A woman with blonde hair in pink rollers sitting on the edge of a bed, wearing a pink satin corset next to a glowing bedside lamp.

Back to Home

Back to Home

Privacy
Policy

Version 1.1 – 16.09.2026

Privacy Policy

Natalia Grajcar Hair Academy Willemstraat 12, 5611 HD Eindhoven, The Netherlands Chamber of Commerce (KvK) no.: KVK 53323440

Email: Nataliagrajcaracademy@gmail.com · Phone: +31 6 19266647


We take your privacy seriously. This policy explains what personal data we collect through nataliagrajcar.nl, in the Studio, and in the Academy, why we collect it, and what your rights are under the General Data Protection Regulation (GDPR / AVG).


We are the data controller for the processing described here.

Privacy Policy

Natalia Grajcar Hair Academy Willemstraat 12, 5611 HD Eindhoven, The Netherlands Chamber of Commerce (KvK) no.: KVK 53323440

Email: Nataliagrajcaracademy@gmail.com

Phone: +31 6 19266647


We take your privacy seriously. This policy explains what personal data we collect through nataliagrajcar.nl, in the Studio, and in the Academy, why we collect it, and what your rights are under the General Data Protection Regulation (GDPR / AVG).


We are the data controller for the processing described here.

Privacy Policy

Natalia Grajcar Hair Academy Willemstraat 12, 5611 HD Eindhoven, The Netherlands Chamber of Commerce (KvK) no.: KVK 53323440

Email: Nataliagrajcaracademy@gmail.com · Phone: +31 6 19266647


We take your privacy seriously. This policy explains what personal data we collect through nataliagrajcar.nl, in the Studio, and in the Academy, why we collect it, and what your rights are under the General Data Protection Regulation (GDPR / AVG).


We are the data controller for the processing described here.

1. What data we collect and why

Contacting us (email, phone, contact page)

  • Data: name, email address, phone number, and the content of your message.

  • Purpose: to answer your question and follow up.

  • Legal basis: our legitimate interest in responding to enquiries, or steps prior to entering a contract.

  • Retention: up to 12 months after the last contact, unless a booking or enrolment follows.

Booking an appointment

Bookings are made through Treatwell, which acts as an independent data controller for the booking process. Treatwell's privacy policy applies to the data you enter there. We receive from Treatwell your name, contact details, booked service, and any notes you add.

  • Purpose: to schedule and deliver your appointment, send reminders, and handle cancellations and payments.

  • Legal basis: performance of a contract.

  • Retention: appointment history for as long as you are a client and up to 2 years after your last visit; invoice data 7 years (Dutch tax law).

Client records (hair and health information)

To work safely we keep notes such as your colour formulas, hair history, previous treatments, and any allergies, scalp conditions, medication, or pregnancy you tell us about. Allergy and health information is special category data.

  • Purpose: to perform your service safely and consistently.

  • Legal basis: your explicit consent, which you give when you share this information with us. You may withdraw it at any time, although we may then be unable to perform certain services (e.g. colour).

  • Retention: up to 2 years after your last visit, then deleted.

Academy applications and enrolment

  • Data: name, address, date of birth, email, phone, education and work background, motivation, payment details, attendance, and assessment results.

  • Purpose: to assess your application, enrol you, deliver the course, issue certificates, and invoice you.

  • Legal basis: performance of a contract (or pre-contractual steps); legal obligation for invoicing.

  • Retention: unsuccessful applications 6 months; student records and certificates 7 years after completion; invoices 7 years.

Photos and video

We may photograph or film your hair for our portfolio, Website, and social media (Instagram, TikTok).

  • Legal basis: your consent, asked before any photo is taken and before publication. You can withdraw consent at any time; we will then remove the image from channels we control. Content already shared by third parties may be beyond our control.

  • Retention: until you withdraw consent or we no longer use the image.

Reviews

Reviews shown on the Website are sourced from Google. If you leave a Google review, Google's privacy policy applies. We display your name and review as published there. Contact us if you want a review removed from the Website.

Website visitors

Our Website is built and hosted on Framer. Framer processes technical data such as IP address, browser type, and pages visited to serve the site and for security. This data is not used to identify you.

  • Legal basis: legitimate interest in running a secure website.

  • See section 4 on cookies.

1. What data we collect and why

Contacting us (email, phone, contact page)

  • Data: name, email address, phone number, and the content of your message.

  • Purpose: to answer your question and follow up.

  • Legal basis: our legitimate interest in responding to enquiries, or steps prior to entering a contract.

  • Retention: up to 12 months after the last contact, unless a booking or enrolment follows.

Booking an appointment

Bookings are made through Treatwell, which acts as an independent data controller for the booking process. Treatwell's privacy policy applies to the data you enter there. We receive from Treatwell your name, contact details, booked service, and any notes you add.

  • Purpose: to schedule and deliver your appointment, send reminders, and handle cancellations and payments.

  • Legal basis: performance of a contract.

  • Retention: appointment history for as long as you are a client and up to 2 years after your last visit; invoice data 7 years (Dutch tax law).

Client records (hair and health information)

To work safely we keep notes such as your colour formulas, hair history, previous treatments, and any allergies, scalp conditions, medication, or pregnancy you tell us about. Allergy and health information is special category data.

  • Purpose: to perform your service safely and consistently.

  • Legal basis: your explicit consent, which you give when you share this information with us. You may withdraw it at any time, although we may then be unable to perform certain services (e.g. colour).

  • Retention: up to 2 years after your last visit, then deleted.

Academy applications and enrolment

  • Data: name, address, date of birth, email, phone, education and work background, motivation, payment details, attendance, and assessment results.

  • Purpose: to assess your application, enrol you, deliver the course, issue certificates, and invoice you.

  • Legal basis: performance of a contract (or pre-contractual steps); legal obligation for invoicing.

  • Retention: unsuccessful applications 6 months; student records and certificates 7 years after completion; invoices 7 years.

Photos and video

We may photograph or film your hair for our portfolio, Website, and social media (Instagram, TikTok).

  • Legal basis: your consent, asked before any photo is taken and before publication. You can withdraw consent at any time; we will then remove the image from channels we control. Content already shared by third parties may be beyond our control.

  • Retention: until you withdraw consent or we no longer use the image.

Reviews

Reviews shown on the Website are sourced from Google. If you leave a Google review, Google's privacy policy applies. We display your name and review as published there. Contact us if you want a review removed from the Website.

Website visitors

Our Website is built and hosted on Framer. Framer processes technical data such as IP address, browser type, and pages visited to serve the site and for security. This data is not used to identify you.

  • Legal basis: legitimate interest in running a secure website.

  • See section 4 on cookies.

2. Who we share data with

We do not sell your data. We share it only with:

Treatwell (Treatwell UK Ltd / Treatwell NL) — Independent controller — Online booking and payments

  • Framer B.V. — Processor — Website hosting

  • Google (Gmail, Google Maps, Google Reviews) — Processor / independent controller — Email, map embed, review display

  • Payment providers [name, e.g. iDEAL / pin terminal provider] — Processor — Processing payments

  • Accountant / bookkeeper [name] — Processor — Invoicing and tax compliance

  • Instagram (Meta) and TikTok — Independent controllers — Only for content you consented to share

Some of these providers (Google, Meta, TikTok) may process data outside the EEA. Where that happens, transfers are covered by the EU–US Data Privacy Framework or Standard Contractual Clauses.

We will disclose data to authorities where we are legally required to.

3. How we protect your data

We use secure, password-protected systems, limit access to those who need it, and use encrypted connections (HTTPS) on the Website. Paper records, if any, are stored in a locked location. If a data breach occurs that poses a risk to you, we will inform you and the Dutch Data Protection Authority as required by law.

4. Cookies

Our Website uses only cookies and similar technologies that are strictly necessary for it to function, placed by Framer. We do not currently use analytics, advertising, or tracking cookies.

5. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you;

  • rectify inaccurate or incomplete data;

  • erase your data ("right to be forgotten"), unless we must keep it by law;

  • restrict processing in certain circumstances;

  • data portability for data you provided under a contract or consent;

  • object to processing based on legitimate interest;

  • withdraw consent at any time, without affecting processing done before withdrawal.

To exercise these rights, email Nataliagrajcaracademy@gmail.com. We may ask you to verify your identity. We respond within one month.

If you are not satisfied with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority: Autoriteit Persoonsgegevens, www.autoriteitpersoonsgegevens.nl.

6. Children

We do not knowingly collect data from children under 16 without parental consent. Appointments and Academy enrolments for minors must be made by a parent or guardian.

7. Changes to this policy

We may update this policy from time to time. The current version is always available on this page with the date of the last update.

Contact

Questions about privacy? Email Nataliagrajcaracademy@gmail.com or write to Natalia Grajcar Hair Academy, Willemstraat 12, 5611 HD Eindhoven.

A woman with blonde hair in pink rollers sitting on the edge of a bed, wearing a pink satin corset next to a glowing bedside lamp.
A woman with blonde hair in pink rollers sitting on the edge of a bed, wearing a pink satin corset next to a glowing bedside lamp.
A woman with blonde hair in pink rollers sitting on the edge of a bed, wearing a pink satin corset next to a glowing bedside lamp.