Privacy policy
Version 1 of 1 November
Who processes your data
The data controller is Ariadna Russu Studio, IDNO —, address: 143 Ștefan cel Mare și Sfânt Blvd. Data questions: [email protected], +373 604 31 804.
We process data under Law No. 133/2011 of the Republic of Moldova on personal data protection and follow its GDPR-aligned updates.
What we collect
- For bookings and orders: name, phone, email, chosen services, visit date and time, your comment.
- In the client card: visit and purchase history, wishes, allergies and contraindications if you shared them.
- In your account: the email used for sign-in links, favourite services.
- Technical data: cookies needed for the site to work and anonymous visit statistics without IP addresses.
We never collect card details: online payments are taken by the bank or payment service on its own secure page.
Why
- to book you with an artist, remind you of the visit and tell you about changes;
- to fulfil your order and issue receipts and gift cards;
- to respect your wishes and keep procedures safe;
- to send news and offers — only if you agreed;
- to meet accounting and tax obligations.
Legal bases: performance of a contract (booking, order), legal obligation (accounting), your consent (newsletter, reviews with photos, optional cookies) and legitimate interest (site security).
How long we keep it
Booking and order data — while you use the studio and for 3 years after your last visit; accounting records — as long as the law requires. You can unsubscribe from the newsletter at any time via the link in every email.
Who we share it with
Only those without whom the service is impossible: the email service, Telegram for notifications, the bank or payment service, hosting and Cloudflare to run the site. Some of them are located outside Moldova; we choose providers with adequate data protection. We never sell data or share it for advertising.
Your rights
You can find out what we store about you, correct it, get a copy, withdraw consent, restrict processing or ask us to delete it. Most of this you can do yourself in your account; anything else by email to [email protected]. We reply within 15 days. If you believe your rights were violated, you can contact the National Center for Personal Data Protection (datepersonale.md).
Security
Only staff who need client data for their work can access it, and every access is logged. Data in transit is encrypted, staff sign-in uses two-factor verification, and backups are stored encrypted.
Changes
The current version is always on this page. We will announce significant changes on the site and by email to subscribed clients.