Privacy Policy

1. What data we collect

When you make a booking request, we collect:

• Your full name
• Your email address
• Your phone number / WhatsApp (optional)
• Your hotel address (only for dispatch bookings)
• Any special requests you choose to provide

We also collect standard technical data automatically: IP address, browser type, device type, pages visited, and time spent. This is collected via Vercel Analytics.

2. Why we collect it

We use your personal data to:

• Process and confirm your salon booking
• Forward your booking details to the relevant salon
• Contact you via WhatsApp or email to confirm your appointment time
• Send a booking reference and appointment confirmation
• Respond to any questions or support requests you have

Legal basis (GDPR Art. 6): Processing is necessary for the performance of a contract to which you are a party (Art. 6(1)(b)) — i.e., arranging your booking.

3. Who we share data with

We share your booking details with:

• The salon you booked — so they can prepare for your appointment
• Web3Forms — a form notification service used to send us an email when you submit a booking (data processed in the EU/US)
• Vercel — our hosting provider, which collects anonymous analytics

We do not sell your personal data. We do not share it with advertisers or third-party marketing services.

4. How long we keep your data

We retain booking records for 12 months from the date of your booking, after which they are permanently deleted. You may request earlier deletion at any time (see Section 6).

5. Cookies and tracking

We use minimal analytics cookies via Vercel Analytics to understand how visitors use the site (page views, device type). No advertising or tracking cookies are used. See our Cookie Policy for full details.

6. Your rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your personal data ("right to be forgotten")
• Restriction — ask us to limit how we use your data
• Portability — receive your data in a machine-readable format
• Object — object to our processing in certain circumstances

To exercise any of these rights, email us at support@transitglow.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Portuguese data protection authority: CNPD (cnpd.pt).

7. Data transfers outside the EU

Our services (Vercel, Web3Forms) may transfer data to the United States. Where this occurs, appropriate safeguards are in place (Standard Contractual Clauses or adequacy decisions) to protect your data in accordance with GDPR requirements.

8. Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our website is served over HTTPS. Booking data is transmitted securely.

9. Children

Our services are not directed at children under 16. We do not knowingly collect data from children. If you believe we have inadvertently collected data about a child, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the service after any changes constitutes acceptance of the updated policy.