Privacy Policy

Last updated: 16 January 2026

1. Introduction

Hair Magic is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website hairmagicspain.com, contact us, or otherwise interact with us.

This policy is written in accordance with:

  • Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR)
  • Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights (LOPDGDD)

Please read this Privacy Policy carefully to understand how your personal data is handled.

2. Data Controller

The data controller responsible for your personal data is:

Hair Magic
Owner: Tracy Jane Smith
NIF: X0789093D
Address:
Urb Calypso
Centro Comercial Valdepinos
Local 25A
29649 Mijas Costa
Málaga
Spain

Telephone / WhatsApp: +34 603 333 817
Email: tracymallabar01@gmail.com

3. Personal Data We Collect

We only collect personal data that you voluntarily provide to us, primarily through our contact forms.

This may include:

  • Full name
  • Email address
  • Telephone number
  • Any personal information you include in your message

We do not knowingly collect data from minors under the age of 16.

4. Purpose of Data Processing

Your personal data is processed solely for the following purposes:

  • To respond to enquiries submitted via the website
  • To provide information or clarification requested by you
  • To communicate with you regarding appointments or services you have contacted us about

Important:
Data submitted via our contact forms is not used for marketing purposes, not added to any mailing lists, and not incorporated into any marketing or CRM database.

5. Legal Basis for Processing

The legal basis for processing your personal data is:

  • Your explicit consent, given when you submit a contact form
  • Pre-contractual measures, where your enquiry relates to potential services

You may withdraw your consent at any time (see Section 9).

6. Data Retention

We retain personal data only for as long as is necessary to respond to your enquiry and complete any related follow-up communication.

Once the enquiry has been resolved:

  • The data is deleted, or
  • Securely archived where legally required (e.g. for administrative or legal obligations)

We do not retain contact-form submissions indefinitely.

7. Data Sharing and Transfers

We do not sell, rent, or share your personal data with third parties for commercial purposes.

Your data may be processed by trusted service providers strictly necessary for website operation (e.g. web hosting or email services), all of whom are subject to appropriate data-processing agreements and GDPR safeguards.

No international data transfers are carried out beyond what is strictly required for website functionality.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data, including:

  • Secure server infrastructure
  • Encrypted communications (SSL/HTTPS)
  • Restricted access to personal data

While no system can be guaranteed to be 100% secure, we take all reasonable steps to prevent unauthorised access, alteration, disclosure or destruction of your data.

9. Your Rights

Under the GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate or incomplete data
  • Erase your personal data (“right to be forgotten”)
  • Restrict processing of your data
  • Object to processing
  • Data portability, where applicable
  • Withdraw consent at any time

To exercise any of these rights, please contact us at:

📧 tracymallabar01@gmail.com

You also have the right to lodge a complaint with the Spanish Data Protection Authority:

Agencia Española de Protección de Datos (AEPD)
https://www.aepd.es

10. Third-Party Services

Our website uses security and anti-spam mechanisms (such as Google reCAPTCHA) to protect against abuse. These services may analyse technical information (such as IP address or browser behaviour) strictly for security purposes, in accordance with their own privacy policies.

Further details are provided where relevant at the point of data collection.

11. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect legal, technical or operational changes.

Any updates will be published on this page with a revised “Last updated” date.

12. Contact

If you have any questions about this Privacy Policy or how your personal data is handled, please contact:

📧 tracymallabar01@gmail.com
📞 +34 603 333 817