Booking an appointment
PRIVACY AND COOKIE POLICY
This Policy explains what data Healthy Touch processes when you use the website, buy a voucher, contact us, subscribe to the newsletter or visit the Studio. Analytics and marketing cookies are enabled only in accordance with the user’s choice in the consent panel.
Depending on how you use the website and services, we may process:
We receive data primarily from the data subject. A Voucher recipient’s details may be provided by the purchaser. The purchaser should inform that person about this Policy and provide only the data needed to prepare the Voucher.
| Purpose | Legal basis | Retention |
|---|---|---|
| Cart, order, payment, delivery, collection and pre-contract communication | Article 6(1)(b) GDPR — steps at your request and performance of a contract | for performance of the contract and then until the applicable limitation period for claims expires |
| Accounting and tax records | Article 6(1)(c) GDPR — legal obligation | for the period required by Polish accounting and tax law, generally 5 years calculated under those laws |
| Complaints, withdrawals, refunds and establishment, exercise or defence of claims | Article 6(1)(b), (c) and (f) GDPR — contract, legal duties and the Controller’s legitimate interests | until the matter is concluded and the relevant limitation period has expired |
| Replying to an email, call or message unrelated to an existing contract | Article 6(1)(f) GDPR — legitimate interest in communication and handling enquiries | until communication is complete, and longer only where necessary for the defence of claims |
| Newsletter and our own marketing communications | Article 6(1)(a) GDPR — consent; electronic communications are also governed by the applicable Polish Electronic Communications Law | until consent is withdrawn, subscription is cancelled or the purpose permanently ceases; evidence of consent for as long as needed to demonstrate compliance |
| Analytics, effectiveness measurement and cookie-based marketing | Article 6(1)(a) GDPR — consent given through the cookie panel | until consent is withdrawn or the relevant identifier expires, as detailed in the cookie panel |
| Website security, fraud prevention and error diagnostics | Article 6(1)(f) GDPR — legitimate interest in protecting the website, data and users | for the time necessary to investigate an event and protect claims; routine logs are removed or overwritten in accordance with hosting settings |
| Safe performance of a service with regard to contraindications | Article 6(1)(a) and Article 9(2)(a) GDPR — explicit consent where the information is health data | until consent is withdrawn or the need ceases, subject to limited retention for the defence of claims where another legal basis permits this |
If the law requires longer retention or data is needed in connection with proceedings, an audit or a claim, the relevant period may be extended only to the extent necessary.
We disclose data only to the extent necessary for the relevant purpose. Recipients or processors may include:
Service providers acting on our behalf are bound by appropriate confidentiality and data protection obligations. We do not sell personal data.
Depending on the legal basis and circumstances, you have the right to:
A request may be sent using the contact details in section 1. We may ask for additional information only where necessary to confirm identity and protect the data from disclosure to an unauthorised person.
Providing the data required at checkout is voluntary but necessary to conclude and perform the contract. If required data is not provided, the order cannot be placed or fulfilled. Newsletter subscription and consent to optional cookies are voluntary and are not a condition of purchase.
We do not make decisions that produce legal or similarly significant effects solely by automated means, including profiling.