Back

Privacy Policy & GDPR

Last updated: 27 October 2026

1. Data controller

Flawless Studio, located at 1C Sportivilor St., Breazu, Rediu, Iași County, Romania, is the data controller for personal information collected through this website and the services offered.

Contact: +40 746 026 020

2. Information we collect

  • Name, phone number, service and message you choose to enter in the form; these are prepared locally for WhatsApp and are not sent to this site's server
  • Technical data needed for site operation and security, processed by Cloudflare
  • Limited interaction events: button category, language and page; no name, phone number or message content

3. Why we process your data

  • Arranging appointments and providing requested services
  • Communicating with clients (confirmations, rescheduling, information)
  • Meeting legal obligations (tax and accounting)
  • Improving the website experience

4. Legal basis

We process data based on your consent (GDPR Article 6(1)(a)), the performance of a service contract (Article 6(1)(b)) and legal obligations (Article 6(1)(c)).

5. How long we keep data

We keep data for as long as needed for the purposes above and for periods required by tax and accounting law (generally 10 years for financial records).

6. Your rights

  • Access your personal data
  • Correct inaccurate data
  • Request erasure (the “right to be forgotten”)
  • Restrict processing
  • Data portability
  • Object to processing
  • Complain to the Romanian data protection authority, ANSPDCP (www.dataprotection.ro)

To exercise your rights, contact us at +40 746 026 020.

7. Analytics and local storage

To understand interest in services and bookings, we record page views, interaction category, language and page in Cloudflare Analytics Engine. Form details are never sent to analytics, and we do not use advertising or profiling cookies.

The intro uses sessionStorage to remember that you have seen it during the current session.

8. Data security

We use appropriate technical and organisational measures to protect data against unauthorised access, loss or destruction.

9. Changes

We may update this policy. Any changes will be published on this page with the updated date.