Privacy Policy

  1. Data Controller

    SalonQ (SH Esthetics Oy)

    Contact Details

    Merikoskenkatu 1 L 45
    90500 Oulu
    [email protected]

    Person Responsible for the Register

    Jari Huttunen
    [email protected]

  2. Data Subjects

    • Individual customers
    • Corporate clients
  3. Purpose of Processing Personal Data

    The personal data stored in SalonQ’s customer registers are used for managing customer relationships, communicating about services, for marketing purposes, as well as for developing and planning the company’s services and other operations.

  4. Personal Data Collected in the Register

    The following information is collected from individual customers:

    • Email address
    • First and last name
    • Marketing consent

    The following information is collected from corporate clients:

    • Business ID
    • Company contact details
    • Booking page address
    • Other necessary public information in the Phorest system
    • Billing information
    • Information about purchased products/services
  5. Rights of the Data Subject

    The data subject has the following rights, requests regarding the exercise of these rights should be sent to [email protected]

    Right of Access

    The data subject has the right to check the personal information we have stored.

    Right to Rectification

    The data subject can request the correction of inaccurate or incomplete information concerning them.

    Right to Object

    The data subject can object to the processing of personal data if they feel that the personal data has been processed unlawfully.

    Direct Marketing Prohibition

    The data subject has the right to prohibit the use of the data for direct marketing.

    Right to Erasure

    The data subject has the right to request the deletion of data if the processing of the data is not necessary. We will process the deletion request, after which we either delete the data or provide a justified reason why the data cannot be deleted.

    It should be noted that the data controller may have a statutory or other right not to delete the requested information. The data controller is obliged to retain accounting material for the period defined in the Accounting Act (Chapter 2, Section 10) (10 years). Therefore, accounting material cannot be deleted before the expiration of the period.

    If the processing of personal data concerning the data subject is based solely on consent, and not, for example, on customer relations or membership, the data subject can withdraw consent.

    The data subject can lodge a complaint with the Data Protection Ombudsman

    The data subject has the right to demand that we restrict the processing of disputed information while the matter is being resolved.

    Right to Lodge a Complaint

    The data subject has the right to lodge a complaint with the Data Protection Ombudsman if they feel that we are violating the applicable data protection legislation in processing personal data. Contact details of the Data Protection Ombudsman:

  6. Regular Sources of Information

    Personal data is collected from the customer themselves at the onset of the customer relationship and through the data controller’s systems for services via online forms. In addition, it is updated from government sources or other service providers, ensuring the currency of the information.

  7. Regular Disclosures of Data

    Information is generally not disclosed for marketing purposes outside SalonQ and its affiliated businesses.

  8. Duration of Processing

    Personal data is primarily processed for as long as the customer relationship is active. Registered individuals can unsubscribe themselves from our marketing list through a link provided in every marketing email we send or by sending a message to: [email protected]

  9. Processors of Personal Data

    The data controller and its employees process personal data. We may also partially outsource the processing of personal data to a third party, in which case we guarantee through contractual arrangements that personal data is processed in accordance with applicable data protection legislation and otherwise appropriately.

  10. Transfer of Data Outside the EU

    Personal data is not transferred outside the EU or the European Economic Area.

  11. Automated Decision-Making and Profiling

    We do not use the data for automated decision-making or profiling.

  12. Cookies and Browsing Monitoring

    We collect information about the user’s terminal device through cookies (“cookies”) and other similar technologies, such as the browser’s local data storage. A cookie is a small text file that the browser stores on the user’s terminal device. Cookies often contain an anonymous, unique identifier, which allows us to identify and count the browsers visiting our site.

    Our site may uses the following cookies:

    Necessary Cookies

    These cookies are necessary for the operation of our website and cannot be turned off in our systems.

    Statistical Cookies

    These cookies are used to compile statistics and understand how visitors use our website.

    Marketing Cookies

    Marketing cookies are used to monitor visitors on websites. The intent is to show ads that are relevant and engaging for individual users.

    For more information about cookies, including how to manage and delete them, please visit:

    Request Your Data