Privacy policy
This page explains what data we collect when you use inspirebeauty.pl and book an appointment, why we do it and what your rights are.
1. Who the data controller is
The controller of your data is INSPIRE Beauty Studio Karyna Panchenko, ul. Wieniawska 4, 20-071 Lublin, Poland, NIP (tax ID) 9462745319.
For anything about your data, write to [email protected] or call +48 698 706 698.
2. What data we collect and why
Booking. When you book through Booksy, you give your first name, surname, phone number and e-mail address, sometimes notes for the appointment. We need them to provide the service, confirm the time or contact you about a change. Giving the data is voluntary, but without it we cannot book you in.
Contact. When you call, text or e-mail us, we process your phone number or e-mail address and the content of the message so we can reply.
Visiting the website. The server that runs the website keeps standard logs: IP address, time, pages opened, browser type. They are used for security, fixing faults and visit statistics (section 5).
Statistics. We count visits in aggregate with Cloudflare Web Analytics: which pages are viewed, where visitors come from, from what device, browser and country. We also count clicks on “Book now” – we store only the date and the page. Neither tool uses cookies or stores anything on your device (section 5).
We make no automated decisions about you and do no profiling.
3. Booking through Booksy
You book through Booksy: in the app, on booksy.com or in the booking window on our website. Booksy is a separate controller of your account and booking data and processes it under its own privacy policy. We see the data needed for the appointment: first name, surname, phone, e-mail, chosen service, time and notes.
The booking window on our website is Booksy code. It loads only when you click “Book now”. Booksy may then load its own tools and partner tools (including Google, Stripe, hCaptcha) and set their cookies – see section 4.
5. Visit statistics
Cloudflare Web Analytics. We count visits with Cloudflare Web Analytics. It uses no cookies and stores nothing on your device. To count a page view, Cloudflare sees the IP address, the address of the page opened, the page you came from and the browser type. We see only aggregate numbers: page views and visits by page, traffic source, country and device, without IP addresses and without data about individual people.
“Book now” click counter. When you click “Book now”, the website sends a short message to our server: the date and time and the address of the page with the button. We do not store the IP address, browser or cookies. This tells us from which pages people most often go on to book.
Server logs. We also use the server logs (section 2) for simple visit statistics. They contain the IP address, time, page opened and browser type; we keep them for 12 months, then they are deleted.
The basis is our legitimate interest: website security and understanding how the website is used (Article 6(1)(f) GDPR). You can object to this (section 9).
6. Legal basis
We usually rely on one of two bases:
• booking and providing the service – the contract we enter into when you book (Article 6(1)(b) GDPR);
• replying to a call, text or e-mail, website security, server logs, visit statistics (Cloudflare Web Analytics, the “Book now” click counter), defence against claims – our legitimate interest (Article 6(1)(f) GDPR).
7. Who receives the data and transfers outside the EEA
Data goes only to companies that help us run the website and bookings:
• Booksy – bookings (separate controller, section 3);
• the hosting provider – the website server is located in the USA; it stores the site files and logs;
• Cloudflare – content delivery network, website protection and visit statistics (Cloudflare Web Analytics); traffic to the site passes through its servers.
Hosting means a transfer of data to the USA; Cloudflare is a US company and may also process data outside the EEA. We rely on the safeguards provided for in the GDPR: the European Commission adequacy decision (EU-U.S. Data Privacy Framework) for companies that have joined it, or standard contractual clauses. We do not sell data and do not pass it on for other purposes.
8. How long we keep data
• booking data in Booksy – under Booksy’s policy; we use it for the appointment and then for as long as the law (for example tax law) or possible claims require;
• messages (SMS, e-mail) – until the matter is settled and any follow-up questions are answered;
• server logs (IP address, time, page opened, browser) – 12 months, then deleted;
• Cloudflare Web Analytics statistics – aggregate numbers, kept in the Cloudflare dashboard for up to 6 months;
• “Book now” click counter – only the date and the page, no personal data.
9. Your rights
You have the right to:
• find out what data we hold about you and get a copy;
• correct your data;
• have your data deleted if we no longer need to keep it;
• restrict processing or object to it when we rely on legitimate interest;
• have the data you give when booking transferred.
Write to [email protected] – we will reply within a month at the latest. You can also correct and delete your Booksy account data directly in Booksy.
If you believe we process data unlawfully, you can complain to the President of the Personal Data Protection Office in Poland (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa.
10. Contact about your data
INSPIRE Beauty Studio, ul. Wieniawska 4, 20-071 Lublin
E-mail: [email protected]
Phone: +48 698 706 698
11. Changes to this policy
This is version 2 of 25 October 2026. In this version we removed Google Analytics and the cookie consent bar, and we now count statistics without cookies (section 5). When something changes, for example we add a new tool to the website, we will update this document and the date. The current version is always at this address.