Privacy Policy

The data controller is BIOHOUSE SRLS, Via Maria Barbara Tosatti 62, 00137 Rome, VAT no. 14599921005, which runs Beauté Facial Spa.

For any question about your data, or to exercise your rights, you can call us on +39 06 6441 0002, message us on WhatsApp at +39 389 092 2544, or write to the address above.

The server hosting the site automatically records some technical data about each visit: IP address, browser type, date and time, page requested. It is needed to run the site and protect it from misuse. The legal basis is our legitimate interest in the security of the site (Art. 6.1.f GDPR). We do not use it to identify or profile you, and it is kept only for the period set by the hosting provider.

Only if you accept it on the cookie banner, the site uses Google's tools (Tag Manager, Analytics and Ads) to count visits statistically and measure how many requests come from our ads. The legal basis is your consent (Art. 6.1.a GDPR), which you can change at any time from the "Cookie preferences" link. The details are in the Cookie Policy.

Through the voucher request form we collect your name, phone number, email if you give it, the skin condition you select and any notes you write.

We use them to create your voucher, with a code and 30 days of validity, send it to you on WhatsApp and by email if you gave it, remind you a few days before it expires, call you back to book your first appointment and recognise the voucher when you use it. Your phone number is also used to apply the rule of one voucher per person. The legal basis is the consent you give by ticking the box on the form (Art. 6.1.a GDPR).

Your request reaches Beauté by email. Beauté's phone also receives a WhatsApp alert, which contains none of your data: it only says a new request has arrived.

Please do not write health information in the notes: if it matters, you will talk about it in person with your skin therapist.

To take part we collect your name, phone number, email and date of birth, together with your choices on the consent boxes. We then record the gift you win, its code, its expiry date and whether you have used it.

We use this data to assign your gift, send it to you on WhatsApp and by email with the button to book, remind you a few days before it expires and let you redeem it at the spa. Your phone number is also used to apply the rule of one spin every 30 days. The legal basis is your request to take part (Art. 6.1.b GDPR) and the consent you give by ticking the required box (Art. 6.1.a GDPR).

We need your date of birth to check that you are at least 14, the minimum age for giving consent online in Italy, and, only if you choose so, to send you birthday wishes.

The second box is optional: if you tick it, we may send you on WhatsApp birthday wishes, some news from Beauté and a message to remind you of us after you have used your gift. The legal basis is your consent (Art. 6.1.a GDPR). You can play without ticking it, and you can withdraw it at any time by replying STOP to one of our messages or by asking us.

The gift is drawn at random by the system, with the odds set for each prize: there is no assessment of you as a person and no profiling.

To protect the wheel from automated use, the system keeps an encrypted version of your IP address for one hour and counts the attempts made from that connection.

Gift cards are paid for on Stripe's page. You enter your card details on Stripe, and they never pass through this site or through us.

From Stripe we receive what we need to prepare and deliver the card: the buyer's name and email, the recipient's name, the message to print and the delivery date. We use them to deliver the gift card and for accounting and tax obligations. The legal basis is the performance of the purchase contract (Art. 6.1.b GDPR) and compliance with legal obligations (Art. 6.1.c GDPR).

If you contact us on WhatsApp, by phone or by email, we use the data you give us only to reply and, if you ask, to book an appointment. The legal basis is your request (Art. 6.1.b GDPR). WhatsApp conversations are also handled by Meta under its own terms of use.

Voucher requests: up to 24 months from the request, if you do not become a client.

Prize wheel: your data, the gifts you won and the related messages are deleted automatically 24 months after your last spin. The log of messages sent is deleted after 12 months.

Optional consent to messages: valid until you withdraw it, and in any case it lapses together with your data 24 months after your last spin.

Gift cards and purchases: 10 years, as required by accounting and tax rules (Art. 2220 of the Italian Civil Code).

If you become our client, the data we need to look after you at the spa is kept for the duration of the relationship and for legal obligations.

Your data is never sold or published. It is seen only by the Beauté staff who need it to look after you, authorised and instructed to keep it confidential.

For some activities we rely on external providers, who process data on our behalf as data processors (Art. 28 GDPR): Hostinger International Ltd (Cyprus), which hosts the site, the mailbox and the database; Meta Platforms Ireland Ltd, for WhatsApp messages; Stripe Payments Europe Ltd (Ireland), for gift card payments; Google Ireland Ltd, for measuring visits and ads, only with your consent.

Meta, Stripe and Google belong to groups based in the United States. If data is transferred outside the European Economic Area, the transfer relies on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.

At any time you can ask us to see the data we hold about you, correct it, delete it, restrict its use, object to its processing and receive it in a machine-readable format (Articles 15-22 GDPR). You can withdraw your consent whenever you like: this does not make what we did before unlawful.

We reply within one month. If you believe your data is being handled improperly, you can lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

Giving us your data is always your choice. Without your name and phone number, however, we cannot call you back about the voucher, and without the data the form asks for you cannot play the wheel. You can always book directly by phone or on WhatsApp.

If we change the way we handle data, we update this page and the date at the top.