Privacy Policy

Bubble Rock Studio is committed to protecting your personal information in accordance with the General Data Protection Regulation (GDPR).

What Data We Collect

We collect the following data only when you submit an appointment request:

• Your name
• Phone number (optional)
• Email (optional)
• Appointment time and purpose

Why We Collect It

Your data is used exclusively to manage your appointment and to contact you if needed. We do not use your data for advertising, profiling, or any third-party marketing.

How Your Data Is Stored

Your data is stored securely in our database hosted on Supabase, which complies with GDPR requirements. Our website is hosted on Vercel. If you contact us via email, it will be processed through Gmail (Google), which also adheres to GDPR.

How Long We Keep Your Data

Appointment data is automatically deleted 30 days after your scheduled visit. We do not retain personal data longer than necessary.

Your Rights

Under GDPR, you have the right to:

• Access the data we hold about you
• Request correction or deletion
• Withdraw your consent at any time

To exercise these rights, contact us at bubblerockstudio@gmail.com.

Legal Basis

We process your data based on your explicit consent and our legitimate interest in managing appointment bookings and communication.

Third-Party Services

We use the following services which may process your data securely:

• Supabase – Appointment data storage. See their privacy policy.
• Vercel – Website hosting. See their privacy policy.
• Gmail (Google) – For receiving inquiries. See Google Privacy Policy.

This privacy policy was last updated on 6 September 2025.