Privacy Policy

Dawn Hair Design (“Dawn”, “we”, “us”, “our”) operates a boutique hair, grooming and nail salon located inside the David Kempinski Hotel, Tel Aviv. This Privacy Policy explains how we collect, use, disclose and safeguard personal information collected through our website dawnsalon.lovable.app, our booking channels, and in the course of providing our services.

We are committed to processing personal information in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”), the UK GDPR where relevant, and Israel’s Protection of Privacy Law, 5741–1981 and its regulations.

1. Who is the controller

The controller of your personal information is Dawn Hair Design, located at the David Kempinski Hotel, Level −1, Tel Aviv, Israel. For any privacy matter you can reach us at concierge.telaviv@kempinski.com or +972 74 766 2733.

2. Information we collect

Information you give us

• Identity and contact details (full name, phone, email, language preference).
• Booking details (services requested, stylist preference, date and time, hotel guest status, room number where applicable).
• Communications you send us through WhatsApp, email, the concierge desk or contact forms.
• Preferences and notes shared during your visit (e.g. allergies, sensitivities, hair history) when relevant to service delivery.
• Payment information processed by the hotel or our payment provider — we do not store full card numbers on our website.

Information collected automatically

• Technical data: IP address, device and browser type, operating system, language.
• Usage data: pages viewed, referring URL, time on page, links clicked.
• Cookies and similar technologies (see our Cookie Policy).

Information from third parties

• The Kempinski Tel Aviv concierge when a reservation is made on your behalf.
• Booking platforms and review sites where you have voluntarily submitted information.

3. How we use your information

• To confirm, manage and deliver appointments and services.
• To respond to enquiries received by phone, email, WhatsApp or web form.
• To send transactional messages (reminders, confirmations, changes).
• To send marketing communications, where you have opted in, and to allow you to opt out at any time.
• To improve the website, our services and the guest experience through analytics.
• To comply with legal, tax, accounting and regulatory obligations.
• To defend or establish legal claims and to prevent fraud or abuse.

4. Lawful basis for processing (GDPR)

• Contract — to provide the salon services you book.
• Consent — for marketing emails, non-essential cookies and any sensitive information you choose to share (e.g. allergies).
• Legitimate interests — to operate, secure and improve our website and services, in a manner that respects your rights.
• Legal obligation — to comply with applicable accounting, consumer-protection and privacy laws.

5. Cookies, analytics and tracking

Our website uses cookies and similar technologies to make the site work, to remember preferences and — with your consent — to measure traffic and improve our marketing.

We may use Google Analytics (Google Ireland Ltd.) to understand how visitors use the site, and Meta Pixel (Meta Platforms Ireland Ltd.) for audience measurement and marketing. We may also embed booking and scheduling widgets (for example Calendly-style integrations) on certain pages. Non-essential cookies and scripts are blocked until you accept them via our cookie banner. For full details see our Cookie Policy.

6. Sharing your information

We share personal information only with parties who help us deliver our services:

• The David Kempinski Hotel concierge and reservations team, for in-house bookings.
• IT, hosting, email and analytics providers acting as our processors.
• Payment providers and accountants to process and record transactions.
• Professional advisors (legal, accounting, insurance) where strictly necessary.
• Public authorities where required by law or to defend legal claims.

We do not sell personal information.

7. International data transfers

Some of our service providers are located outside Israel and the European Economic Area (for example in the United States or Ireland). Where personal data is transferred outside the EEA, we rely on adequacy decisions or appropriate safeguards such as the European Commission’s Standard Contractual Clauses. Transfers from Israel are conducted in line with the Israeli Privacy Protection Regulations (Transfer of Data to Databases Abroad), 5761–2001.

8. Data retention

We retain personal information only as long as needed for the purposes set out above. Booking and client records are typically retained for up to seven (7) years to comply with Israeli tax and commercial recordkeeping obligations. Marketing data is retained until you withdraw consent. Anonymous analytics data may be retained for longer.

9. Your rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data where there is no overriding legal basis to keep it.
• Restrict or object to certain processing, including direct marketing.
• Withdraw consent at any time, without affecting prior lawful processing.
• Receive your data in a portable format, where applicable.
• Lodge a complaint with a supervisory authority — the Israeli Privacy Protection Authority, or your local EU/EEA Data Protection Authority.

10. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls and vetted processors — to protect personal information against unauthorised access, alteration, disclosure or destruction. No system is perfectly secure; we ask you to use strong passwords and protect your devices.

11. Children

Our website is not directed at children under sixteen (16). We do not knowingly collect personal information from children. Minors visiting the salon are received with the consent and presence of a parent or guardian.

12. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the latest version. Material changes will be communicated through the website or by email where appropriate.

13. Submit a privacy request

To exercise any of your rights — including access, correction or deletion — please use the form below or write to concierge.telaviv@kempinski.com. We respond within thirty (30) days.