Privacy policy

Data controller: Crinova Hair Center, Eric Castillo Díaz, Carrer de Felip II, 213, 08027 Barcelona. Contact: +34 602 01 66 08.

What data we collect and why

When you book an appointment we collect your name, age, phone number, email address, the service, the day and time and, if you choose the home-visit service, your address, as well as any comment you wish to add. We use this data only to manage your appointment, contact you (including on WhatsApp), charge the booking deposit and, just once, ask for your feedback after the appointment.

After booking, you can send us photos or a short video of your hair or your hair system if you wish. We use them only to choose and prepare the right hair system for you; they are stored privately, only our team can see them and you can ask us to delete them at any time.

If you message us on WhatsApp or call us, you will be attended to by Laura, our automated assistant: she replies using artificial intelligence, gives you information and can book your appointment for you. For this purpose we process your phone number, what you write or say to us in the conversation and the booking details.

If you send us a voice note on WhatsApp, it is automatically converted to text (with Cloudflare) so we can reply to you. We keep only the text, not the audio.

If you accept analytics cookies, Google Analytics collects data about your visit (pages viewed, type of device and approximate city) without identifying you, to understand how the website is used. We explain it in the cookie policy.

If you sign in to “My account”, we use your email address to send you the access code and to show you your appointments, your hair system and your subscription. You don’t need a password: the code expires after 10 minutes and the session ends after 30 days or when you press “Sign out”.

If you use the hair system try-on or the haircut try-on, the image from your camera or the photo you upload is analysed on your own device to measure your face shape: for that, it never leaves it. When you choose a hairstyle or a haircut, we send a crop of your photo (your head) to our server and to Cloudflare’s artificial intelligence, which draws it and sends the photo back to you; we do not store it. If you tap “Save to my profile”, your photo is stored only on your device, never on our servers. So that no one uses up all of the day’s try-ons, we record how many hairstyles and haircuts are requested from each connection (your IP address) and delete this after 2 days.

Legal basis

Your consent, which you give by ticking the box on the form or by saying yes when we ask you on WhatsApp or by phone.

For website analytics, your consent in the cookie notice.

For “My account”, your request when you sign in: we need it to provide the service you ask for.

For the try-ons, your request when you take or upload the photo: we need it to show you how the hairstyle or haircut would look on you.

How long we keep your data

For as long as necessary to manage your appointment and, afterwards, for as long as any resulting liabilities may arise. Conversations with Laura are deleted after 90 days without messages. Try-on photos are not stored on our servers, and the count of try-ons from each connection is deleted after 2 days. “My account” codes are deleted after 10 minutes and sessions after 30 days.

Who we share your data with

We do not sell your data or pass it on to third parties unless required by law. To provide the service we use the following providers, which process the data on our behalf: Cloudflare (hosting of the website, the bookings, the photos you send us and the conversations with Laura, the latter in a database under European Union jurisdiction; and its artificial intelligence, which draws the hairstyles and haircuts in the try-ons), jsDelivr (serves programs that the try-ons use on your device; it does not receive your photo), Cal.com (calendar and confirmation emails), Stripe (charging the deposit; we do not see or store your card details), Google (calendar and calculation of addresses and journeys with Google Maps; the programs with which the try-ons find your face on your device, without receiving your photo; and Google Analytics, only if you accept analytics cookies, with possible processing in the United States by Google LLC under the EU-U.S. Data Privacy Framework), Meta Platforms Ireland (WhatsApp Business, for messages with you), Anthropic (Claude, the artificial intelligence that drafts Laura’s replies), Retell AI (calls with Laura) and Resend (the email with the payment link that Laura sends you when you book by phone and the code to sign in to “My account”; it processes it in the European Union). Anthropic and Retell AI process the data in the United States.

Your rights

You can request access, rectification, erasure, objection, restriction and portability by messaging us on WhatsApp or calling +34 602 01 66 08. You can also lodge a complaint with the Spanish Data Protection Agency (aepd.es).