At Brama Hair Studio, accessible at https://bramahairstudio.com, your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your personal information in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

1. Who We Are

Brama Hair Studio is a hair salon located at Rua da Restauração 321, Porto, Portugal. We provide in-person hair styling and related services. Our website is informational only and does not support online purchases.

2. What Personal Data We Collect

We collect and store the following information from our clients:

• Name
• Email address
• NIF (Portuguese tax number)
• Service history (what services were received and when)

This information is gathered when you book or receive services at our salon.

3. Why We Collect Your Data

We use your data for the following purposes:

• To provide and manage salon services
• To generate invoices and fulfill legal tax obligations
• To send service-related communications (e.g., appointment confirmations)
• To comply with tax reporting requirements to the Portuguese Tax Authority (AT)

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Performance of a contract: Providing the services you've requested
• Legal obligation: Meeting tax and accounting requirements
• Legitimate interest: Keeping service history to improve client experience

5. Who We Share Your Data With

We share your data only when necessary and only with trusted service providers, such as:

• Our accounting provider (Rauva)
• The Portuguese Tax Authority (AT)
• Our payment service provider (myPOS)

These partners are subject to appropriate confidentiality and data protection obligations.

6. How Long We Keep Your Data

We retain your data only as long as needed for the purposes outlined here and to comply with legal obligations. Invoices and related records are kept for 10 years as required by Portuguese law.

7. Your Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Request corrections or updates
• Request deletion (where allowed by law)
• Object to certain uses of your data
• Request transfer of your data (data portability)

To exercise these rights, please contact us using the details below.

8. Cookies and Website Data

Our website may use cookies to ensure functionality and gather simple usage analytics. We do not use cookies for advertising or cross-site tracking.

9. Contact Us

If you have questions about this Privacy Policy or how we handle your personal data, you can reach us at:

10. Changes to This Policy

We may update this policy periodically. The latest version will always be available on our website.