Privacy Policy

1. Data we process

• public listing data for salons and masters: names, addresses, districts, descriptions, photos, services, prices, working hours, maps, and contact links;
• contact information submitted for publication: phone number, Telegram, Instagram, WhatsApp, and similar details;
• technical usage data generated automatically: IP address, device type, browser data, interface language, date, and request time;
• administrator login data for the protected area of the site: email, session identifiers, and other authentication-related data processed through Supabase Auth;
• image files uploaded through the administrative interface.

2. Purposes of processing

• publishing and updating listings in the Lux Spa directory;
• ensuring proper website operation, localization, and navigation;
• allowing users to contact salons, masters, or the site administrator using published contact details;
• protecting administrative access and preventing unauthorized changes;
• reviewing requests to add or update listings.

3. Sources of data

• directly from salon owners, masters, or their representatives;
• from the service administrator when creating or editing listings;
• automatically through website usage and infrastructure logs.

4. Storage and protection

Lux Spa uses Supabase infrastructure for directory data and administrator authentication. Images may be stored in connected cloud storage.

We take reasonable technical and organizational measures to limit unauthorized access, but no internet transmission can be considered absolutely secure.

5. Cookies and technical data

• the website uses technical data and cookies required for normal operation;
• this may include a cookie storing the selected site language to preserve localization between visits;
• for administrators, additional technical data related to authentication and session management may be processed.

6. Sharing with third parties

• data may be processed by infrastructure providers required to operate the website, including Supabase;
• public listing data is visible to website visitors to the extent it is published in the directory;
• when you open external links or use phone, Telegram, Instagram, WhatsApp, or other third-party services, further data processing is governed by those services' own policies;
• we do not sell personal data to third parties.

7. Retention period

We keep data for as long as necessary to operate the directory, manage administrative tasks, comply with applicable requirements, and resolve disputes.

Public salon or master information may be updated or removed at the request of the rights holder or by an administrative decision.

8. Your rights

• request correction, update, or removal of published data if it is outdated, inaccurate, or published without sufficient grounds;
• withdraw data previously provided for publication where legally possible;
• contact the Lux Spa administration with privacy-related questions.

9. Children's data

Lux Spa is not specifically intended for children. If you believe data about a minor has been published without proper grounds, contact the administrator for review and removal.

10. Policy updates

We may update this Privacy Policy when the website functionality, infrastructure, or data practices change. The current version is always published on this page.