Privacy & cookies

01Who looks after your data

The data controller is Juniya Hair Studio, legally registered as E J Y Park – Cabeleireiros Ltda., CNPJ 29.112.504/0001-85, Rua Prates, 560, Bom Retiro, São Paulo, Brazil.

For anything about your data, reach us on WhatsApp at +55 11 99762-6153, by phone at +55 11 3228-3149 or in person at the salon. As a small business, we have not appointed a data protection officer, as Brazil's data protection agency (ANPD) allows. This channel serves that role.

02What we collect on the website

You can browse the site without signing up.

• Contact form: name, phone, service and the message you write. The site does not store any of it. When you send, the text opens in your WhatsApp and only reaches us if you send the message.
• Visit statistics: pages viewed, referring site, approximate country and city, browser and device type. We use Vercel Web Analytics, which uses no cookies and does not identify you.
• Technical logs: like any website, our hosting provider briefly logs access data such as IP address and browser, for security and operation.
• Map: if you allow it, the Google map appears on the contact page. In that case, Google receives your connection data and may use its own cookies.

03What we record at the salon

When you book or have a treatment, we record your name and phone number and, if you wish, your Instagram, KakaoTalk and date of birth. We also keep your visit and payment history and notes about your preferences.

Health information, such as an allergy to a product, is only noted if you tell us. It is used for your safety during the treatment.

04What we use it for

We use your data only to:

• Book, confirm and carry out your appointments.
• Remind you about follow-ups and maintenance via WhatsApp. If you would rather not get these reminders, just let us know.
• Meet tax and accounting obligations.
• Understand which pages of the site are visited most, without identifying anyone.
• Protect the site and the salon system against unauthorized access.

The legal bases are performing the service you booked, complying with legal obligations and our legitimate interest in keeping the site running, measuring visits in aggregate and staying in touch with our clients. Visit statistics are on by default, and you can decline them in the cookie notice or through your browser's Global Privacy Control signal. For health data, the basis is protecting your physical safety during the treatment (LGPD, art. 11, II, e). For the Google map, it is your consent.

05Who we share it with

We do not sell your data. It only passes through the providers that help us operate:

• Vercel: website hosting and visit statistics.
• Supabase: database for the salon booking system.
• WhatsApp (Meta): our conversations with you, including confirmations and reminders we send.
• Google: the map on the contact page, only if you allow it.
• Accountant: the payment data required for tax obligations.

Vercel and Supabase store and process data in the United States, so your data may be transferred outside Brazil. Access is protected by encrypted connections and a login restricted to our team.

06How long we keep it

• Contact form messages: the site does not store them. The conversation stays in WhatsApp for as long as it is useful for your appointment.
• Client record and visit history: while you are a client and for up to 5 years after your last visit, the period in which questions about the service may still arise.
• Payment records: for the period required by tax law.
• Visit statistics: the visit identifier is discarded within 24 hours. The totals identify no one.

After these periods, we delete the data or make it anonymous.

07Cookies and browser storage

The site only uses what it needs to work. None of it is used for advertising.

• NEXT_LOCALE (cookie): remembers your language. Necessary. Cleared when you close the browser.
• jn-consent (local storage): keeps your cookie choices. Necessary. Stays until you clear your browser data.
• jn-splash-vista (session storage): avoids replaying the opening animation. Necessary. Cleared when you close the browser.
• Site cache: keeps images and pages so the site loads faster and works offline. Contains no personal data.
• Google Maps (third party): only loads if you allow it and may use Google cookies, under Google's privacy policy.
• Staff area: uses login and preference cookies, only for people who work at the salon.

Vercel Web Analytics uses no cookies. You can turn off statistics and the map at any time.

08Photos

If you appear in a photo on our site or social media and no longer want it shown, contact us through the channel above and we will remove it.

09Your rights

Under the LGPD, you may, at any time and free of charge:

• Confirm whether we process your data and access it.
• Correct incomplete, wrong or outdated data.
• Ask for anonymization, blocking or deletion of unnecessary or excessive data, or data processed against the law.
• Ask for your data to be ported to another provider.
• Ask for deletion of data processed with your consent and withdraw that consent.
• Know who we share your data with.
• Know that you may refuse consent and what happens if you do.
• Object to processing carried out against the law.

To exercise these rights, contact us through the channel at the top of this notice. We reply within 15 days. You can also file a complaint with Brazil's National Data Protection Agency (ANPD) at gov.br/anpd.

10Security

The salon's internal system requires a login and only authorized staff can access it. Connections are encrypted. If a security incident could pose a significant risk or harm to you, we will notify you and the ANPD within the legal deadlines.

11Changes to this notice

We may update this notice when we change how we handle data. The date at the top shows the current version.