Privacy policy

1. Who we are

The controller of your personal data is Studio Brulee, address: g.k. Darvenitsa, bul. "Kliment Ohridski" 6д, 1756 Sofia. For questions about your data: , phone 088 858 3011.

2. What we collect

• First and last name, phone and email, when you book online, by phone or at the salon.
• Booking details: date and time, services, artist, price, your note.
• Visit history: completed, cancelled and missed appointments, late arrivals.
• Consent to receive news and offers, only if you gave it.
• Technical data (IP address), temporarily, to protect the site from abuse.

3. Why we use it and on what basis

• Booking and managing appointments, confirmations and reminders: performance of a contract (Art. 6(1)(b) GDPR).
• Accounting and tax obligations: legal obligation (Art. 6(1)(c)).
• Security, abuse prevention and recording no-shows: legitimate interest (Art. 6(1)(f)).
• News and offers by email: your consent (Art. 6(1)(a)), which you can withdraw at any time in “My bookings”.

4. How long we keep it

We keep booking data while it is needed to serve you and for the statutory retention periods for accounting records. When you ask for erasure we remove your name, phone, email and notes; only anonymous records (date, service, amount) needed for accounting remain. Marketing consent is kept until you withdraw it.

5. Who has access

The salon owner and the artist you booked with (each artist sees only their own clients). Our hosting and email providers process data on our behalf. We do not sell your data or share it for advertising.

6. Your rights

You have the right to access, rectify, erase, restrict, port and object to the processing of your data, and to withdraw consent. You can delete or freeze your account in “My bookings”. For a copy of your data or any other request, email us. You may lodge a complaint with the Bulgarian Commission for Personal Data Protection (www.cpdp.bg).

7. Cookies

We use only necessary cookies. Details: Cookie policy.