Your privacy matters to me. This policy explains what personal information is collected through the website and studio services, how it is used, to whom it may be disclosed and your rights.
The Hebrew wording uses feminine language for convenience and applies to all genders.
1. Data controller and contact
DIDZ.NOIR is an independent nail studio managed by Didi (Adi) Mahmali in Florentin, Tel Aviv.
The business is responsible for personal information processing performed on its behalf in accordance with applicable law.
For privacy inquiries:
Phone and WhatsApp: 052-5247773
Instagram: @didz.noir
2. Information collected
Depending on your use of the website and studio services, the following may be collected:
a. Contact details, including name, phone number and email address if provided.
b. Appointments, treatments, visit history, preferences and special requests.
c. Transactions, deposits, charges, refunds and accounting documents.
d. Allergies, sensitivities or other conditions relevant to treatment safety, if provided.
e. Photographs and videos of nail work, if taken.
f. Correspondence and inquiries sent to the studio.
g. Security camera footage at the entrance and in the treatment room, including audio captured by the system.
h. Technical website usage information, insofar as actually collected.
3. Booking through Lee
Appointments are managed through Lee, an external appointment and booking management system.
When booking, client details are also collected and processed through Lee under its terms and privacy policy.
DIDZ.NOIR may access information required to manage the appointment and provide service, according to system permissions and capabilities.
Lee privacy policy:
https://lee.co.il/privacy-policy
4. Payments
Payments to the studio, including deposits, are made via Bit, PayBox, bank transfer or cash.
The business may retain transaction amounts, payment dates, deposits, charges and refunds as required for service management, accounting documents and legal obligations.
5. Purposes of use
Information will be used as needed for:
a. Booking and managing appointments.
b. Providing treatments and customer service.
c. Sending appointment confirmations, reminders and updates.
d. Managing payments, cancellations and refunds.
e. Adapting treatment for professional and safety reasons.
f. Responding to inquiries, requests and complaints.
g. Operating the website and maintaining information security.
h. Sending marketing content where permitted by law.
i. Protecting people and property at the studio and documenting unusual incidents through security cameras, subject to law.
6. Providing personal information
Providing personal information is generally voluntary unless legally required.
However, without basic contact and booking details, booking or providing service may not be possible.
Health information will be requested only insofar as relevant to treatment safety. Unnecessary medical information need not be provided.
7. WhatsApp communications
The business may use the contact details provided to coordinate appointments, send confirmations and reminders, communicate changes and provide service.
Messages may be sent through Lee or directly by the studio.
Marketing messages will be sent only in accordance with law. You may request to stop receiving them at any time.
8. Nail photography and marketing use
Nail photographs or videos may be taken during treatment, subject to consent.
Advertising and marketing use requires separate, explicit consent.
Refusing photography or publication will not affect access to treatment.
You may request an end to future image use or removal of existing publications, according to the circumstances and applicable law.
These images are separate from security camera recordings, which are not intended for publication.
9. Security cameras
a. Location and purposes
Security cameras are installed at the entrance and in the treatment room.
Their purposes are to protect people and property and document unusual incidents.
b. Information captured
The system records video and audio.
c. Retention
Video recordings are retained for 30 days.
Recordings needed to investigate a specific incident or comply with a legal obligation may be retained longer where legally permitted.
d. Access
Access will be limited to authorised persons and the purposes for which the information was collected, in accordance with law.
Recordings will not be used for advertising or marketing.
e. Disclosure
Recordings will be disclosed to third parties only where permitted or required by law.
f. Recorded individuals' rights
You may contact the business about personal information captured by cameras, including requests to access it, in accordance with law and the rights of other recorded individuals.
10. External providers
Personal information may be shared with external providers to operate the business and provide service, including Lee, payment services, invoicing services, website hosting and communications providers.
If the camera system uses cloud services or external storage, the processing performed through those services must be examined.
Information will be transferred according to permitted purposes and applicable law.
11. Information security
The business will apply organisational and technical safeguards according to the nature of the information and legal requirements.
Access to information, including security recordings, will be restricted according to need and appropriate permissions.
Information stored by external providers is also subject to their safeguards and obligations.
Absolute protection against every security incident cannot be guaranteed.
12. Retention
Personal information will be retained for as long as required for its collection purposes, service management and legal obligations.
Information no longer required will be deleted or minimised in accordance with law.
Security recording retention is described in section 9.
13. Cookies and measurement tools
The website may use cookies and similar technologies for operation, security and usage measurement, insofar as such tools are actually enabled.
Cookies and measurement tools within Lee are subject to Lee's policy.
If additional measurement or advertising tools are enabled on this website, appropriate information will be provided and any legally required consent obtained.
With consent to analytics cookies, the website uses Google Analytics by Google to measure page visits and clicks on booking, WhatsApp, Instagram and language links. Data may include browser and device information and online identifiers and may be processed by Google outside Israel. The website does not intentionally send names, phone numbers, message content or treatment details, and advertising features are disabled. You can refuse or withdraw consent using Cookie preferences in the footer. A booking click does not indicate a completed appointment. More information: https://policies.google.com/privacy
14. Client rights
Under the Privacy Protection Law, you may request access to personal information held about you.
If information is incorrect, incomplete, unclear or outdated, you may request correction or deletion in accordance with law.
Requests concerning information held by DIDZ.NOIR may be directed to the business.
Requests concerning information processed through Lee may also be directed to its operator, according to its role and privacy policy.
15. Policy updates
This policy may change following changes to studio services, technology or legal requirements.
The current version will be published with its update date.
16. Contact
DIDZ.NOIR | HUMAN CLAWS WORKSHOP
Didi (Adi) Mahmali
Florentin, Tel Aviv
Phone and WhatsApp: 052-5247773
Instagram: @didz.noir