Privacy Policy

AI Hair Masterclass is an international digital education service created by Christos Michailidis and operated by Χρήστος Μιχαηλίδης (Christos Michailidis), trading as AI Hair Masterclass, Φυσικό Πρόσωπο / Individual (sole trader), Eleftheriou Venizelou 104, Nea Erythrea 146 71, Attica, Greece, Greece.

HairSkillsPro and AI Hair Masterclass are distinct brands and digital properties operated by Χρήστος Μιχαηλίδης (Christos Michailidis). AI Hair Masterclass is the dedicated professional education platform, while HairSkillsPro is the connected editorial, inspiration and professional-hair ecosystem.

The course and The M³ Method™ were created by Christos Michailidis. The English name identifies the founder and course creator; the legal operator, data controller and invoice issuer is Χρήστος Μιχαηλίδης.

No individual is described as a Data Protection Officer, because none has been formally appointed.

This policy covers personal data relating to:

• Public website visitors
• Registered users and students
• Corporate education clients and their nominated participants
• Newsletter subscribers
• Contact-form and support users
• Event participants
• Prospective customers and applicants
• Purchasers and invoice recipients
• Testimonial contributors
• Models and creative collaborators, where relevant

We collect only the categories of data that the platform actually uses.

Identity data: name, username, account identifier, professional role, company or salon, country.

Contact data: email address, telephone number when you supply it, business contact information, billing address.

Account data: login history, account status, purchased package, access role, preferences, authentication identifiers.

Purchase data: product purchased, amount, currency, VAT information, invoice information, payment status, refund status, transaction identifiers.

AI Hair Masterclass does not receive or store full payment-card details.

Learning data: lesson progress, completion, assignments, notes, saved resources, certificates and support requests.

Communication data: contact forms, support messages, emails, feedback, survey responses and corporate enquiries.

Marketing data: newsletter consent, campaign interaction, communication preferences, consent history.

Technical data: IP address, browser, device, operating system, referrer, session information, security logs, cookie identifiers, and approximate location derived from IP where such derivation is actually used.

User-submitted content: assignments, uploaded files, images, videos, prompts, comments, feedback and testimonials.

• Account registration
• Checkout and order processing
• Website forms, including contact and corporate enquiry forms
• Course participation and account usage
• Cookies and similar technologies, subject to your consent choices
• Support conversations
• Newsletter subscription
• Corporate enquiries
• Direct submission by you
• Approved third-party integrations listed in the processor table

We do not rely on consent where another legal basis is required, and we never bundle marketing consent with the delivery of the service you purchased.

To deliver what you purchase, we process personal data in order to:

• Create your account and authenticate you
• Give access to the lessons and resources included in your package
• Track lesson progress and completion
• Provide downloadable resources and prompt templates
• Issue certificates of completion
• Provide support
• Enforce account security and detect unauthorised sharing

Payment processing will be provided through the platform's approved payment provider when enrolment opens. Details of the provider, including how it handles payment data, taxes, invoices and refunds, will be published here before any purchase is possible.

AI Hair Masterclass does not receive or store full payment-card details.

The educational service itself is provided by Χρήστος Μιχαηλίδης (Christos Michailidis), which remains the controller of your account and learning data.

• When enrolment opens, the approved payment provider will collect the billing and tax information needed to complete a purchase and issue an invoice or receipt.
• AI Hair Masterclass receives confirmation of payment status, amount, currency, product purchased, a transaction reference and a customer reference so that access can be granted, maintained or withdrawn.
• Invoices and tax documentation are retained for the period required by applicable Greek tax law.
• Payment and order data may be used by the payment provider and by AI Hair Masterclass for fraud prevention and chargeback handling.
• Refunds are processed through the approved payment process using the original order and payment references, and access is adjusted accordingly.
• The payment provider's handling of payment data will be described here when enrolment opens.

• Marketing email is always optional and never required in order to purchase.
• Service messages about your account, purchase, access and live sessions are separate from marketing and are sent as part of the contract.
• You can withdraw marketing consent at any time using the unsubscribe link or by contacting us.
• Unsubscribing does not affect your account or your purchased access.
• No marketing checkbox is preselected anywhere on this platform.

Cookies and similar technologies are described in the Cookie Policy. Optional analytics and marketing technologies remain inactive until you give valid consent where consent is required, and you can change or withdraw your choices at any time through Cookie Settings in the footer.

We share personal data only with service providers acting on our documented instructions, and with professional advisers or authorities where legally required.

Payment processing will be provided through the platform's approved payment provider when enrolment opens.

Other processor categories used to operate the platform are: hosting, database and file storage, authentication, transactional email, email marketing, analytics, customer support, video hosting, scheduling, accounting, legal advisers, security and cloud storage. A provider is named in this policy once its use, processing location and transfer mechanism have been confirmed.

Some providers may process personal data outside the European Economic Area. Where that happens, we rely on an appropriate safeguard, which may include:

• An adequacy decision of the European Commission
• Standard Contractual Clauses
• Supplementary technical and organisational safeguards where necessary

The location and transfer safeguards used for payment data will be published when the payment provider is confirmed.

We do not claim that all data stays exclusively within the European Union. Where a provider processes data elsewhere, one of the safeguards above applies.

We keep personal data only for as long as necessary for the purposes described in this policy, or for as long as the law requires. Data is never kept forever.

Subject to the conditions and limitations of applicable data-protection law, you have the right to:

• Be informed about how your data is used
• Access your personal data
• Have inaccurate data corrected
• Request erasure
• Request restriction of processing
• Receive your data in a portable format
• Object to processing based on legitimate interests
• Withdraw consent at any time, without affecting processing already carried out
• Lodge a complaint with a supervisory authority
• Rights concerning qualifying automated decision-making

To exercise a right, contact privacy@aihairmasterclass.com. Some rights may be limited where the law allows, for example where we must keep tax records.

If you are in Greece, you may lodge a complaint with the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα) at www.dpa.gr. You may also complain to the supervisory authority of your country of residence or workplace within the EU.

We apply appropriate technical and organisational measures designed to protect personal data, including access control, role-based permissions, row-level database security, encrypted transport and restricted administrative access.

No online service can guarantee absolute security, and we do not claim that your information is completely secure.

• We investigate suspected incidents internally and contain them as quickly as reasonably possible.
• We assess the risk to affected individuals and our legal obligations.
• Where required, we notify the competent supervisory authority within the applicable deadline.
• Where a breach is likely to result in a high risk to your rights, we notify you.

The platform is intended for adults and professional learners. Purchasers must be at least 18 years old, or otherwise have legally valid authorisation to enter into the contract.

We do not knowingly collect children's personal data without an appropriate legal basis and safeguards. If you believe a child has provided personal data, contact us so that we can review it.

The platform currently uses limited automation: access to lessons is granted automatically based on the package purchased, and progress and completion are calculated automatically. Security and fraud checks may also be partly automated.

The course teaches the use of third-party AI tools. Where you choose to use such tools, they operate under their own terms and privacy policies.

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing, unless this is clearly disclosed to you in advance and supported by a valid legal basis.

We do not currently use analytics-based personalisation, recommendation or profiling. If this changes, this policy is updated before such processing begins.

We may update this policy. The version number, effective date and last-updated date at the top of the page always reflect the current text. Where a change is material, we notify registered users by email or by an in-platform notice before it takes effect.

All requests are handled by Χρήστος Μιχαηλίδης (Christos Michailidis) through one central contact point.

A dedicated email address for privacy, refund, complaint and legal notices may be introduced later. Any change is published here without altering the substance of this policy.