Privacy Policy
In short
This is an informational website with one form: the gift card order. The form sends data only when you press the send button yourself — what it passes on and where is described in its own section. There are no other forms, no newsletter and no user accounts. We use no visitor tracking, analytics or advertising pixels. The site sets no cookies, so there is no cookie consent banner. On the Turku pages the free-days calendar uses your browser's temporary session storage — with nothing about you in it; details under Booking.
This notice covers the website only. Data related to treatments is handled by the specialists' own companies. Booking works differently at the two locations: in Turku it happens on our own page, so the booking data is held by us, while in Helsinki it happens in the Timma booking service — both are described below.
What technically happens on the site
Server logs. The site is hosted on Netlify (Netlify, Inc.). Like every web server, it records technical log data: IP address, browser type (user agent), the requested address and the time. These logs are created automatically and are used for keeping the service running, preventing abuse and getting a rough count of visits. The legal basis is legitimate interest (GDPR Article 6(1)(f)). We do not link log data to any individual and do not use it for profiling.
No third-party services while browsing. Every file the site uses — images, font, styles and code libraries — is served from our own server. While you browse, your browser makes no requests to third-party services at all: no content delivery networks, no Google Fonts, no map services — and your IP address is not passed to any of them. There are two kinds of exception, each described in its own section below: submitting the gift card order form, and the Turku pages — the branch front page bbeautiful.fi/en/turku/ and the booking page bbeautiful.fi/en/turku/varaa/ — which run our own booking system: a calendar of free days on the front page, the booking itself on the booking page. On every other page, including the Helsinki pages, the rule holds exactly as stated.
The map is an ordinary image file served from our own server (OpenStreetMap data), not an embedded Google map: looking at the map sends nothing to Google.
Outbound links. The site links to other services — Helsinki booking on Timma, Turku reviews on Timma, directions in Google Maps from the map image, an Instagram account. They open only when you click, and from that point you are on that service's terms and under its privacy policy.
The gift card order form
The site has one form: the gift card order at bbeautiful.fi/en/gift-card. The form sends only what you type into it yourself:
- the order — salon, occasion and amount, plus the names to appear on the card (to and from), if you provide them;
- your contact details — name, email address and, if you wish, a phone number;
- the recipient's email address, if you want the gift card delivered straight to them.
Purpose. The data is used only to process the order: we arrange payment and, once paid, deliver the gift card by email — to you or to the recipient you named. It is not used for marketing and not shared with anyone else. Processing is based on steps prior to entering into a contract (GDPR Article 6(1)(b)) and on the consent you give in the form.
Where the data goes. The order is delivered to the email address of the salon you choose (Helsinki: bbeautiful.helsinki@gmail.com, Turku: bbeautiful.turku@gmail.com) and handled by that salon. The technical relay is the Web3Forms service, which turns the form into an email message and processes the data on our behalf (as a data processor); the service retains submissions for a limited period under its own policy — see the Web3Forms privacy policy. Within the gift card section, submitting this form is the only case where your browser contacts a service outside this site, and it happens only when you press the send button. The other exception on the site as a whole is the Turku pages (the front page and the booking page), described in their own section.
Retention. Order emails are kept until the order is complete — payment agreed and the gift card delivered — and deleted after that. Payment records are kept for as long as accounting law requires.
Booking
Booking works differently at the two locations, so the party responsible for the data differs too.
Helsinki
Booking for Helsinki takes place in the Timma service (Timma Oy), a separate service with its own terms and privacy practices. Your name, phone number, email address and booking details are entered there, not on this website. Please review Timma's privacy policy on their site, timma.fi.
Turku
Booking for Turku takes place on our own page at bbeautiful.fi/en/turku/varaa/. The Turku front page bbeautiful.fi/en/turku/ also shows a calendar of the days with free times; choosing a day takes you to the booking page. The controller for the booking data is Olir Corona Oy (Business ID 1847783-5), Eerikinkatu 37, 20100 Turku, Finland.
What we collect. When you make a booking you give your name, phone number and email address. Alongside these we store the treatment you chose, the specialist and the booked time. The booking form has no free-text field and we do not ask for health information — please do not send any with your booking either.
Why, and on what basis. The data is used to make, confirm and cancel the booking, and to contact you if the time changes — the basis is performance of a contract (GDPR, Article 6(1)(b)). Data belonging to accounting records is kept on the basis of a legal obligation (Article 6(1)(c)). The booking form is protected against automated abuse with Cloudflare Turnstile on the basis of legitimate interest (Article 6(1)(f)).
Retention. Details of a completed booking are kept for 12 months from the visit, and of a cancelled booking for 3 months. Data belonging to accounting records is kept for 6 years from the end of the calendar year in which the accounting period ends, as Finnish accounting law requires.
Who the data reaches. The Turku front page and the booking page load the booking system's files from Netlify and fetch the free times from the Supabase database service; the booking page stores the booking data in the same service. The data is held within the EU (Supabase region eu-central-1, Frankfurt), so there is no transfer outside the EU. Cloudflare Turnstile is used to block spam bookings; it loads only at the contact details step and processes your IP address and technical details of your browser. These services act as processors on our behalf.
Cookies and browser storage. The site sets no cookies on the Turku pages either. The calendar on the Turku front page keeps the month's free-day marks in your browser's session storage (sessionStorage) for five minutes, so they are not fetched again on every page; the data contains nothing about you and is gone when you close the tab. The booking page stores nothing in your browser — not even while you are making a booking.
Your rights to booking data. You can ask to access, correct or erase your booking data at bbeautiful.turku@gmail.com or on +358 50 331 32 32.
The specialists and their companies
Treatments are carried out by independent professionals, each with their own company and their own booking page. Each company is responsible for its own clients' data: booking details and whatever the specialist asks during the treatment — including health information needed for the treatment to be safe (allergies, skin conditions, medication, pregnancy). Those are special categories of personal data under GDPR Article 9, and their processing is based on the client's explicit consent. Each company is an independent controller for them.
This website has no access to that data. To access, correct or erase treatment-related data about yourself, contact the specialist or company you booked with.
Helsinki
MaxAnt Oy (Business ID 3259614-4)
Raatimiehenkatu 1 D, 00140 Helsinki, Finland
Turku
Olir Corona Oy (Business ID 1847783-5)
Eerikinkatu 37, 20100 Turku, Finland
Treatments are carried out by independent professionals through their own companies: Olir Corona Oy, Global International Servises Consulting Oy and Karrar Fysio & BodyFix tmi.
Business IDs for the other specialists' companies will be added to this notice once confirmed. Until then you can get the exact details from the specialist — contact details are on the Turku page.
Your rights
You have the right to access data about yourself, to request its correction or erasure, to withdraw your consent at any time, and to object to or restrict processing. The only personal data collected through this website comes from gift card orders — requests about it can be sent to the salon's email address (contact details below). Other requests go to whoever holds the data: for Turku bookings to us (Olir Corona Oy, contact details above), for Helsinki bookings to Timma or the specialist's company, and for treatment-related data to the specialist's company. You also have the right to lodge a complaint with the supervisory authority (Office of the Data Protection Ombudsman, tietosuoja.fi).
Contact for questions about the website
Helsinki: bbeautiful.helsinki@gmail.com
Turku: bbeautiful.turku@gmail.com
Changes
We may update this notice. The current version is always available on this page.
Last updated: 8 September 2026