EN
611 19 26 32 Book

Claudia Pinedo Spa Capilar · La Nucía

Privacy policy

Last updated: 23 October 2026

1. Data controller

  • Controller: [TITULAR: nombre y apellidos o razón social] (Claudia Pinedo Spa Capilar)
  • Tax ID (NIF/CIF): [NIF]
  • Address: Avinguda de Coloma 4, 2º, 03530 La Nucía (Alicante), España
  • Phone: +34 611 19 26 32 · Email: [EMAIL]

This policy applies under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

2. What data we process

This website has no forms and no sign-up. We only process the data you give us when you contact us by phone, WhatsApp or email, or when you book through Fresha: your name, phone number, email, the service requested, the appointment date and, where relevant, your preferences or service history.

For the trichological assessment and some treatments we may record information about the condition of your scalp, allergies or sensitivities. As this is health data, it is only processed with your explicit consent (Art. 9(2)(a) GDPR) and solely to provide the service safely.

3. Purposes and legal basis

  • Managing appointments, quotes and services: performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR).
  • Answering enquiries by phone, WhatsApp or email: pre-contractual steps at your request and consent (Art. 6(1)(a) and (b)).
  • Meeting accounting and tax obligations: legal obligation (Art. 6(1)(c)).
  • Displaying Google Maps: your consent via the cookie banner (Art. 6(1)(a)).
  • Measuring website use with Google Analytics 4: your consent via the cookie banner (Art. 6(1)(a)).

We do not carry out profiling or automated decision-making, and we do not send marketing messages without your prior consent.

4. How long we keep data

We keep data for as long as you are a client and then for the applicable legal periods (for example, 6 years for commercial records and 4 years for tax records). Health data is deleted once it is no longer needed or when you withdraw your consent.

5. Recipients and processors

We do not share data with third parties unless required by law. The following providers may access data as processors or independent controllers:

  • Website hosting: [PROVEEDOR DE HOSTING].
  • Fresha (booking platform), under its own privacy policy.
  • WhatsApp / Meta Platforms Ireland Ltd., when you message us on WhatsApp.
  • Google Ireland Ltd. (Google Maps), only if you accept third-party content.
  • Google Ireland Ltd. (Google Analytics), only if you accept analytics. Google may process data in the USA under the EU-US Data Privacy Framework and standard contractual clauses.

Some of these providers may transfer data outside the European Economic Area. Where they do, it is under the EU-US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent at any time. To do so, write to [EMAIL] or to the postal address above, with proof of identity. If you believe your rights have not been respected, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Security

We apply appropriate technical and organisational measures to protect your data against loss, misuse or unauthorised access.

8. Minors

Children under 14 need the consent of a parent or guardian to give us personal data.

9. Changes

We may update this policy to reflect legal or service changes. The date of the latest update is shown at the top of this page.

This translation is provided for information. In case of discrepancy, the Spanish version prevails.

Back to the home page