Privacy Policy

1. Who we are

Harmony Beauty is a beauty salon located at Str. Avram Iancu 32, Chișinău, Republic of Moldova. For the purposes of this policy, Harmony Beauty is the controller of personal data collected through harmonybeauty.md.

2. What data we collect

Through the contact form we collect: name, email address, phone number (optional), preferred date, service of interest and your message.

Through the online booking form we collect: first name, last name, phone number, email address, the service, specialist, date and time of your appointment, and any special requests you choose to mention.

Technically, the site uses strictly necessary cookies only (session and CSRF protection). We do not use advertising cookies and we do not share data with third-party tracking networks.

Your browser also stores locally (in local storage, not in a cookie) which channel first brought you to the site — for example Instagram, Google Maps or Facebook — together with the page you landed on. We pass it to the salon only if you complete a booking, so we know which channel produced the appointment. It is discarded automatically after 30 days.

3. Why we use your data

We use your data exclusively to: respond to contact-form inquiries, create and manage your salon appointments, contact you about your appointment (confirmation, changes, cancellation) and comply with legal obligations.

We do not sell or rent your personal data to third parties, and we do not use it for marketing without your explicit consent.

4. Who we share data with

Bookings are processed through the Altegio appointment platform, which receives the data needed to create your appointment (name, phone, email, service, date and time).

Forms are protected against spam by Cloudflare Turnstile, which may process technical data (IP address) for verification.

The contact page embeds a Google Map, and the site displays public Google reviews — these services are provided by Google under its own policies.

5. How long we keep data

Contact messages and booking data are kept for as long as needed for the purpose they were collected for, and in line with applicable legal retention periods, after which they are deleted.

6. Your rights

Under Law no. 133/2011 of the Republic of Moldova on personal data protection, you have the right to access your data, to rectification, to erasure, to object to processing, and to lodge a complaint with the supervisory authority (CNPDCP).

To exercise any right, write to the email address below — we respond within 30 days.

7. Data security

We apply reasonable technical and organizational measures to protect your data: encrypted connection (HTTPS), restricted access to data, and partners that provide security guarantees.

8. Changes to this policy

We may update this policy from time to time. The current version, together with its last-updated date, is always published on this page.