Privacy Policy
Read the terms and conditions governing the use of our website and services. Your privacy and security are our priority. This English version is provided for information; in case of discrepancy, the Spanish version prevails.
1. Data controller
- Owner: Giulia Tripodi
- NIF (tax ID): Y9959570D
- Address: Carrer de Vilamarí 102, 4.2, 08015 Barcelona
- Email: giulimage.bcn@gmail.com
- Website: https://giulimage.com
Last updated: 18 October 2026. In accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
2. What data I process and why
- Appointment bookings: name, email, phone, service, date, any notes you write to me and deposit payment details (bank transfer or Bizum receipt). Purpose: to manage your appointment, send you the confirmation and reminder, and invoicing.
- Enquiries by WhatsApp, phone or email: the data you give me, in order to reply.
- Marketing communications: only if you expressly agree; you can unsubscribe at any time.
- Website statistics (Google Analytics 4): only if you accept analytics cookies. See the Cookie policy.
3. Legal basis
Performance of a contract or pre-contractual measures (bookings and enquiries), compliance with legal obligations (tax and accounting) and your consent (marketing communications and analytics cookies).
4. Retention
Client data is kept for as long as the relationship lasts and, afterwards, for the legal periods (generally 6 years for accounting records and 4 years for tax purposes). Enquiries that do not lead to a booking are deleted within 12 months at most.
5. Recipients and data processors
I do not share your data with third parties unless legally required. Providers that process it on my behalf: Hostinger International Ltd. (web hosting and booking database, servers in the EU), Google Ireland Ltd. (Gmail email and, if you accept, Google Analytics), WhatsApp Ireland Ltd. (if you message me on WhatsApp) and BBVA (bank transfers). [PENDING: accountant or tax adviser, if any].
6. International transfers
Some providers (Google, Meta/WhatsApp) may process data in the USA under the EU-US Data Privacy Framework and standard contractual clauses approved by the European Commission.
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent, by writing to giulimage.bcn@gmail.com with a copy of your ID document. If you believe they have not been respected, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Source and accuracy
The data comes from you (booking form, WhatsApp, email or in person). Clients who booked through BUK before the system change have been moved to the in-house system to keep their appointment history.
9. Security
The website uses an encrypted connection (HTTPS), the booking panel is password-protected and access to the data is restricted to the owner.
10. Colour app (photos for virtual try-on)
If you use the client area of the colour app and upload a photo to try a look, that image is processed only to generate the virtual try-on result. It is stored outside public access, with restricted access controls. Default retention: 30 days, with automatic deletion by a scheduled task (or sooner if you use “Delete my photos” or email giulimage.bcn@gmail.com). Nude photos are not allowed; instructions ask for fitted black clothing and explicit consent. If an external AI provider is enabled for try-on, your photos are sent to that processor only for that purpose and are not used to train their models beyond what the service requires. Monthly try-on quota may apply.