GDPR & Compliance

Privacy Policy

Last updated: September 2026

1. Data Controller

The data controller is Aki Studio s.r.o., located at Vodičkova 30, 110 00 Praha 1, Czech Republic, email: [email protected], tel: +420 777 123 456.

2. What Data We Collect

  • Full name (to identify your reservation)
  • Phone number (to confirm visit details and send reminders)
  • Email address (optional, to send written booking confirmation)
  • Visit notes (optional, e.g. allergies or preferences)
  • Inquiries sent via the contact form

3. Purpose of Processing

Your data is processed solely to manage your bookings, handle reschedules or cancellations, track membership loyalty rewards (every 10th treatment free based on phone number), and respond to contact inquiries. We never use your data for unsolicited marketing.

4. Data Retention Period

We retain your personal data for the duration of your active customer relationship with the studio to maintain loyalty points, or until you request its deletion.

5. Third-Party Sharing

We do not sell or share personal data with third parties for commercial or advertising purposes. Media assets are hosted via secure Cloudinary infrastructure which does not process customer personal records.

6. Your Rights Under GDPR

You have the right to request access to your data, correction, restriction of processing, or complete deletion from our database. To exercise these rights, email us at [email protected] or call +420 777 123 456.

7. Data Security

Access to system data is restricted through strong encryption and authenticated credentials. Only authorized studio staff have access to customer appointment details.