Privacy policy
We explain what data we collect on this website, for what purpose and what rights you have.
Last updated: 7 October 2026
1. Data controller
The controller of your personal data is Natalia Ratushna, prowadząca działalność gospodarczą pod nazwą Laser Space, ul. Szczytnicka 30E, 50-382 Wrocław, NIP (tax ID) 899-295-91-05.
Contact for personal data matters:
- WhatsApp / phone: +48 506 876 527
- ul. Szczytnicka 30E, Wrocław — +48 506 876 527
- ul. Starowiślna 49, Kraków — +48 780 501 054
2. What data we process and where it comes from
The website does not require an account. We only process data you give us yourself:
- your name and, optionally, your phone number — entered in the booking or consultation form;
- the selected studio, procedure or epilation areas and your preferred time;
- the content of messages and the phone number you use to message us on WhatsApp;
- if you book through our Telegram bot: your name, the phone number you share with us, your Telegram ID and username, the selected procedure and time, and your rating of the visit.
- if you buy a gift card online: your name, e-mail, the gift card amount and, optionally, the recipient’s name and a greeting; card or bank details are processed only by the payment provider Stripe.
The form on the website does not store this data on our server: it prepares a ready message that you send yourself on WhatsApp. We receive the data only when you send that message.
Before a procedure the specialist may ask about contraindications (e.g. pregnancy, medications). This is health data — we process it only with your explicit consent and only to perform the procedure safely.
3. Purposes and legal bases
- booking a visit and contacting you about it — Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract);
- answering questions and consultations — Art. 6(1)(a) GDPR (your consent);
- performing the procedure with regard to contraindications — Art. 9(2)(a) GDPR (explicit consent);
- accounting and tax obligations — Art. 6(1)(c) GDPR;
- website security and pursuing claims — Art. 6(1)(f) GDPR (legitimate interest);
- visit reminders and a request to rate your visit on Telegram — Art. 6(1)(f) GDPR (legitimate interest: customer service and service quality); you can stop the bot at any time.
Providing data is voluntary, but without a name and a way to contact you we cannot book a visit.
4. Recipients of data
We display client reviews from Google on the website — they come from the public Laser Space profile on Google Maps and are shown with the author name given on Google.
Data may be shared only with entities that help us run our business:
- WhatsApp Ireland Limited — the messenger you use to send your request (in line with the WhatsApp privacy policy);
- Booksy — if you choose to book through our Booksy profile, Booksy also processes the data under its own terms;
- Telegram — the messenger our bot runs on (in line with the Telegram privacy policy);
- Google Ireland Limited — Google Calendar, where we record visits booked through the bot;
- Stripe Payments Europe Ltd. — the online payment provider for gift cards (card, BLIK, Przelewy24);
- the website hosting provider — for technical server logs (e.g. IP address);
- our accounting office — for accounting documents.
WhatsApp, Telegram and Google may transfer data outside the European Economic Area on the basis of mechanisms provided for in the GDPR (e.g. standard contractual clauses).
5. How long we keep data
- booking correspondence — up to 12 months from the last contact, unless you become our client;
- client data and the procedure record — for as long as you use our services and until the limitation period for claims expires;
- accounting documents — for the period required by tax law;
- data processed on the basis of consent — until consent is withdrawn.
6. Your rights
You have the right to access your data, rectify it, erase it or restrict its processing, to data portability, to object, and to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).
To exercise these rights, message us on WhatsApp or call us (details in section 1).
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).
We do not make automated decisions about you and do not profile you.
8. Changes to this policy
We will announce significant changes to this policy on this page, together with the date of the last update.