Privacy policy

This policy explains how we process your personal data when you visit yourwayhair.com, buy a lesson, create an account, sign up for the free lesson or write to us. We process personal data in line with Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) and Slovak Act No. 18/2018 Coll. on the Protection of Personal Data.

Effective from 5 October 2026.

1. Who is responsible for your data

The controller of your personal data is:

Samuel Pokrivčák – YourWay Hair
Sole trader registered in the Trade Register of the District Office Stará Ľubovňa, no. 710-20146
Business address: Hraničné 96, 065 22 Hraničné, Slovakia
IČO: 56527951 · DIČ: 1130002302
Email: [email protected]

We have not appointed a data protection officer, as the law does not require one for our business. For anything about your data, write to the email above.

2. Buying a lesson

What we process: name, email, billing address, company details (if you buy as a company), what you bought, price, date and payment status. We never see or store your full card number; the card payment is handled by the payment provider.

Why and on what legal basis: to complete your order, give you access to the lessons and send you an invoice. This is necessary to perform the contract with you (Art. 6(1)(b) GDPR). Keeping invoices and accounting records is our legal obligation (Art. 6(1)(c) GDPR) under Act No. 431/2002 Coll. on Accounting.

How long: invoices and accounting records for 10 years after the year they relate to. Other order data for as long as you have access to the lessons and then until claims from the contract expire (usually up to 4 years).

3. Your account and access to lessons

What we process: name, email, username, password (stored only in encrypted, hashed form), the lessons you own, and technical login data such as date, time and IP address.

Why and on what legal basis: to let you sign in and watch the lessons you bought (Art. 6(1)(b) GDPR), and to protect accounts against misuse (our legitimate interest, Art. 6(1)(f) GDPR).

How long: while your account exists. You can ask us to delete your account at any time; you will then lose access to the lessons. Invoices are kept as described in section 2.

4. Free lesson and newsletter

What we process: email, name (if you enter it), and whether you open our emails and click the links in them.

Why and on what legal basis: to send you the free lesson and then occasional emails with tips and offers, based on your consent (Art. 6(1)(a) GDPR). If you are already our customer, we may send you emails about similar lessons based on our legitimate interest (Art. 6(1)(f) GDPR and § 116(15) of Act No. 452/2021 Coll. on Electronic Communications); you can refuse this at any time.

How long: until you unsubscribe or withdraw your consent. Every email has an unsubscribe link, or you can write to us. Withdrawing consent does not affect processing that happened before.

5. Contact form and emails

What we process: name, email and the content of your message, plus anything else you choose to send us.

Why and on what legal basis: to answer your question and help with your order or access. This is our legitimate interest in communicating with you (Art. 6(1)(f) GDPR), or a step before or during a contract (Art. 6(1)(b) GDPR).

How long: as long as needed to resolve your request, and then no longer than 2 years.

6. Website operation, security, analytics and cookies

Operation and security: when you visit the website, technical data such as your IP address, browser type and time of access are processed by our hosting provider and by Cloudflare, which protects the website and makes it load faster. Form submissions are checked for spam (Akismet). Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR). This data is kept only as long as needed for security.

Analytics and marketing: we use Google Analytics and the Meta (Facebook) Pixel through Google Tag Manager only if you allow them in the cookie banner (Art. 6(1)(a) GDPR and § 109(8) of Act No. 452/2021 Coll.). You can change your choice at any time.

Videos: previews are played from YouTube and paid lessons from Vimeo. These services process your IP address and device data when a video loads or plays.

Details of every cookie, its purpose and how long it lasts are in our cookie policy.

7. Who receives your data

We do not sell your personal data. We share it only with providers who help us run the business, and only as much as they need:

• FAPI – Firma 2.0 s.r.o., Czech Republic: order forms, invoicing and access to lessons (FAPI Member).
• The card payment provider connected to FAPI: processing your payment.
• Ecomail.cz s.r.o., Czech Republic: sending the free lesson and newsletters.
• Vimeo.com, Inc., USA: hosting the lesson videos.
• Google Ireland Limited / Google LLC: Google Analytics, Google Tag Manager, Google Fonts, YouTube and Gmail (our mailbox).
• Meta Platforms Ireland Limited: the Meta (Facebook) Pixel, only with your consent.
• Cloudflare, Inc.: website security and delivery.
• Automattic Inc. (Akismet): spam filtering of form submissions.
• Our web hosting provider: hosting of the website and its database.
• An accountant or tax advisor, if we use one: bookkeeping and tax returns.

We may also have to give data to public authorities (for example the tax office or courts) when the law requires it.

8. Transfers outside the EU

Some providers (Google, Meta, Vimeo, Cloudflare, Automattic) may process data in the United States. Such transfers rely on the European Commission’s adequacy decision for the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on the Standard Contractual Clauses approved by the European Commission.

9. Your rights

You have the right to:

• get access to your data and a copy of it,
• have incorrect data corrected,
• have your data deleted, unless we must keep it by law,
• restrict processing,
• receive your data in a portable format,
• object to processing based on our legitimate interest, and to direct marketing at any time,
• withdraw your consent at any time.

Write to [email protected]. We will reply within one month. We do not make decisions about you based solely on automated processing.

If you think we process your data unlawfully, you can file a complaint with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR), Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk, or with the authority in your EU country.

10. Do you have to give us your data?

Data needed for an order (name, email, billing details) is required to conclude the contract; without it we cannot sell you a lesson. Signing up for the newsletter and allowing analytics and marketing cookies is voluntary. Our lessons are not intended for children under 16.

11. How we protect your data

The website uses an encrypted HTTPS connection, passwords are stored only in hashed form, access to the administration is limited to the people who run YourWay Hair, and card payments are processed by the payment provider, not on our server.

12. Changes to this policy

We may update this policy when our services or the law change. The current version is always on this page, with the date it took effect. For important changes, we will let customers know by email.