Last updated: 2026-07-16T00:00:00.000Z
Privacy Policy
BodyBar Studio is a brand operated by Digiworks Agency S.R.L., a company registered in the Republic of Moldova (IDNO 1025600061636), with registered office at str. Doina 150/3 ap. 9, MD-2020 Chișinău. Digiworks Agency S.R.L. is the data operator (“we”, “us”) for all personal data processed in connection with the BodyBar Studio website (bodybar.studio) and BodyBar Studio communications on Facebook Messenger, Instagram Direct, and WhatsApp.
1. Data we process
- Messaging data: when you message us on Facebook Messenger, Instagram Direct, or WhatsApp, we receive your public Meta profile name, profile picture, Meta-scoped user ID, and the content and timestamps of the messages you send us, plus delivery and read receipts on messages we send you.
- Booking and contact data: name, phone, email, and any preferences you share when booking a session.
- Website technical data: IP address, browser/device user-agent, and pages visited, retained in webserver logs for security and abuse prevention.
- Analytics data: aggregated, non-identifying usage data (pages viewed, time on page, approximate location by country/city, referrer/campaign source) collected to understand how the site is used and how visitors reach us. This is processed by Umami (cookieless, self-hosted), Google Analytics 4, and Microsoft Clarity — see Section 8.
- Cookies: the Meta Pixel sets
_fbpand_fbccookies, and Google Analytics / Google Ads and Microsoft Clarity set their own cookies, for advertising and analytics measurement. Our self-hosted Umami analytics is cookieless. See Section 8 below.
2. Why we process it (lawful basis)
- To respond to your messages and bookings — performance of a service you request and our legitimate interest in running the studio.
- To keep service-quality records and resolve disputes — legitimate interest.
- To secure our infrastructure — legitimate interest.
- For advertising measurement on the Meta and Google platforms — legitimate interest, with opt-out available via standard browser controls, Meta’s Off-Facebook Activity settings, and Google’s Ads Settings.
- For website analytics and improvement (Umami, Google Analytics, Microsoft Clarity) — legitimate interest in understanding and improving how the site is used.
- Marketing communications, where applicable — only with your prior consent, withdrawable at any time.
3. Where your data lives
Messaging and booking data are stored in a self-hosted Chatwoot instance running on infrastructure operated by Digiworks Agency S.R.L. in the European Union (Hetzner, Germany). Data is encrypted in transit (TLS 1.2+) and at rest. Access is restricted to authorised BodyBar Studio staff under role-based access control.
4. Sub-processors
| Sub-processor | Purpose | Location |
|---|---|---|
| Meta Platforms Ireland Ltd. | Messenger / Instagram / WhatsApp delivery + advertising measurement | EU |
| Google Ireland Ltd. | Google Analytics 4, Google Ads measurement, Microsoft Clarity (see note) | EU / US |
| Hetzner Online GmbH | Server hosting | Germany |
| Cloudflare, Inc. | DNS, DDoS protection | Global |
Umami analytics is self-hosted by Digiworks Agency S.R.L. (Hetzner, Germany) and is not a third-party sub-processor. Microsoft Clarity is operated by Microsoft Corporation (US).
We do not sell personal data and do not share it with third-party advertisers.
5. Retention
- Messenger, Instagram, and WhatsApp conversations: 365 days from last activity, then permanently deleted.
- Booking records: up to 3 years, for tax and dispute purposes.
- Webserver logs: 90 days.
- If you unsend a message on Meta, the corresponding record in our systems is deleted within 7 days via the Meta deletion webhook.
6. Your rights
Under EU GDPR, Moldovan Law no. 133/2011 on Personal Data Protection, and the California Consumer Privacy Act (CCPA) where applicable, you may request: access to your data, correction, deletion (“right to be forgotten”), portability, restriction of processing, and objection to processing. You may also lodge a complaint with the Moldovan National Centre for Personal Data Protection (CNPDCP) or your local supervisory authority.
To exercise these rights, including data-deletion requests under Meta’s Platform Terms, contact [email protected]. We respond within 30 days.
7. Changes
We will post any changes to this page and update the “Last updated” date.
8. Cookies and analytics
bodybar.studio uses the following measurement tools:
- Meta Pixel — sets
_fbp/_fbccookies for advertising measurement on the Meta platform. - Google Analytics 4 & Google Ads — set cookies to measure website traffic, campaign performance, and conversions from our Google Ads. Used to understand where visitors come from and to improve our advertising.
- Microsoft Clarity — sets cookies to produce anonymised heatmaps and session replays that help us improve the site’s usability.
- Umami — our self-hosted, cookieless analytics; it stores no cookies and does not track you across sites.
You can block any of these cookies in your browser settings without affecting the booking flow. Because BodyBar Studio operates in the Republic of Moldova, which is outside the EU’s cookie-consent regime, we currently present this notice rather than an interruptive consent banner; if you are visiting from the EU/EEA, you may object to non-essential processing at any time by contacting us or using your browser and platform opt-out controls.
9. Contact
Digiworks Agency S.R.L. — str. Doina 150/3 ap. 9, MD-2020 Chișinău — [email protected]