← Booking

Full Privacy Notice

THE HOME Hair re-creative · Version 2026-10-09

1. Data controller

The individual named below, who operates THE HOME Hair re-creative, with address at Calle Ensenada 138, Col. Hipódromo (Condesa), Alcaldía Cuauhtémoc, C.P. 06100, Ciudad de México, is responsible for processing your personal data. Contact: thehome.hair.recreative@gmail.com.

Data controller: NORITSUGU KAWAMOTO, an individual operating under the business name THE HOME Hair re-creative.

2. Personal data we process

1. Identification and contact: name, phone number, email and Instagram username.

2. Appointment data: date, time, services, price, appointment history, changes, cancellations, no-shows and late arrivals. This includes records kept for the safety of the salon (conduct incidents or takings of property [Clauses 10-bis and 10-ter of the Terms and Conditions] and our internal record of people from whom we no longer accept appointments).

3. Payment data: amount, date and method of payment of the deposit or the service. We do not store your card details; online payments are processed by the payment provider.

4. Hair data: reference photos you send us and technical notes about the service. Any proof or photos you show us (a medical certificate [Clause 8, point 2 of the Terms and Conditions], an official notice from the authorities or a news report about traffic, marches or other events [Clause 8, point 6], or photos showing a broken or damaged item [Clause 10-quater]) we only look at and do not keep a copy of.

5. Sensitive personal data: health information you share with us (for example, allergies, illnesses, pregnancy or scalp conditions). We ask you about health information in person on the day of the service. We record it in your digital client file only with your express written consent, given electronically: the "I agree" button in the email we send to your email address (an authentication mechanism). The separate box on our booking page (unticked and not required to book) is your request for us to send you that button. We save the date and time, the version of the text, the language and the email address from which you agreed. We do not record health information without your written (electronic) consent; if we already have it recorded, we ask for your consent with the same button in the confirmation email of your next appointment and, if you do not give it, we delete it immediately. If you do not give your consent, you can still receive the service; that day we only ask what is necessary and use it only for that day's service. Your client file is confidential: only our staff use it, and it is not shared with anyone.

6. Browsing data on our booking page, collected with Google Analytics (for example, pages visited and device type). Google Analytics uses cookies, which you can turn off in your browser settings.

7. Video surveillance recordings: the salon has video surveillance cameras that record while you are at the salon. The retention period is set out in section "7. Retention periods".

3. Purposes

Purposes necessary for the service:

1. Managing your request and your appointment, and sending you the confirmation and the reminder.

2. Collecting the deposit and the payment for the service, and issuing your tax invoice if you ask for one.

3. Applying our Terms and Conditions, including the cancellation policy and the request and management of deposits under our cancellation policy.

4. Providing the service safely.

5. Answering your questions, complaints and requests.

6. Keeping records to protect the safety of the salon, our clients and our staff (video surveillance images, conduct incidents or takings of property, and our internal record of people from whom we no longer accept appointments; Clauses 10-bis and 10-ter of the Terms and Conditions).

Additional purposes (you may refuse them without affecting your appointment):

1. Sending you a reminder for your next visit. Each email includes a way to stop receiving them.

2. Publishing photos of your hair on our social media, only with your express written consent for each post (for anyone under 18, the consent of their parent or guardian).

3. Understanding how our booking page is used in order to improve it (Google Analytics).

To refuse the additional purposes, write to thehome.hair.recreative@gmail.com.

4. Who we share your data with

1. We use providers that process data on our behalf and under our instructions: Google (email, calendar, spreadsheets and page statistics [Google Analytics]), Meta (Instagram and other Meta messaging services), ManyChat (Instagram and other messaging app messages), Mercado Pago (online payments) and Twilio (automated phone answering service, if used). Some of these providers store data outside Mexico.

2. We do not sell or transfer your data to third parties. We only hand it over in these cases:

5. Your rights (access, rectification, cancellation and objection)

1. You may ask to access, correct or delete your data, object to its use, and withdraw your consent.

2. Send your request to thehome.hair.recreative@gmail.com with your name, the right you want to exercise, a description of the data and a document proving your identity.

3. We will give you our answer within 20 business days and, if your request is granted, carry it out within the following 15 business days.

4. If you disagree with our answer, you may go to the data protection authority, the Ministry of Anti-Corruption and Good Government.

5. Person in charge of your requests: the data controller (section 1), at thehome.hair.recreative@gmail.com.

6. Options to limit the use or disclosure of your data

1. To refuse the additional purposes (section 3) or stop receiving reminder emails, write to thehome.hair.recreative@gmail.com. Each email also includes a way to stop receiving them.

2. You can turn off Google Analytics cookies in your browser settings.

7. Retention periods

1. Appointment and payment data: 5 years from the date on which the related tax returns were filed or should have been filed (Federal Tax Code, Article 30).

2. Records of cancellations, no-shows, late arrivals, conduct incidents or takings of property, and our internal record of people from whom we no longer accept appointments: at most 72 months from the event. They are then deleted.

3. Video surveillance recordings: kept only for as long as necessary; if an incident such as a taking of property occurs, we keep the related part until it is resolved.

4. Other data: only while needed for the purposes; then deleted.

8. Security measures

We protect your data with administrative, technical and physical measures, and only the staff who need it to serve you can use it.

9. Changes to this notice

If we change this notice, we will publish the new version with its date on our booking page and, if the change affects the purposes, we will also tell you by email.

10. Legal basis

Federal Law on the Protection of Personal Data Held by Private Parties, Articles 2 (sections I, VI and VIII: days are business days), 7, 8, 10 (deletion once the purposes end; data on breach of contractual obligations deleted after seventy-two months), 14, 15, 16 (section II: short notice when data is collected by electronic or visual means), 18, 21 to 23, 29 (person in charge of requests), 31 and 36 (sections I, V, VI and VII: transfers provided for by law, for the investigation or administration of justice, to defend a right in legal proceedings, and to fulfil our legal relationship with you); Federal Tax Code, Article 30 (record keeping); Federal Consumer Protection Law, Article 76 Bis, sections I and II.