Privacy Policy
Transparency is part of our care. Here we explain how we handle your information.
1 - Information we collect
We collect personal information when you interact with us, namely when using our online booking system or filling in contact forms. The information we may collect includes: full name, phone number, email address (optional in the context of bookings), booking details (selected services, date, time, and chosen professional), and website browsing information (such as cookies and location data).
2 - How we use your information
We use your data to process, confirm, and manage online bookings, including sending confirmations and reminders by phone or email; to contact you in case of cancellation or rescheduling; to personalize your website experience; to measure and improve the performance of our online booking system, namely to understand at which step users abandon the process (funnel analytics); to send promotional communications (if you have consented); and to comply with legal and regulatory obligations.
2.1 - Legal basis for processing
The processing of data collected through the online booking system is based on the performance of a service contract (Article 6(1)(b) of the GDPR). Data provided through the contact form is processed based on consent from the data subject (Article 6(1)(a) of the GDPR). Data processing for booking funnel analytics purposes (as described in section 4.1) is based on the legitimate interest of the controller in improving the quality and performance of the service provided (Article 6(1)(f) of the GDPR).
3 - Protecting your information
We adopt security measures to protect your personal information. However, no data transmission over the internet or storage system is 100% secure, and we cannot guarantee the absolute security of your information.
4.1 - Booking funnel analytics (server-side)
Regardless of your cookie preferences, our online booking system uses server-side analytics to measure booking funnel performance. This technology does not use cookies and does not store information on your device.
When you make a booking, we record events associated with an anonymous session identifier generated by your browser (for example: opening the booking modal, completed steps, submission, and booking completion), as well as general website browsing data (visited pages, time spent). After the booking is completed, your email address and name are linked to those events, including the browsing history from the same session, for service quality analysis and to identify potential problems in the booking process.
Tool used: PostHog (PostHog Inc., data hosted in the European Union). The data is processed based on the legitimate interest of Amanda Bloom Studio in improving the online booking service (Article 6(1)(f) of the GDPR).
You have the right to object to this processing at any time by contacting us through the means indicated in section 9.
5 - Sharing information
We do not share your personal information with third parties, except to comply with legal obligations or with trusted service providers who help us operate the website and provide our services.
Our relevant subprocessors include:
- Supabase Inc. - database and authentication (data hosted in the European Union)
- PostHog Inc. - booking funnel analytics (data hosted in the European Union; see section 4.1)
- Google LLC - reCAPTCHA and Google Analytics (data may be transferred to the USA under standard contractual clauses)
6 - Your rights
You have the right to access, correct, or delete your personal information at any time. To exercise these rights, contact us through our email address or contact form.
7 - Changes to this Policy
We reserve the right to change this Privacy Policy at any time. Any changes will be published on this page.
8 - reCAPTCHA
Our online booking form uses Google reCAPTCHA v3 to protect against bots and abuse. reCAPTCHA processes data in a non-intrusive way by analyzing interaction patterns without requiring user action. The data is handled in accordance with the Google Privacy Policy and Terms of Service. The use of reCAPTCHA is based on the legitimate interest of protecting our forms from malicious submissions.
9 - Data controller
The controller of your personal data is Amanda Bloom Studio, headquartered at Travessa Sao Paulo 115, 4430-535 Oliveira do Douro, Vila Nova de Gaia, Portugal. For any questions about this policy or your rights under the GDPR, please contact us.