1. General Provisions
1.1. This Personal Data Protection and Privacy Policy (hereinafter – the Policy) governs the principles and procedures for the management and processing of personal data carried out by TAJI Beauty House, operating in Vilnius (hereinafter – the Data Controller).
1.2. For the purposes of this Policy, a Data Subject is considered to be a client or any other natural person whose personal data is processed by the Data Controller.
1.3. A Client is a person who has entered into an agreement with the Data Controller for the provision of beauty, wellness, or related services.
1.4. The Data Controller follows the fundamental principles of personal data processing: lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and accountability.
1.5. When using third-party services (e.g., visiting TAJI Beauty House profiles on Facebook, Instagram, or using online booking platforms), the privacy policies of those third parties apply.
1.6. This Policy has been prepared in accordance with the EU General Data Protection Regulation (GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other applicable legal acts.
2. Collection, Processing, and Storage of Data
2.1. Personal data is processed on the basis of contract performance and/or the consent of the data subject.
2.2. If you do not agree with this Policy, we recommend that you do not use the website or the services provided.
2.3. Personal data may be collected when:
-
filling in registration or contact forms on the website or social networks;
-
communicating by email, phone, or in person;
-
booking or receiving beauty and wellness services.
2.4. The data subject is responsible for providing accurate and correct data and must update it if changes occur.
3. Processing of Client Data
3.1. The processed data may include: name, surname, contact details (phone number, email address), date of birth, service booking information, payment details, and other information voluntarily provided by the client.
3.2. If services are provided to a minor, the personal data of parents or legal guardians may also be processed.
3.3. Legal grounds for processing: performance of a contract, legal obligation, legitimate interest, or consent (e.g., for marketing or publication purposes).
4. Data for Information and Appointment Reminders
4.1. Processed data: name, surname, email address, phone number.
4.2. Legal basis: legitimate interest to inform clients about appointments, schedule changes, or important service-related information.
5. Data for Marketing and Communication Purposes
5.1. Processed data: name, surname, email address, phone number.
5.2. Legal basis: the data subject’s consent to receive news, offers, or invitations.
5.3. The data subject may withdraw consent at any time by contacting TAJI Beauty House or using the unsubscribe option provided in communications.
6. Data Retention Periods
6.1. Personal data is stored only for as long as necessary to achieve the purposes for which it was collected, but no longer than permitted by applicable laws.
6.2. Client service data is stored for up to 3 years after the last service is provided.
6.3. Marketing data is stored for up to 3 years from the date consent is given.
6.4. Accounting and financial data is stored in accordance with Lithuanian legal requirements (up to 10 years).
7. Rights of the Data Subject
7.1. The data subject has the right to:
-
access their personal data;
-
request correction, deletion, or restriction of processing;
-
withdraw consent at any time;
-
object to the processing of data for direct marketing purposes.
7.2. Requests regarding personal data may be submitted by email or in writing to TAJI Beauty House.
7.3. If you believe that your rights have been violated, you have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania (www.vdai.lrv.lt).
8. Final Provisions
8.1. The laws of the Republic of Lithuania apply to this Policy.
8.2. The Data Controller is not responsible for the content or actions of third-party websites linked from TAJI Beauty House platforms.
8.3. This Policy may be updated periodically, and any changes will be published on the website.
8.4. By using the website or providing personal data, the data subject agrees to the terms of this Policy.
9. Cookies
9.1. The TAJI Beauty House website uses cookies to ensure proper website functionality and improve user experience, including:
-
_ga – Google Analytics cookie for statistical purposes (valid for 2 years);
-
_gid – Google Analytics cookie for statistical purposes (valid for 1 day);
-
PHPSESSID – session cookie required for website functionality;
-
_hjid – Hotjar cookie for user identification.
9.2. By using the website, the user agrees to the use of cookies. Consent can be withdrawn at any time by changing browser settings.
Data Controller:
TAJI Beauty House
Vilnius, Lithuania

