Это не отдельный перевод. Единственным юридически действительным документом является версия по адресу bodybar.studio/terms/, /privacy/ или /data-deletion/.
Last updated: 2026-10-16T00:00:00.000Z
Privacy Policy
BodyBar Studio is a brand operated by Digiworks Agency S.R.L., a company registered in the Republic of Moldova (IDNO 1025600061636), with registered office at str. Doina 150/3 ap. 9, MD-2020 Chișinău. Digiworks Agency S.R.L. is the data operator (“we”, “us”) for all personal data processed in connection with the BodyBar Studio website (bodybar.studio) and BodyBar Studio communications on Facebook Messenger and Instagram Direct.
1. Data we process
- Messaging data: when you message us on Facebook Messenger or Instagram Direct, we receive your public Meta profile name, profile picture, Meta-scoped user ID, and the content and timestamps of the messages you send us, plus delivery and read receipts on messages we send you.
- Booking and contact data: name, phone, email, and any preferences you share when booking a session.
- Website technical data: IP address, browser/device user-agent, and pages visited, retained in webserver logs for security and abuse prevention.
- Analytics data: aggregated, non-identifying usage data (pages viewed, time on page, approximate location by country/city, referrer/campaign source) collected to understand how the site is used and how visitors reach us. This is processed by Umami (cookieless, self-hosted), Google Analytics 4, and Microsoft Clarity — see Section 8.
- Post-visit link: the thank-you SMS after a visit contains a short personal link (bodybar.studio/r/…). When you open it, we record on that visit’s booking when the page was opened and which buttons you tapped first (review platform, message to us, booking again), to see how useful the page is. No cookies are set for this, and the link stops being personal after 30 days. RO: Linkul scurt din SMS-ul de după vizită înregistrează, pentru acea programare, când a fost deschisă pagina și ce butoane ați apăsat; fără cookie-uri, 30 de zile. RU: Короткая ссылка в SMS после визита фиксирует для этой записи, когда открыта страница и какие кнопки нажаты; без cookie, 30 дней.
- Cookies: the Meta Pixel sets
_fbpand_fbccookies, and Google Analytics / Google Ads and Microsoft Clarity set their own cookies, for advertising and analytics measurement. Our self-hosted Umami analytics is cookieless. See Section 8 below.
2. Why we process it (lawful basis)
- To respond to your messages and bookings — performance of a service you request and our legitimate interest in running the studio.
- To keep service-quality records and resolve disputes — legitimate interest.
- To secure our infrastructure — legitimate interest.
- For advertising measurement on the Meta and Google platforms — legitimate interest, with opt-out available via standard browser controls, Meta’s Off-Facebook Activity settings, and Google’s Ads Settings.
- For website analytics and improvement (Umami, Google Analytics, Microsoft Clarity) — legitimate interest in understanding and improving how the site is used.
- Marketing communications, where applicable — only with your prior consent, withdrawable at any time.
3. Where your data lives
Messaging and booking data are stored in a self-hosted Chatwoot instance running on infrastructure operated by Digiworks Agency S.R.L. in the European Union (Hetzner, Germany). Data is encrypted in transit (TLS 1.2+) and at rest. Access is restricted to authorised BodyBar Studio staff under role-based access control.
4. Sub-processors
| Sub-processor | Purpose | Location |
|---|---|---|
| Meta Platforms Ireland Ltd. | Messenger / Instagram delivery + advertising measurement | EU |
| Google Ireland Ltd. | Google Analytics 4, Google Ads measurement, Microsoft Clarity (see note) | EU / US |
| Hetzner Online GmbH | Server hosting | Germany |
| Cloudflare, Inc. | DNS, DDoS protection | Global |
Umami analytics is self-hosted by Digiworks Agency S.R.L. (Hetzner, Germany) and is not a third-party sub-processor. Microsoft Clarity is operated by Microsoft Corporation (US).
We do not sell personal data and do not share it with third-party advertisers.
5. Retention
- Messenger and Instagram conversations: 365 days from last activity, then permanently deleted.
- Booking records: up to 3 years, for tax and dispute purposes.
- Webserver logs: 90 days.
- If you unsend a message on Meta, the corresponding record in our systems is deleted within 7 days via the Meta deletion webhook.
6. Your rights
Under EU GDPR, Moldovan Law no. 133/2011 on Personal Data Protection, and the California Consumer Privacy Act (CCPA) where applicable, you may request: access to your data, correction, deletion (“right to be forgotten”), portability, restriction of processing, and objection to processing. You may also lodge a complaint with the Moldovan National Centre for Personal Data Protection (CNPDCP) or your local supervisory authority.
To exercise these rights, including data-deletion requests under Meta’s Platform Terms, contact [email protected]. We respond within 30 days.
7. Changes
We will post any changes to this page and update the “Last updated” date.
8. Cookies and analytics
bodybar.studio uses the following measurement tools:
- Meta Pixel — sets
_fbp/_fbccookies for advertising measurement on the Meta platform. - Google Analytics 4 & Google Ads — set cookies to measure website traffic, campaign performance, and conversions from our Google Ads. Used to understand where visitors come from and to improve our advertising.
- Microsoft Clarity — sets cookies to produce anonymised heatmaps and session replays that help us improve the site’s usability.
- Umami — our self-hosted, cookieless analytics; it stores no cookies and does not track you across sites.
Analytics and advertising cookies (Google Analytics, Meta Pixel, Microsoft Clarity) and our campaign-attribution cookie bb_attr (first/last UTM source, 90 days) are set only after you press Accept on the cookie banner, in line with Moldova Law 195/2024. If you press Decline, none of them are set. Strictly necessary cookies are always set: bb_consent (remembers your choice, 180 days) and, on the booking site, the session and CSRF cookies. The Google Map in the Contact section is loaded only when you tap “Show map”; Google may then set its own cookies. You can withdraw consent by clearing the bb_consent cookie in your browser.
9. Contact
Digiworks Agency S.R.L. — str. Doina 150/3 ap. 9, MD-2020 Chișinău — [email protected]