Data & Privacy Policy

Last updated: June 2026

Ido's Hair ("we", "us", "our") is a hair salon located at Tweede Jan van der Heijdenstraat 41, 1074 XN Amsterdam, Netherlands. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, book an appointment, or contact us. We act in accordance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and the Dutch GDPR Implementation Act (Uitvoeringswet AVG).

1. Who is responsible for your data

The data controller is Ido's Hair, Tweede Jan van der Heijdenstraat 41, 1074 XN Amsterdam, Netherlands. You can reach us at info@idoshair.com or +31 6 52 17 62 79.

2. What data we collect and why

When you use our booking form, you provide your name, email address, and phone number, and you may add the service you are interested in, a preferred date, and a message. We use this data solely to handle your booking request and respond to you. The legal basis is the performance of a contract or steps taken at your request before a contract (Article 6(1)(b) GDPR). We do not have a separate contact form and we do not collect a postal address or payment details through this website; you can also reach us directly by email, phone, or WhatsApp.

Our shop page is an informational showcase of products. You cannot buy or pay for products through this website, so no checkout, order, or payment data is collected online. To order, please contact us directly.

To protect our forms against spam and abuse, we also process your IP address and basic technical request data (such as your browser's user-agent and the time the form was started) for rate limiting and bot detection. This processing is transient, is not used to build a profile of you, and relies on our legitimate interest in keeping the website secure (Article 6(1)(f) GDPR).

If you choose Accept Analytics in our cookie banner, we use Google Analytics 4 (Google LLC) to collect anonymous, aggregated statistics about how visitors use our website — such as pages visited, session duration, and device type. Google Analytics 4 does not log or store your IP address and we additionally request IP anonymisation, so this data does not identify you personally. The legal basis is your consent (Article 6(1)(a) GDPR). If you choose Necessary Only, no analytics are loaded and no analytics data is collected at all.

If you contact us via WhatsApp, your phone number and message content are processed by WhatsApp (Meta Platforms, Inc.). Please refer to WhatsApp's own Privacy Policy for details on how Meta handles that data.

3. How long we keep your data

We keep booking and inquiry data for up to 2 years after your last interaction, after which it is deleted, unless we are legally required to keep certain records longer (for example, Dutch tax law requires financial administration to be retained for 7 years). Analytics data is retained as configured in Google Analytics. Your cookie consent preference is stored locally in your browser until you clear it.

4. Who we share your data with

We do not sell, rent, or trade your personal data. We may share data with trusted service providers bound by data processing agreements: our website hosting provider, our media/image hosting provider (Cloudinary), and — only with your consent — Google LLC for Google Analytics. All providers are required to process data only on our instructions and in compliance with applicable law. Where data is transferred outside the EEA (for example to Google in the USA), this is done on the basis of Standard Contractual Clauses approved by the European Commission.

5. Your rights under GDPR

As a resident of the European Economic Area you have the right to access a copy of your personal data, have inaccurate data corrected, request erasure (subject to legal retention obligations), restrict how we use your data, receive your data in a portable format, object to processing based on legitimate interests, and withdraw consent at any time without affecting the lawfulness of processing that took place before withdrawal.

To exercise any of these rights, email us at info@idoshair.com. We will respond within 30 days.

6. Cookies and consent

We only place Google Analytics cookies after you explicitly click Accept Analytics on our cookie banner. You can change your preference at any time by clearing your browser's local storage for this website, which will cause the banner to reappear. For a full list of cookies and their expiry, see our Cookie Policy.

7. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our website is served over HTTPS and access to stored data is restricted to authorised personnel only.

8. Complaints

If you believe we are not handling your personal data lawfully, you have the right to lodge a complaint with the Dutch Data Protection Authority: Autoriteit Persoonsgegevens (www.autoriteitpersoonsgegevens.nl).

9. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last revised.

10. Contact

Ido's Hair — Tweede Jan van der Heijdenstraat 41, 1074 XN Amsterdam, Netherlands — info@idoshair.com — +31 6 52 17 62 79