Privacy policy

Who is responsible for your data

Gabriella Budai, trading as Frada Beauty Center, of Avda. Emilio Castelar, 10, 30740 San Pedro del Pinatar, Murcia, Spain. Reach us at info@fradabeauty.com or +34 637 92 66 03 about anything on this page.

The salon is not required to appoint a data protection officer, so those messages come to us directly.

What we collect

Only what a booking needs, and only when you give it to us.

• When you request an appointment: your name, telephone number, email address, the treatments you chose, the date and time you asked for, the professional you asked for if you picked one, and anything you write in the notes box.
• When you create a client account: your email address and a password. The password is handled by our authentication provider and stored hashed — the salon never sees it and cannot recover it.
• When you visit the site at all: the technical request data our host records to serve the page and keep the site up, such as IP address, browser and the page requested.

What we do not collect

This site has no analytics, no advertising pixels, no tag manager and no social tracking scripts. We do not build a profile of you, we do not track you across other websites, and no decision about you is made automatically.

The notes box is free text, and we ask you not to put health information in it. Anything about your skin, your medical history or your medication is taken in the salon during a consultation, with your explicit agreement, because that is a special category of data and it deserves a conversation rather than a web form.

Why we are allowed to hold it

• To arrange and carry out the appointment you asked for — the performance of a contract, or the steps taken before one at your request.
• To run your client account, if you chose to create one — your consent, which you can withdraw at any time by asking us to close it.
• To keep the invoicing and accounting records Spanish tax law requires — a legal obligation.
• To keep the site secure and working — our legitimate interest in not being defrauded or knocked offline.

How long we keep it

Appointment and client records are kept for as long as you are a client of the salon, and afterwards for the periods Spanish law requires: four years for tax purposes under the Ley General Tributaria, and six years for accounting records under the Código de Comercio, counted from the relevant transaction.

If you ask us to close your client account we close it and delete what we are not obliged to keep.

Who else sees it

We do not sell your data and we do not share it for anyone else’s marketing. It is handled on our behalf by the services that make the site work, each under a data processing agreement:

• Supabase — the database holding appointments and client records, and the authentication behind the login.
• Vercel — the hosting that serves this website.
• Our email provider, where we send you a booking confirmation or a password reset.

Where it is held

Our providers may hold or process data outside the European Economic Area. Where they do, the transfer is covered by the European Commission’s standard contractual clauses or by an adequacy decision. If you want the specifics for a particular provider, ask and we will tell you.

What you can ask for

Under the GDPR you can ask us to:

• give you a copy of what we hold about you
• correct anything that is wrong
• delete it, where we are not obliged to keep it
• restrict what we do with it, or object to it
• hand it over in a portable format
• stop, where you had given consent and have changed your mind

How to ask, and how to complain

Write to info@fradabeauty.com or call +34 637 92 66 03. We may ask you to confirm who you are before we act, so that we are not handing your records to someone else. We answer within one month.

If our answer does not satisfy you, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos, at www.aepd.es.