Privacy policy

This is a translation provided for convenience. In the event of any discrepancy, the Portuguese version prevails.

Your privacy matters to us. This policy explains what personal data we collect, what we use it for, who we share it with and what rights you have under the General Data Protection Regulation (GDPR) and applicable Portuguese law.

1. Data controller

Dezstudio Beauty, Lda.
NIPC 515 636 878
Registered office: Rua Fernando Pedroso, 11, 1000-130 Lisbon
Locations: Príncipe Real (R. do Arco a S. Mamede 103) and Filipa de Vilhena (R. D. Filipa de Vilhena 36D), Lisbon.
Contact: [email protected] ·+351 968 052 510

2. What data we collect

• Identification and contact: name, email and phone number.
• Bookings and services: services booked, dates, the professional who saw you, history and preferences.
• Payment: the data needed to confirm a booking and process prepayments. Payments are handled by specialist providers —we do not store your full card details.
• Communications: messages you send us by email, phone, WhatsApp or social media.
• Browsing: technical data and cookies when you visit our site (see section 7).

3. What we use it for, and on what basis

• Managing bookings and providing the service — performance of our contract with you.
• Confirmations and reminders (for example the 24-hour reminder) — performance of the contract and legitimate interest.
• Invoicing and legal and tax obligations — compliance with a legal obligation.
• Preventing no-shows, and security — legitimate interest, including applying our cancellation policy.
• Marketing and newsletter — only with your consent, which you can withdraw at any time.

4. Who we share it with

We share data only with those who need it to provide the service, always under confidentiality guarantees:

• Fresha — our online booking platform.
• Mailchimp — email and newsletter delivery, where you have consented.
• Payment providers — ifthenpay, MB Way, Revolut and our bank, to process payments and prepayments.
• Accounting and legal obligations — our accountant and the competent authorities, where required by law.

Some of these providers may process data outside the European Economic Area (for example, in the United States). Where that happens we put appropriate safeguards in place, such as the European Commission’s Standard Contractual Clauses.We do not sell your personal data.

5. How long we keep it

We keep your data for as long as you are a client and for the applicable legal periods — in particular tax and invoicing obligations (as a rule, 10 years). Data used for marketing is kept until you withdraw your consent.

6. Your rights

You have the right to access, rectify, erase, restrict or object to the processing of your data, as well as the right to data portability and to withdraw consent at any time. To exercise these rights, contact us at[email protected].

You also have the right to lodge a complaint with the supervisory authority — the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (CNPD),www.cnpd.pt.

7. Cookies and audience measurement

Our site uses cookies that are essential to its operation, and may embed third-party content — such as Google Maps (studio locations) and links to Fresha, Instagram, Facebook and WhatsApp — which may set their own cookies.

To measure our audience we use two tools, handled differently:

• Cloudflare Web Analytics — aggregate visit statistics, with no cookies and no personal data. Because it uses no cookies and does not identify visitors, it runs always, with no consent needed.
• Google Analytics 4 — helps us understand how the site is used. It uses cookies and is only enabled with your explicit consent, given in the cookie notice shown on your first visit. Until you consent, Google Analytics is not loaded and no analytics cookies are created (Consent Mode, everything denied by default). You can change your mind at any time by clearing this site’s cookies in your browser. We apply IP anonymisation.

You can also manage all cookies in your browser settings.

8. Security

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse.

9. Changes to this policy

We may update this policy whenever necessary. The version in force is the one published on this page, with its update date.