Privacy Policy

AI Hair Masterclass is an international digital education service created by Christos Michailidis and operated by Χρήστος Μιχαηλίδης (Christos Michailidis), trading as AI Hair Masterclass, Greece.

HairSkillsPro and AI Hair Masterclass are distinct brands and digital properties operated by Χρήστος Μιχαηλίδης (Christos Michailidis). AI Hair Masterclass is the dedicated professional education platform, while HairSkillsPro is the connected editorial, inspiration and professional-hair ecosystem.

The course and The M³ Method™ were created by Christos Michailidis. The English name identifies the founder and course creator; the legal operator, data controller and invoice issuer is Χρήστος Μιχαηλίδης.

No individual is described as a Data Protection Officer, because none has been formally appointed.

This policy covers personal data relating to:

• Public website visitors
• Registered users and students
• Live implementation and VIP participants
• Corporate education clients and their nominated participants
• Newsletter subscribers
• Contact-form and support users
• Event participants
• Prospective customers and applicants
• Purchasers and invoice recipients
• Testimonial contributors
• Models and creative collaborators, where relevant

We collect only the categories of data that the platform actually uses.

Identity data: name, username, account identifier, professional role, company or salon, country.

Contact data: email address, telephone number when you supply it, business contact information, billing address.

Account data: login history, account status, purchased package, access role, preferences, authentication identifiers.

Purchase data: product purchased, amount, currency, VAT information, invoice information, payment status, refund status, transaction identifiers.

Full payment-card details are normally processed directly by the payment provider. The platform does not store full card numbers unless a specific, disclosed and lawful need is later confirmed.

Learning data: lesson progress, completion, assignments, notes, saved resources, certificates, live-session registrations, support requests.

Communication data: contact forms, support messages, emails, feedback, survey responses, VIP applications, corporate enquiries.

Marketing data: newsletter consent, campaign interaction, communication preferences, consent history.

Technical data: IP address, browser, device, operating system, referrer, session information, security logs, cookie identifiers, and approximate location derived from IP where such derivation is actually used.

User-submitted content: assignments, uploaded files, images, videos, prompts, comments, feedback and testimonials.

• Account registration
• Checkout and order processing
• Website forms, including contact and corporate enquiry forms
• Course participation and account usage
• Cookies and similar technologies, subject to your consent choices
• Support conversations
• Live and VIP sessions
• Newsletter subscription
• VIP applications and corporate enquiries
• Direct submission by you
• Approved third-party integrations listed in the processor table

We do not rely on consent where another legal basis is required, and we never bundle marketing consent with the delivery of the service you purchased.

To deliver what you purchase, we process personal data in order to:

• Create your account and authenticate you
• Give access to the lessons and resources included in your package
• Track lesson progress and completion
• Provide downloadable resources and prompt templates
• Issue certificates of completion
• Manage live implementation sessions and VIP bookings
• Provide support
• Enforce account security and detect unauthorised sharing

Invoices are issued by Χρήστος Μιχαηλίδης (Christos Michailidis). Payments will be processed by an external payment provider, which is not yet configured; card payments are not currently activated on this platform.

• The platform receives confirmation of payment status, amount, currency and a transaction reference.
• Invoices and tax documentation are retained for the period required by Greek tax law.
• Payment and order data may be used for fraud prevention and chargeback handling.
• Refund administration uses the original order and payment references.

• Marketing email is always optional and never required in order to purchase.
• Service messages about your account, purchase, access and live sessions are separate from marketing and are sent as part of the contract.
• You can withdraw marketing consent at any time using the unsubscribe link or by contacting us.
• Unsubscribing does not affect your account or your purchased access.
• No marketing checkbox is preselected anywhere on this platform.

Cookies and similar technologies are described in the Cookie Policy. Optional analytics and marketing technologies remain inactive until you give valid consent where consent is required, and you can change or withdraw your choices at any time through Cookie Settings in the footer.

We share personal data only with service providers acting on our documented instructions, and with professional advisers or authorities where legally required. The administrator-managed processor register is maintained in the private administration area and published here once every entry is verified.

Processor categories: hosting, database, authentication, payments, transactional email, email marketing, analytics, customer support, video hosting, scheduling, accounting, legal advisers, security and cloud storage.

No provider is publicly named in this policy until its use, processing location and transfer mechanism have been confirmed.

Some providers may process personal data outside the European Economic Area. Where that happens, we rely on an appropriate safeguard, which may include:

• An adequacy decision of the European Commission
• Standard Contractual Clauses
• Supplementary technical and organisational safeguards where necessary

Transfer mechanism per provider: [TRANSFER MECHANISM PER PROVIDER].

We do not claim that data stays exclusively within the EU. The actual processing locations must be verified per provider before publication.

We keep personal data only for as long as necessary for the purposes described in this policy, or for as long as the law requires. Data is never kept forever.

Subject to the conditions and limitations of applicable data-protection law, you have the right to:

• Be informed about how your data is used
• Access your personal data
• Have inaccurate data corrected
• Request erasure
• Request restriction of processing
• Receive your data in a portable format
• Object to processing based on legitimate interests
• Withdraw consent at any time, without affecting processing already carried out
• Lodge a complaint with a supervisory authority
• Rights concerning qualifying automated decision-making

To exercise a right, contact privacy@aihairmasterclass.com. Some rights may be limited where the law allows, for example where we must keep tax records.

If you are in Greece, you may lodge a complaint with the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα) at www.dpa.gr. You may also complain to the supervisory authority of your country of residence or workplace within the EU.

We apply appropriate technical and organisational measures designed to protect personal data, including access control, role-based permissions, row-level database security, encrypted transport and restricted administrative access.

No online service can guarantee absolute security, and we do not claim that your information is completely secure.

• We investigate suspected incidents internally and contain them as quickly as reasonably possible.
• We assess the risk to affected individuals and our legal obligations.
• Where required, we notify the competent supervisory authority within the applicable deadline.
• Where a breach is likely to result in a high risk to your rights, we notify you.

The platform is intended for adults and professional learners. Purchasers must be at least 18 years old, or otherwise have legally valid authorisation to enter into the contract.

We do not knowingly collect children's personal data without an appropriate legal basis and safeguards. If you believe a child has provided personal data, contact us so that we can review it.

The platform currently uses limited automation: access to lessons is granted automatically based on the package purchased, and progress and completion are calculated automatically. Security and fraud checks may also be partly automated.

The course teaches the use of third-party AI tools. Where you choose to use such tools, they operate under their own terms and privacy policies.

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing, unless this is clearly disclosed to you in advance and supported by a valid legal basis.

Confirm before publication whether analytics-based personalisation, recommendation or profiling is enabled.

We may update this policy. The version number, effective date and last-updated date at the top of the page always reflect the current text. Where a change is material, we notify registered users by email or by an in-platform notice before it takes effect.

All requests are handled by Χρήστος Μιχαηλίδης (Christos Michailidis) through one central contact point.

A dedicated email address for privacy, refund, complaint and legal notices may be introduced later. Any change is published here without altering the substance of this policy.