Privacy Policy

1. Data controller and contacts

2. Information we process

During an ordinary visit, the website and its hosting infrastructure may receive technical information needed to deliver and secure the service, such as the IP address, request date and time, browser/device information, requested pages and security events. In the virtual try-on, the body photo and selected or uploaded design are processed in the browser before a request is submitted. When the user submits the form, the studio receives the name, chosen contact method (phone / WhatsApp / Telegram), request details, selected design reference and one finished flattened JPEG preview. The separate original body photo and separate custom-design source file are not stored by the studio.

3. Purposes and legal basis

Information is used only in connection with the website and the user’s request: to receive and handle an enquiry, contact the user, identify the selected design and preview, prepare a consultation or booking, keep the history of the request, prevent abuse, protect the service and comply with applicable legal duties. The request and finished preview are stored in a restricted administrative area of the website that is available only to authorized studio personnel. To notify the studio promptly, information about a new request and the finished preview may also be sent through Telegram.

Depending on the situation, processing is based on the user’s request and steps taken before providing the service, consent where consent is requested, the studio’s legitimate interests in service security and maintaining a reasonable history of enquiries, or a legal obligation.

4. Recipients and data transfers

Access may be provided only where necessary to authorized studio personnel and technical service providers involved in operating the website. The hosting provider stores the website, its administrative area, database and submitted files. Telegram is used to deliver notifications about new requests to the studio. Google receives data from the embedded map only after the visitor enables Google Maps. The website does not sell personal data or send it to advertising networks.

If a service provider processes data outside Montenegro, the transfer must be handled in accordance with the rules applicable to that transfer. The hosting details below must be completed from the actual hosting account, contract or invoice rather than guessed.

5. Google Maps

Google Maps is disabled by default. The embedded map makes no request to Google until the visitor explicitly allows it. After permission, Google may receive technical information required to provide the map and may apply its own storage technologies. The visitor can change this choice at any time through Cookie Settings. See Google Privacy Policy, Google cookie information and Google Maps terms.

6. Retention and user rights

Requests and finished previews are not deleted automatically on a yearly schedule. They may be kept without a predetermined deletion date for as long as they remain necessary to handle the request, continue communication, maintain a reasonable history of enquiries, resolve possible disputes or protect the studio’s lawful interests. When there is no longer a valid need to keep identifiable data, it should be deleted or anonymized unless applicable law requires a longer period.

Where provided by applicable law, a user may request access, correction, deletion or restriction of processing and may withdraw consent where the processing is based on consent. The saved Cookie / Google Maps choice remains in the browser until the user changes it through Cookie Settings or clears the website data. If the purpose or set of optional services changes materially, the website should request a new choice.

7. Minors

If a request contains personal data relating to a minor and the processing relies on consent, the request must be submitted or confirmed by the minor’s parent, adoptive parent or legal representative. By submitting a request on behalf of a minor, the adult confirms that they are authorized to provide that consent and are acting in the minor’s interests.

8. Changes to this policy

This policy may be updated when the website functionality, categories of information, processing methods, technical service providers or applicable legal requirements change. The current version is always published on this page and the update date is shown above.

If a change affects processing that requires a new consent — for example, a new optional external service is introduced — the website will ask for that consent again. A policy update does not by itself allow information collected earlier to be used for a new purpose without an appropriate legal basis.