Last updated: 2026-06-04T00:00:00.000Z
Privacy Policy
BodyBar Studio is a brand operated by Digiworks Agency S.R.L., a company registered in the Republic of Moldova (IDNO 1025600061636), with registered office at str. Doina 150/3 ap. 9, MD-2020 Chișinău. Digiworks Agency S.R.L. is the data operator (“we”, “us”) for all personal data processed in connection with the BodyBar Studio website (bodybar.studio) and BodyBar Studio communications on Facebook Messenger, Instagram Direct, and WhatsApp.
1. Data we process
- Messaging data: when you message us on Facebook Messenger, Instagram Direct, or WhatsApp, we receive your public Meta profile name, profile picture, Meta-scoped user ID, and the content and timestamps of the messages you send us, plus delivery and read receipts on messages we send you.
- Booking and contact data: name, phone, email, and any preferences you share when booking a session.
- Website technical data: IP address, browser/device user-agent, and pages visited, retained in webserver logs for security and abuse prevention.
- Cookies: strictly necessary cookies only. The Meta Pixel sets
_fbpand_fbccookies for advertising-measurement purposes — see Section 9 below.
2. Why we process it (lawful basis)
- To respond to your messages and bookings — performance of a service you request and our legitimate interest in running the studio.
- To keep service-quality records and resolve disputes — legitimate interest.
- To secure our infrastructure — legitimate interest.
- For advertising measurement on the Meta platform — legitimate interest, with opt-out available via standard browser controls and Meta’s Off-Facebook Activity settings.
- Marketing communications, where applicable — only with your prior consent, withdrawable at any time.
3. Where your data lives
Messaging and booking data are stored in a self-hosted Chatwoot instance running on infrastructure operated by Digiworks Agency S.R.L. in the European Union (Hetzner, Germany). Data is encrypted in transit (TLS 1.2+) and at rest. Access is restricted to authorised BodyBar Studio staff under role-based access control.
4. Sub-processors
| Sub-processor | Purpose | Location |
|---|---|---|
| Meta Platforms Ireland Ltd. | Messenger / Instagram / WhatsApp delivery + advertising measurement | EU |
| Hetzner Online GmbH | Server hosting | Germany |
| Cloudflare, Inc. | DNS, DDoS protection | Global |
We do not sell personal data and do not share it with third-party advertisers.
5. Retention
- Messenger, Instagram, and WhatsApp conversations: 365 days from last activity, then permanently deleted.
- Booking records: up to 3 years, for tax and dispute purposes.
- Webserver logs: 90 days.
- If you unsend a message on Meta, the corresponding record in our systems is deleted within 7 days via the Meta deletion webhook.
6. Your rights
Under EU GDPR, Moldovan Law no. 133/2011 on Personal Data Protection, and the California Consumer Privacy Act (CCPA) where applicable, you may request: access to your data, correction, deletion (“right to be forgotten”), portability, restriction of processing, and objection to processing. You may also lodge a complaint with the Moldovan National Centre for Personal Data Protection (CNPDCP) or your local supervisory authority.
To exercise these rights, including data-deletion requests under Meta’s Platform Terms, contact [email protected]. We respond within 30 days.
7. Changes
We will post any changes to this page and update the “Last updated” date.
8. Cookies
bodybar.studio sets only strictly necessary cookies and the Meta Pixel _fbp / _fbc cookies for advertising measurement. You can block these cookies in your browser settings without affecting the booking flow. We do not set advertising or cross-site tracking cookies beyond Meta’s pixel.
9. Contact
Digiworks Agency S.R.L. — str. Doina 150/3 ap. 9, MD-2020 Chișinău — [email protected]