Privacy Policy

Last updated: June 19, 2026
Version 1.0

The Salon SPA recognizes the importance of protecting the personal information of its customers and website users.

This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with Law 1581 of 2012, Decree 1377 of 2013, and other applicable Colombian regulations.

1. Data Controller

Business name:
The Salon SPA

Business activity:
Hair salon services, SPA services, and the sale of professional hair-care products.

Address:
Manga, Cartagena de Indias, Bolívar, Colombia.

Privacy email:
privacidad@thesalonspa.co

Phone / WhatsApp:
+57 318 226 0954

2. Information We May Collect

Depending on how you interact with The Salon SPA, we may collect the following information:

Identification Information

• Full name.

• Identification document where required.

Contact Information

• Phone number.

• WhatsApp number.

• Email address.

• Home or delivery address.

Service-Related Information

Where necessary to provide a service correctly, we may collect:

• Information about known allergies.

• Service history.

• Notes related to the service.

• Before-and-after photographs where appropriate and where consent has been provided.

Purchase Information

We may retain:

• Order history.

• Products purchased.

• Billing information.

• General payment method information.

The Salon SPA does not directly store complete credit or debit card details when payments are processed by external payment providers.

Browsing Information

Depending on the tools enabled on the website, we may collect:

• IP address.

• Device type.

• Browser type.

• Pages visited.

• Analytics information collected through cookies.

Date of Birth

This may be requested optionally for benefits, communications, or birthday-related promotions.

3. How We Use Personal Information

Information collected may be used to:

• Manage and confirm appointments.

• Send appointment reminders.

• Process online store orders.

• Manage payments and deliveries.

• Maintain service history to improve customer service.

• Process exchanges, returns, warranties, and after-sales support.

• Respond to customer enquiries.

• Comply with legal, accounting, and tax obligations.

• Prevent fraud and improve security.

• Perform statistical analysis.

• Improve our products, services, and website.

• Send offers, promotions, or marketing communications where the user has given consent.

4. Legal Basis for Processing

Depending on the purpose, personal data may be processed based on:

Consent

Where the user authorizes marketing communications, non-essential cookies, or other activities that require consent.

Performance of a Contract

For appointments, purchases, deliveries, and the provision of services.

Legal Obligations

For billing, accounting, tax, and regulatory requirements.

Security and Legitimate Interests

Where permitted by law, for fraud prevention, website protection, and maintaining the security of our services.

5. Service Providers and Third Parties

Where necessary to operate our services, certain information may be processed by technology or commercial providers.

These may include:

• Supabase, for technology services, databases, or authentication.

• Wompi / Bancolombia, for payment processing.

• WhatsApp or messaging platforms used for confirmations and reminders.

• Brevo or other email service providers.

• Vercel or other hosting and infrastructure providers.

• Shopify and related service providers used to operate the online store.

• Shipping companies used to deliver orders.

Only the information necessary for each provider to perform its service will be shared.

The Salon SPA does not sell or rent customers' personal information to other companies for independent marketing purposes.

6. Data Retention

Personal information will only be stored for as long as necessary for the purpose for which it was collected or for the period required by applicable law.

As a general reference:

Service-related history:
Up to 5 years after the customer's last visit where applicable.

Order and billing information:
May be retained for the periods required under commercial, accounting, and tax laws.

Marketing information:
Until the user withdraws their consent.

Result photographs:
Until the user requests deletion or for as long as there is an authorized reason to retain them.

7. Your Rights

Under applicable Colombian law, individuals may have the right to:

• Access their personal data.

• Know how their information is being used.

• Request updates or corrections.

• Request deletion where legally permitted.

• Withdraw consent where applicable.

• Submit enquiries or complaints.

• Request information regarding how their data is processed.

• Contact the Superintendence of Industry and Commerce if they believe their rights have been violated.

8. How to Exercise Your Rights

To submit a request regarding your personal information, contact:

privacidad@thesalonspa.co

Your request should contain enough information to identify you and clearly explain the enquiry, correction, deletion, or other right you wish to exercise.

Requests will be handled within the time limits established by applicable Colombian law.

9. Cookies

The website may use different types of cookies.

Essential Cookies

These are required for functions such as:

• Shopping cart functionality.

• Login.

• Security.

• Basic website operation.

Analytics Cookies

These may be used to understand website traffic and how users interact with the site.

Where legally required, consent will be requested before non-essential cookies are used.

Users may also manage certain cookies through their browser settings or through the consent tools available on the website.

10. Children's Data

The Salon SPA does not intentionally seek to collect personal information from minors where parental, guardian, or legal representative consent is required.

If information has been collected without the necessary authorization, a request for deletion may be sent to:

privacidad@thesalonspa.co

11. Information Security

The Salon SPA applies reasonable measures designed to protect personal information.

These may include:

• HTTPS/TLS encrypted transmission.

• Authentication systems.

• Access controls.

• Restricted administrative access.

• Payment providers that follow applicable security standards.

• Measures designed to prevent unauthorized access.

• Periodic review of permissions and access.

Complete card details are not stored directly by The Salon SPA when payment is handled by an external payment provider.

12. Changes to This Privacy Policy

The Salon SPA may update this Privacy Policy to reflect legal, technical, or operational changes.

The latest version will be published on the website together with the date of the most recent update.

If a change is significant, it may also be communicated through the website, email, or another appropriate method.

The Salon SPA
Manga, Cartagena de Indias, Bolívar, Colombia

Privacy enquiries:
privacidad@thesalonspa.co

Relevant regulations:
Law 1581 of 2012
Decree 1377 of 2013
Superintendence of Industry and Commerce – Colombia