Last updated: July 1, 2025
Although SHIRO Hair Salon LLC is based in California and serves a local clientele, we respect the privacy of all visitors. This statement explains how we comply with the EU/UK General Data Protection Regulation (GDPR) for any personal data of individuals in the EEA or UK.
1. Data Controller
SHIRO Hair Salon LLC is the controller of personal data collected through this website. Contact: privacy@shirohairsalon.com.
2. Lawful Bases for Processing
- Consent — for newsletter subscriptions and non-essential cookies.
- Legitimate interests — to operate and secure our website and respond to enquiries.
- Steps prior to a contract — to handle booking and appointment requests you initiate.
- Legal obligation — where we must retain or disclose information by law.
3. Your Rights Under the GDPR
You have the right to access, rectify, erase, restrict and object to processing of your personal data, the right to data portability, and the right to withdraw consent at any time. Where processing is based on consent, withdrawing it does not affect prior lawful processing.
4. International Transfers
Our website is hosted in the United States. If you access it from the EEA or UK, your data will be transferred to the US. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for such transfers.
5. Retention
We keep personal data only as long as necessary for the purposes described in our Privacy Policy and Data Retention Policy.
6. Complaints & Contact
To exercise your rights, email privacy@shirohairsalon.com. You also have the right to lodge a complaint with your local supervisory authority.