Privacy Policy

Important Information

1. Data Controller

Blossom Dreams, Amwaj Center, Jounieh, Lebanon. Contact: blossomdreams.lb@gmail.com

2. Personal Data Collected

  • Name, phone number, email (provided when booking)
  • Appointment details (service, date, time)
  • Technical data: IP address, browser user agent (via server logs)

3. Purpose & Legal Basis

  • Fulfill booking contract (performance of a contract)
  • Send appointment confirmations/reminders (legitimate interest)
  • Security & fraud prevention (legitimate interest)

4. Retention

Booking records are kept for X years (to be defined by business/legal). Logs are kept for 30 days.

5. Data Subject Rights

You may request access, rectification, erasure, restriction, portability, or object to processing by contacting the Data Controller.

6. Third‑Party Processors

Hosting provider, database service, email/SMS gateway (if used). No data is sold.

7. International Transfers

If any processor is outside Lebanon, appropriate safeguards (standard contractual clauses) will be used.

8. Security

HTTPS, hashed admin password, least‑privilege DB user, rate limiting, CSP, HSTS.

9. Changes

Policy updates will be posted here with a revised date.

Back to Home