Privacy Policy

1. Data Controller

The data controller is SAKURA GROUP SRL, Bd. Brand Whitlock 154, 1200 Woluwe-Saint-Lambert, Belgium. For any question regarding your personal data: info@sakurion.beauty.

2. Legal Framework

SAKURION processes your data in accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and the Belgian Law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.

3. Data Collected

We collect: last name, first name, email address, phone number and postal address when booking appointments or purchasing services. Browsing data (IP address, cookies) is also collected automatically during your visit to the website.

4. Processing Purposes

Your data is processed for: appointment and care management, billing, sending commercial communications (with your prior consent), improving our services, and complying with our legal obligations (accounting and tax).

5. Data Recipients

Some of your data is shared with providers who assist us, only to the extent necessary for their task, and never resold to third parties: Brevo (French company, EU hosting) for sending our newsletter or a discount code if you request one, and Treatwell for online appointment booking when you use our booking module. Each of these providers applies its own privacy policy (Brevo, Treatwell). As all these providers are established in the European Union, your data never leaves the EU.

When you book on our website or with our team, we send Treatwell your name followed by your booking reference (for example "Marie Dupont SK-00012"). The sole purpose is to block the same time slot in our Treatwell calendar so that no one else can book it. Your phone number and e-mail address are never sent: the booking is registered with the salon's own contact details. Legal basis: performance of your booking (Article 6(1)(b) GDPR). This block is cancelled if you cancel your appointment.

6. Retention Period

Your personal data is retained for the duration necessary for the processing purpose, and for a maximum of 5 years after the last contact, unless otherwise required by law (accounting and tax obligations of 7 years).

7. Your Rights

In accordance with the GDPR, you have the right of access, rectification, erasure, restriction of processing, portability and objection. To exercise these rights, contact us at info@sakurion.beauty. You also have the right to lodge a complaint with the Data Protection Authority (DPA): www.autoriteprotectiondonnees.be.

8. Security

SAKURION implements appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure. Online payments are secured by SSL encryption compliant with PCI-DSS standards.

9. Audience and advertising measurement cookies

This website uses the "Meta pixel", a measurement tool provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). It allows us to measure the reach of our offers, understand which pages interest our visitors, and show them relevant advertising on Facebook and Instagram.

This website also uses Google Analytics 4 and Google Ads conversion tracking, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). They allow us to measure site traffic and to know which Google ads lead to a booking.

Legal basis: your consent (Article 6.1.a GDPR and Article 129 of the Belgian Law of 13 June 2005 on electronic communications). No measurement or advertising cookie is set and no data is sent to Meta or Google before you click "Accept". If you decline, neither the Meta pixel nor the Google tools are loaded. Your choice is kept for six months, then asked again.

Data transmitted if you accept: your IP address, technical information about your browser, the pages viewed on this site and the actions taken (viewing an offer, booking steps, clicking a booking button, WhatsApp or the phone number, signing up to the newsletter, reading a page in depth). When you book online, the booking confirmation (reference, services, amount) is also sent to Meta from our server, with your IP address and browser, so that it is not counted twice. We do not transmit your name, your email address, your phone number, or any health data.

For this collection and transmission, SAKURA GROUP SRL and Meta act as joint controllers; Google acts under its advertising data processing terms. This data may be transferred outside the European Union, in particular to the United States, on the basis of the safeguards provided for by the GDPR (EU–US adequacy decision or standard contractual clauses). Cookie lifetimes: _fbp (Meta) 90 days; _ga and _ga_* (Google Analytics) 13 months; _gcl_au and _gcl_aw (Google Ads) 90 days.

Origin of your visit: a first-party cookie (sk_attr, 90 days) records the campaign that brought you here (link "utm" parameters, referring site) so that we know which campaigns lead to bookings; it contains no advertising identifier unless you have accepted, and is only read by SAKURA GROUP SRL. The sk_consent cookie records your choice.

Withdraw or change your choice: click the "Cookies" link at the bottom of any page. Declining has no effect on access to the site, on our prices, or on your ability to book an appointment. You can also manage your advertising preferences directly in your Facebook or Instagram account settings, and in Google's "My Ad Center".