visit (via standard server logs and/or analytics).

2.3. We do not collect payment details — card payments are processed through secure terminals or payment services to which we have no access.

3. How we use your data

3.1. Your data is used exclusively for:

• confirming and reminding you of your appointment;
• communicating about ordered services or certificates;
• improving the quality of service;
• analysing website traffic (in anonymised form).

3.2. We do not send promotional newsletters without your explicit consent. If you have subscribed, you may unsubscribe at any time by contacting us.

4. Sharing data with third parties

4.1. We do not sell or transfer your personal data to third parties for their marketing purposes.

4.2. Limited data transfer is possible only in the following cases:

• Service providers: services that help us operate (hosting, CRM, payment systems) — only to the extent necessary for their functions and subject to confidentiality obligations.
• Legal requirement: if required by Ukrainian law or court order.
• Protection of rights: to protect the rights, property or safety of the studio and its clients.

5. Cookies and tracking

5.1. Our website may use technical cookies — small files stored in your browser that are necessary for the website to function correctly (e.g. saving the interface language).

5.2. We may also connect analytics tools (Google Analytics or similar) to track anonymised visit statistics.

5.3. You can disable cookies in your browser settings. This may affect the functionality of the website.

6. Data storage and security

6.1. Personal data is stored only for as long as necessary to achieve the purpose of collection or as required by law.

6.2. We apply technical and organisational measures to protect data from unauthorised access, loss or disclosure: secure connections (HTTPS), restricted staff access to client data.

6.3. Data is stored on servers located in Ukraine or in the EU.

7. Your rights

7.1. Under the Law of Ukraine "On Protection of Personal Data" you have the right to:

• know what data we hold about you;
• request correction of inaccurate data;
• request deletion of your data ("right to be forgotten"), if there are no legal grounds for further storage;
• withdraw consent to processing at any time.

7.2. To exercise your rights, contact us: [email protected]. We will respond within 30 days.

8. Links to other websites

8.1. Our website may contain links to external resources (Instagram, Google Maps, etc.). We are not responsible for the privacy practices of those services — we recommend reviewing their policies.

9. Changes to this Policy

9.1. We may update this Policy from time to time. The current version is always available on the website with the date of the last update at the top of the page. Continued use of our services after changes constitutes acceptance of the new version.

10. Contact

10.1. If you have questions about this Policy or the processing of your data, please contact us:

• Email: [email protected]
• Phone: +38 063 048 7887

For service terms, see our Public Offer.