PRIVACY POLICY
Privacy Policy
Last updated: 17 October 2026
Who is responsible for your information?
Yelyzaveta Onyshchuk, trading as Brunetkaa Hair in London, United Kingdom, is responsible for personal information used to handle enquiries and appointments. For privacy questions or to exercise your rights, contact Yelyzaveta on WhatsApp or call +44 7988 884136.
Information you provide
The booking form asks for your name and selected service. Your preferred date, choice of Keratin or Hair Botox, and comment are optional. These details are used to answer your enquiry, discuss a suitable service and arrange an appointment. You can choose “Help me choose” if you are unsure about the service. Providing these details is voluntary, but without enough information we may not be able to arrange your appointment.
Please do not include medical information, identity documents, payment-card details or other sensitive information in the website form. If you send us a message through WhatsApp or Instagram, we also receive the contact or profile details that the service makes available, such as your phone number or profile name, and the content of your conversation.
How the booking form works
Your entries are held in the page while you complete the form. The website does not send them to a booking server or save them in a database, cookies, localStorage or sessionStorage. They are not intentionally retained by the website after the page is closed or reloaded; your browser may separately offer autofill or restore a previous page.
Selecting “Continue on WhatsApp” creates a link containing your entered details and opens WhatsApp. Those details are passed to WhatsApp as part of opening the link, even before you press Send. Yelyzaveta receives your enquiry when you send the message. Opening WhatsApp does not confirm an appointment; the final time is agreed in the conversation.
Why we use information and our lawful bases
We use enquiry and appointment details to take steps at your request before entering into a contract and, where you book a service, to perform that contract (UK GDPR Article 6(1)(b)). We also have a legitimate interest in keeping the website secure and reliable and in dealing with complaints or legal claims (Article 6(1)(f)). Where we must retain information to meet an applicable legal obligation, the basis is Article 6(1)(c).
We do not use the booking form for mailing lists, advertising profiles or automated decisions with legal or similarly significant effects.
Hosting, fonts, maps and external services
The website is hosted by Vercel. Delivering and protecting the website may involve technical information such as your IP address, request time, requested page and browser information. This is separate from the booking form, whose entries are not sent to Vercel by the form. See Vercel’s Privacy Notice.
The website loads its fonts from Google Fonts. Your browser contacts Google to request the font files, which discloses technical connection information such as your IP address and browser information.
An embedded Google Map is loaded as you approach the location section. Google receives technical connection information when the map loads, without you needing to press a map button. Its own cookies or storage technologies may also be used, depending on the service and your browser settings. See Google’s Privacy Policy.
WhatsApp and Instagram links open services operated by Meta. Information you pass to those services is subject to their own policies as well as this notice for the enquiry information received by Brunetkaa Hair. See WhatsApp’s Privacy Policy and Instagram’s Privacy Policy. Instagram previews on this website are local images, not an embedded feed.
Cookies and website storage
The website’s own code does not set analytics or advertising cookies, install tracking pixels, or save booking entries in browser storage. This does not mean that third-party services or hosting security features never use cookies or process technical information. Browser controls can restrict third-party cookies, although some external features may then work differently. This notice itself does not give consent to optional cookies or other technologies that require your permission.
Who can receive information and international processing
Enquiry information is used by Yelyzaveta and the messaging service you choose. Hosting and font or map providers receive the technical information needed for their features. Information may also be disclosed where required by law or where necessary to establish, exercise or defend legal claims.
These providers operate internationally and may process information outside the United Kingdom. Their privacy notices describe the countries, recipient organisations and applicable transfer arrangements. Where a restricted international transfer is made on our behalf, UK data protection law requires an appropriate transfer mechanism, such as an adequacy regulation or approved contractual safeguards. Contact Yelyzaveta for information about arrangements relevant to your enquiry and how to obtain the applicable safeguards.
How long information is kept
The website does not keep a database of form submissions. Messages that you send through WhatsApp or Instagram are retained separately in the relevant conversation. There is currently no fixed deletion period for those conversations. Retention must be limited to what is necessary to deal with the enquiry, arrange and provide the service, handle follow-up questions or complaints, and meet applicable record-keeping requirements or legal claims.
The relevant criteria are whether the enquiry is still active, whether an appointment or follow-up is outstanding, and whether particular records remain necessary for a legal obligation or claim. Technical logs and provider-controlled records have their own retention arrangements. You can contact Yelyzaveta to ask about a particular record or request its deletion; deletion is subject to applicable legal exceptions.
Your rights and complaints
Depending on the circumstances and lawful basis, you may request access to your personal information, correction, erasure, restriction of processing or data portability. You may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw that consent without affecting the lawfulness of earlier processing.
To make a request, use the WhatsApp or telephone contact above. We may need to verify your identity. Requests are normally answered within one month; the law allows extensions in certain circumstances.
You can also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Updates to this notice
This page may be updated if the website or handling of enquiries changes. The date above identifies the latest version.