Privacy Policy.

Ashley Hairstyle is the data controller for personal data processed in connection with this website. See our Legal Notice for full business identification details. You can reach us at [email protected] or +359 887 258 213.

The booking form on this site does not send any data to our servers. When you submit it, your browser opens your own email application with a pre-filled message addressed to [email protected] — the data you enter (name, phone, requested service, message) goes directly to your email client, under your control, and is never received or stored by this website.

Like virtually all websites, ours is served through a hosting/CDN provider (Cloudflare), which automatically logs technical data such as your IP address for security and performance purposes. This is standard infrastructure-level processing, not tracking, and no other analytics or advertising scripts run on this site.

Where you choose to contact us via the booking form, phone, or social media, processing of any data you share is based on your consent and on taking pre-contractual steps at your request (Art. 6(1)(a) and (b) GDPR). Hosting-level technical logging is based on our legitimate interest in keeping the website secure and functioning correctly (Art. 6(1)(f) GDPR).

This website does not store any data submitted through the booking form — it is not retained by us at all, since it never reaches our servers. Once you send the resulting email, retention of that message follows your own and our email provider's normal practices. Technical hosting logs are retained only for the short period required for security and operational purposes.

We use the following service providers in connection with this website: Cloudflare (hosting and content delivery) and Prismic (content management for our services and team pages). Neither receives data from the booking form, since that form never contacts our servers.

Cloudflare, our hosting provider, is a US-based company. Where personal data (such as your IP address, via standard hosting logs) may be processed outside the EU/EEA as a result, this is safeguarded via Standard Contractual Clauses (SCCs) as provided under Cloudflare's data processing terms.

This website does not use analytics, advertising, or tracking cookies of any kind. No non-essential cookies are set for visitors browsing the public site. The only cookie in use is a strictly necessary authentication cookie for our staff-only admin area, which is not accessible to, or set for, public visitors.

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Request restriction of processing
• Request a copy of your data in a portable format
• Object to processing based on legitimate interest

You also have the right to lodge a complaint with the Bulgarian data protection authority, the Commission for Personal Data Protection (Комисия за защита на личните данни, КЗЛД) — cpdp.bg.