Privacy Notice

Who is responsible for your information

Gerbina Nails, an independent nail studio in Galway, Ireland, is the controller of the personal information described in this notice. Until a dedicated client-support email is published, privacy questions and requests can be sent by direct message to @gerbina_nails_ng on Instagram.

Information we collect

• Your first and last name, phone number and email address.
• Optional Instagram username and any notes you choose to add.
• The selected service, appointment date and time, price, status and relevant booking history.
• A secure booking-management token used to open your personal cancel or reschedule page.
• Payment is made in cash at the appointment; the website does not collect card or online-payment details.
• Basic technical information created when the website and its hosting infrastructure handle a request, such as time, device/browser information and security logs.
• Your language choice, stored in your browser so the site can remain in English or Russian.

Why we use it and our legal bases

Booking details are used to take steps at your request and to arrange, confirm, provide, change or cancel the appointment. We also use limited information for the studio's legitimate interests in running its calendar, preventing double bookings, communicating with clients, protecting the service and resolving booking questions. Information may also be kept where necessary to meet a legal obligation.

The website currently sends service messages about your appointment, not promotional marketing. If marketing is introduced later, it will be handled separately with the choices required by law.

Required and optional details

Name, phone number and email are required to submit a booking request. Without them, the studio cannot reliably identify the request, send confirmations or contact you about an appointment. Please use a phone number and email address you can access. Instagram and free-text notes are optional.

Emails and booking management

Transactional emails may include receipt of your request, confirmation, cancellation, completion or a proposed change. They can also include a personal Manage Booking link. Anyone with that link may be able to view or request changes to the appointment, so do not forward it. The link is designed to expire after the appointment date.

Who processes the information

Gerbina Nails does not sell your personal information or publish it. Limited information is shared only with service providers needed to operate the booking system:

• Vercel, for website hosting and delivery.
• Neon, for the booking database.
• Brevo, for transactional appointment emails.
• Telegram, for private notifications to the studio administrator. A booking summary may therefore be processed by Telegram when an admin alert is sent.

International processing

Some service providers may process information outside Ireland or the European Economic Area. Where this happens, Gerbina Nails relies on the provider's applicable contractual and legal safeguards, such as adequacy decisions or standard contractual clauses, as appropriate.

How long information is kept

Booking and client information is kept only for as long as reasonably necessary to manage appointments, answer follow-up questions, resolve disputes, protect the service and meet applicable legal or record-keeping duties. Retention is reviewed periodically; information that is no longer needed is deleted or anonymised. Booking-management links expire separately from the underlying appointment record.

Security

The site uses HTTPS/TLS in transit, provider-supported encryption at rest for stored database information, restricted administrator access and protected credentials. Reasonable technical and organisational measures are used to reduce the risk of loss, misuse or unauthorised access. No online service can promise absolute security, so please do not place sensitive medical, financial or identity-document information in the notes field.

Cookies and local storage

The public site stores your selected language in a small first-party cookie and in local browser storage. The private dashboard uses a strictly necessary sign-in cookie for authorised staff. The site does not currently use advertising cookies or behavioural advertising. Hosting providers may create essential security and request logs.

Your data-protection rights

Depending on the circumstances, you may ask for access to your information, correction, deletion, restriction of processing, objection to certain processing, or a portable copy. You may also withdraw consent where processing is based on consent; this does not affect earlier lawful processing. Identity may need to be verified before a request is completed.

You may raise a concern with the Irish Data Protection Commission at dataprotection.ie. We would appreciate the opportunity to address your concern first, but you do not have to contact us before contacting the Commission.

Changes to this notice

This notice may be updated when the booking service, contact details or providers change. The current version and update date will remain available on this page.