Privacy policy
General provisions
This policy explains how the salon EPIL Studio Comrat (the “Controller”, “we”) processes personal data of website visitors and clients. It is prepared in accordance with: Law of the Republic of Moldova No. 195/2024 on personal data protection (in force since 23 August 2026).
Data controller: EPIL Studio Comrat, Str. Tretiacov 22, Comrat, Moldova; e-mail: epilstudio.comrat@gmail.com; tel.: +373 796 88 161.
Last updated: 19 October 2026.
What data we process
| Category | Data | Source |
|---|---|---|
| Enquiries and bookings | name, phone number, messenger/social network username, e-mail address, message text, chosen service, date and time of the visit | provided by you — by phone, WhatsApp, Telegram, Instagram, Facebook, TikTok, e-mail or in person at the salon |
| Health data | information about contraindications, allergies, pregnancy, skin condition and other details needed to perform a procedure safely | provided by you in person to the specialist during the consultation (the website does not collect or require such data) |
| Technical data | IP address, browser and device type, language, pages visited, date and time of request, server technical logs | automatically when you visit the website |
| Cookies and analytics | cookie identifiers, information about actions on the website (clicks, scrolling, visit duration) | automatically — only after your consent in the cookie banner |
The website has no contact, sign-up or account forms and no online payment: we do not collect data through website forms. You can reach us through the contact details published on the website.
Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Replying to enquiries, arranging and confirming bookings | your consent and/or steps taken at your request before entering into a contract |
| Providing services, performing the contract | performance of a contract with you |
| Safe performance of the procedure (health data) | your explicit consent |
| Visit statistics and improving the website (Google Tag Manager, Microsoft Clarity) | your consent given in the cookie banner |
| Security and stable operation of the website | legitimate interest of the Controller |
| Accounting and tax records, compliance with the law | compliance with a legal obligation |
We do not make decisions producing legal effects on you based solely on automated processing (including profiling), and we do not use your data for marketing messages without separate consent.
Cookies and analytics
Necessary cookies (language and theme) work without consent. Analytics technologies are enabled only after you click “Accept” in the cookie banner and are disabled if you withdraw consent. See the Cookie Policy for details.
Recipients and transfers abroad
Only salon staff who need the data for their work have access to it. Data may be processed by the following providers (as far as needed for their services):
- the website hosting provider and technical support;
- Google (Google Tag Manager, Google Maps) and Microsoft (Clarity) — after your analytics consent / when the map is loaded;
- WhatsApp and Instagram/Facebook (Meta), Telegram, TikTok — if you contact us through these services yourself (their terms and policies apply);
- public authorities — in cases and in the manner provided by law.
Some of these providers are located or process data outside the Republic of Moldova (including the EU and the USA). Transfers are made on the grounds and with the safeguards provided by law, or with your consent. We do not sell personal data.
Retention periods
- enquiries and correspondence without a subsequent booking — as long as needed to answer the enquiry;
- client data, bookings and procedure records — for the duration of services and then as long as needed for the purposes of processing or as the law requires;
- health data — only as long as needed to provide services safely, or until consent is withdrawn;
- accounting documents — for the periods set by law;
- analytics data — according to the settings of the respective services;
- your cookie banner choice — in your browser until you delete it.
After the period expires, data is deleted or anonymised.
Security
We apply organisational and technical safeguards: restricted access, encrypted HTTPS connection, role-based permissions in the website administration system, backups. Security breaches that pose a risk to your rights are notified to the National Center for Personal Data Protection and, where the law requires, to you.
Your rights
You have the right to:
- know whether we process your data and have access to it;
- have inaccurate or incomplete data rectified;
- have data erased (“right to be forgotten”) where there is no ground to keep it;
- restrict processing;
- receive your data in a structured, commonly used format and transfer it to another controller (portability);
- object to processing based on legitimate interest;
- withdraw consent at any time — as easily as it was given; withdrawal does not affect the lawfulness of earlier processing;
- not be subject to a decision based solely on automated processing.
To exercise your rights, write to epilstudio.comrat@gmail.com or call +373 796 88 161. We may ask for details to confirm your identity. We reply within the time limits set by law.
If you believe your rights have been violated, you may lodge a complaint with the National Center for Personal Data Protection (MD-2004, mun. Chișinău, str. Serghei Lazo 48; e-mail: centru@datepersonale.md; tel.: +373 22 820 801; datepersonale.md) or apply to a court.
Minors
The website is not intended for independent use by children. Minors’ data is processed only with the consent of a legal representative.
Changes to this policy
We may update this policy when the website, the law or our processing changes. The current version is always published on this page with the update date. We will notify you separately of changes that materially affect your rights.