Privacy statement

Last updated: 23 October 2026

Who we are

Tovkun Beauty Studio (Sofiia Tovkun), Koninginnegracht 101, 2514 AL The Hague, the Netherlands. KVK 94653771. We are the controller for the personal data described here. Questions or requests: sofiiatovkun@gmail.com.

What we collect and why

• Bookings — name, email, optional phone number and notes, the service, date and time, and payment status. We need this to schedule and carry out your appointment (performance of a contract, GDPR art. 6(1)(b)).
• Payments — deposits are paid on Stripe’s own secure page. We never see or store your card or bank details; we only receive a payment reference and the amount. We keep payment records because Dutch tax law requires it (legal obligation, art. 6(1)(c)).
• Messages — when you use the contact form or the “Message Sofiia” widget we receive your name, email, optional phone number and message, and use them only to reply to you (legitimate interest / steps prior to a contract, art. 6(1)(b) and (f)).

We do not use your data for advertising, we do not sell it, and we do not make automated decisions about you.

Cookies and analytics

This website does not use tracking or advertising cookies, and no fonts or images are loaded from third parties. We may use Cloudflare Web Analytics, which counts visits without cookies and without identifying you. If you switch between light and dark mode, that choice is saved in your own browser (local storage) and is never sent to us. Because no non-essential cookies are used, there is no cookie banner.

Who processes your data for us

• Cloudflare — hosts this website and stores booking data (EU data location).
• Stripe — processes deposit payments.
• Apple (iCloud Calendar) — your appointment (name and service) is added to the studio’s calendar.
• Resend — sends booking confirmations and forwards contact messages by email.

Some of these companies are based in the United States. Where data leaves the EU, it is protected by the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.

How long we keep it

• Phone numbers and notes from a booking: deleted 12 months after the appointment.
• Name, date, service, amount and payment reference: kept for 7 years, as required by Dutch tax law (fiscale bewaarplicht).
• Contact messages: deleted within 12 months unless they lead to a booking.
• Unpaid, abandoned booking attempts: deleted within 30 days.

Your rights

You can ask to see, correct or delete your data, to restrict or object to its use, or to receive a copy in a portable format. Email sofiiatovkun@gmail.com and we will respond within one month. Data we must keep for tax purposes cannot be deleted before the legal period ends.

If you are not satisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Security

The site is served only over HTTPS. Booking data is accessible only to the studio owner through a protected admin area.