Q Beauty Centre by HANA respects your privacy. This policy explains what personal data we collect when you visit our website or book with us, why we collect it, and the rights you have.
1. Who is responsible for your data
The controller of your personal data is Q Beauty Centre by HANA, Arena Center (Air Albania), Rruga Dervish Hima B4, Tiranë 1001, Albania. You can contact us about privacy at any time by email at info@qcentrebyhana.al or by phone at +355 69 310 7744.
2. What data we collect
We only collect the information you choose to give us, plus basic technical data needed to run the website:
- Appointment requests: your name, phone number, email, the treatment, date and time you choose, optional extras, and any notes you add.
- Contact and consultation requests: your name, phone number, email, your area of interest, preferred time and your message.
- Gift card requests: your name, phone number and email, and the recipient's name, email (if you ask us to email the card), and your personal message.
- Newsletter: your email address, if you subscribe.
- Technical data: like any website, our hosting provider automatically processes your IP address and browser information to deliver pages securely.
3. Health information
Some treatments require us to know about allergies, sensitivities, skin conditions, medication or pregnancy so we can treat you safely. Please only share this information in the notes field or in person when it is relevant. We use it solely to provide your treatment safely, keep it confidential, and never share it for any other purpose.
4. Why we use your data
- To respond to your request and schedule, confirm or change your appointment (performing our agreement with you).
- To issue, deliver and manage gift cards, including checking a card's balance.
- To provide treatments safely and keep appropriate client records (legal obligation and our legitimate interest in providing safe care).
- To send our newsletter, only if you have subscribed (your consent, which you can withdraw at any time).
- To keep the website secure and working properly (legitimate interest).
We do not sell your personal data and we do not use it for automated decision-making or profiling.
5. Who we share it with
We share data only with service providers that help us run our business, and only as much as they need:
- Website hosting and email delivery: our website and form emails are hosted by our web hosting provider.
- Google: our website shows a Google Map and Google reviews, and uses Google Fonts. When these load, Google receives your IP address. See the Cookie Policy.
- WhatsApp: if you choose to message us on WhatsApp, your conversation is handled by WhatsApp (Meta) under their own privacy policy.
- Authorities: where we are legally required to.
Some of these providers may process data outside Albania. Where this happens, we rely on the safeguards required by applicable data protection law.
6. How long we keep it
- Appointment and client records: for as long as you are our client and afterwards for as long as required by law or needed to handle any questions or claims.
- Contact and consultation messages: up to 12 months after our last contact, unless they become part of your client record.
- Gift card records: until the card is fully used or expired, plus the period required for our accounting records.
- Newsletter: until you unsubscribe.
7. Your rights
You have the right to ask for access to your data, to have it corrected or deleted, to restrict or object to its use, to receive a copy of it, and to withdraw your consent at any time. To use any of these rights, email us at info@qcentrebyhana.al. We will reply within one month.
If you believe we have not handled your data properly, you can also complain to the Albanian Information and Data Protection Commissioner (Komisioneri për të Drejtën e Informimit dhe Mbrojtjen e të Dhënave Personale).
8. Security
Our website uses an encrypted (HTTPS) connection, and access to client information is limited to our team members who need it to look after you.
9. Changes to this policy
We may update this policy from time to time. The latest version is always published on this page with the date of the last update.