Privatlivspolitik

(See the original in this document: https://docs.google.com/document/d/e/2PACX-1vTQanPyTFeO5-Kwgd9Z7hGndio8DvhoJM4DJWpuflyJERUrpIzMKTrrYKjxdp8v6IDXo3kOjM98AiWp/pub)

# Cookie and privacy policy

**Effective Date:** 01.02.2025
**Last Updated:** 01.02.2025

At **Neglegance**, we don’t just care about making your nails look fabulous—we also care about keeping your personal information safe and secure. Whether you’re booking an appointment, signing up for updates, or just browsing our website, we want you to feel confident that your data is in good hands.

This **Privacy Policy** explains what information we collect, why we need it, and how we protect it—all in line with the **General Data Protection Regulation (GDPR)**. We like to keep things simple and transparent, so if you have any questions, just ask\!

## What Information We Collect

To keep you informed about the latest nail trends, special offers, and exclusive deals, we collect the following data:

### Newsletter & Marketing

#### Legal Basis

This data is collected based on **your consent**.

#### What Data We Collect

- **Email Address** – Used exclusively for sending updates, promotions, and marketing content in the newsletter and marketing scope

#### How We Use & Store Your Data

- Your email address will be stored on **Reservio.com**, which acts as a **third-party data processor**.
- **Reservio.com** only processes this data on our behalf and does **not** share it with third parties, as outlined in their Privacy Policy.
- Consent for receiving marketing emails is also recorded and stored within **Reservio.com**.
- Other third parties that may handle this data include **email service providers** we use for sending communications.

#### How Long We Keep This Data

- We will store your **email address** for marketing purposes and **marketing consent** until you **withdraw your consent** or until we **discontinue our newsletter service**, whichever comes first.

### Payments & Transaction Data

#### Legal Basis

This data is processed as part of our **legitimate interest** in handling payments securely and maintaining transaction records.

#### What Data We Have Access To

- **Full Legal Name** – This information is linked to your payment and visible to us through the **MobilePay dashboard**.

#### How We Use & Store This Data

- We do **not** actively use or process this data ourselves; it is only accessible to us through the **MobilePay dashboard** for transaction reference purposes.
- The data is stored and managed by **MobilePay**, and we do **not** transfer or share this data with any other third parties.

#### How Long We Keep This Data

**MobilePay automatically removes this data after one year**, in accordance with their data retention policies.

### Booking System & Appointment Management

To manage appointments efficiently and ensure smooth communication, we collect and process certain personal data through our **booking system**, which is handled by **Reservio.com** as a **data processor**.

##### Legal Basis

This data is collected and processed as part of **fulfilling our service agreement** (your name and email address), and also based on **legitimate interest** in managing and organizing appointments effectively.

#### What Data We Have Access To

- **Your Provided Name**
- **Email Address**
- **Phone Number**

##### How We Use & Store This Data

- Used for **confirming and managing appointments**.
- Necessary for providing **services between the time of booking and completion of the treatment**.
- **Email may also be used** to send an **electronic receipt via MobilePay**, if requested.
- Data is stored on **Reservio.com** and is **not automatically removed** unless requested by the user.
- Used for **booking management**, including **reminders, confirmations, and cancellations**.
- Helps track **booking history**, including **missed appointments ("no shows")** when a customer does not show up without prior notice.

#### How Long We Keep This Data

- Booking details are stored until the user **requests deletion**. If we transition to a different booking system, users will be informed about the changes before they take effect.
- If you have any questions regarding how your booking details are managed, please refer to **Reservio.com’s privacy policy** or contact us.

## Security of Personal Data

We implement technical and organizational measures to protect personal data from unauthorized access, alteration, disclosure, or destruction. Access is managed by our IT team, with permissions granted based on employees’ responsibilities. All data is transmitted through encrypted channels, and our third-party processors apply strict security measures, including encryption of sensitive information. Personnel are regularly updated on best practices for handling personal data securely, and we continuously improve our security measures. If you have any questions about data security, please contact us at [privacy@neglegance.dk](mailto:privacy@neglegance.dk).

## Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

- **Right to Access** – You can request a copy of the personal data we hold about you.
- **Right to Rectification** – If your data is inaccurate or incomplete, you can request corrections.
- **Right to Erasure** – You can request the deletion of your personal data, subject to legal or operational limitations.
- **Right to Restrict Processing** – You can ask us to limit how we use your data in certain circumstances.
- **Right to Data Portability** – You can request your personal data in a structured, commonly used format and, where possible, have it transferred to another service.
- **Right to Object** – You can object to the processing of your data for direct marketing or based on our legitimate interests.
- **Right to Withdraw Consent** – If we process your data based on consent, you can withdraw it at any time.

To exercise any of these rights or if you have concerns about how we handle your data, please reach out to us. We will respond to your request in accordance with GDPR.

## Cookies & Tracking

Our website is designed to respect your privacy, and we do not use cookies or tracking technologies that follow users across the web.

We use Fathom Analytics ([https://usefathom.com](https://usefathom.com)) and Cloudflare Analytics to gather website insights in a privacy-friendly way. Both services **do not** use cookies and **do not track individual users**, ensuring that no personally identifiable data is collected. These tools allow us to understand website traffic while maintaining user privacy.

Additionally, our website is secured and optimized using Cloudflare, which helps protect against security threats and improve performance without tracking users in an intrusive way.

For any data processing related to our booking system (Reservio.com) or payment provider (MobilePay), we encourage customers to review their respective privacy policies for more details on how they handle data.

### Settings or Cookies Directly Managed by Our Website

At [https://neglegance.dk](https://neglegance.dk), we store the following settings or cookies for the purposes outlined below:

| Name | Type | Purpose | Expiration |
| :---- | :---- | :---- | :---- |
| locale | Strictly necessary | Stores user-selected localization of the website per device | Present unless manually removed |
| cc\_cookie | Strictly necessary | This cookie stores your consent preferences, ensuring that your choices regarding cookie usage are respected on future visits. | Present unless manually removed |
| \_\_cf\*/cf\* | Strictly necessary | Cloudflare cookies \- You can read more [here](https://developers.cloudflare.com/fundamentals/reference/policies-compliances/cloudflare-cookies/) | As specified by Cloudflare |

All cookies are used strictly to enhance user experience and functionality on our website.

## Contact us

If you have any questions about this Privacy Policy, how we handle your personal data, or if you wish to exercise your rights, please contact us at:

Email: [privacy@neglegance.dk](mailto:privacy@neglegance.dk)
Phone: \+45 81 92 85 53

We are committed to addressing your inquiries and requests in accordance with GDPR.

## Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, business operations, or technical developments. When we make updates, we will take appropriate steps to notify you based on the significance of the changes. If required by law, we will seek your consent before implementing any significant changes.