Privacy Policy

The controller responsible for your data is Shafaq Aashkar, trading as Shafaq's Makeup Studio, Schliemannstr. 14A, 10437 Berlin, Germany. Email: support@shafaqsmakeupstudio.com.

Our website is hosted by Vercel. When you visit, your browser automatically sends technical information such as your IP address, browser type, the page you visited and the time of the visit. This is needed to deliver the website securely and to prevent attacks. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR). These logs are deleted after a short period, normally within 30 days.

When you create an account, we store your email address and, if you choose, your name. We use them to give you access to your purchased tutorials and to send important account messages. Accounts are managed by our website's own system and stored in our database, hosted by Neon in Frankfurt, Germany. Login and password-reset emails are sent through Resend. Legal basis: performing our contract with you (Art. 6(1)(b) GDPR).

Payments are handled by Lemon Squeezy, which acts as the merchant of record and processes your name, email, billing address and payment details as an independent controller. We don't receive or store your card details. We receive confirmation of your order so we can unlock your tutorials. Lemon Squeezy's own privacy policy explains how they handle your data. Legal basis: Art. 6(1)(b) GDPR.

Our videos are streamed through Bunny Stream (BunnyWay d.o.o., Slovenia). When you watch a video, your IP address and technical playback data are processed to deliver the video to your device. Legal basis: Art. 6(1)(b) GDPR.

When you send a booking inquiry, we process the details you enter: your name, email, mobile number, wedding date and times, number of people, preparation location, venue and any notes. We use them only to answer your inquiry and prepare a quote. Your inquiry is saved in our database and sent to our email inbox (Gmail) through Resend. Legal basis: steps prior to entering a contract (Art. 6(1)(b) GDPR).

If you email support@shafaqsmakeupstudio.com, your email is forwarded by Cloudflare Email Routing to our mailbox hosted by Google (Gmail). If you message us on Instagram, Instagram's operator Meta also processes your message under its own privacy policy. We use your message and contact details to reply. Legal basis: our legitimate interest in answering your questions (Art. 6(1)(f) GDPR), or Art. 6(1)(b) GDPR if your question relates to a purchase or booking.

If you post comments or questions, we store them along with your account name so we can display and answer them. Legal basis: Art. 6(1)(b) GDPR.

We send purchase confirmations and important account updates. We don't send marketing emails or newsletters.

We use cookies that are strictly necessary to keep you logged in and make the site work. These don't need your consent. For visitor statistics we use Cloudflare Web Analytics, which sets no cookies, stores nothing on your device and doesn't identify you. It counts page views and measures how fast pages load.

We only share data with service providers we need to run the platform:

• Vercel (website hosting)
• Neon (database, Frankfurt)
• Bunny Stream (video streaming)
• Resend (sending account and booking emails)
• Cloudflare (email forwarding and cookieless visitor statistics)
• Google (Gmail, where we receive emails)
• Lemon Squeezy (payments, as an independent controller)

We have data processing agreements with the providers that process data on our behalf. We never sell your data.

Some providers, such as Vercel, Resend, Cloudflare, Google and Lemon Squeezy, are based in the US. Where data is transferred outside the EU, this happens on the basis of the EU–US Data Privacy Framework, where the provider is certified, or EU Standard Contractual Clauses.

• Account data: for as long as your account exists, so you keep your lifetime access. If you ask us to delete your account, your access to purchased tutorials ends.
• Booking inquiries: deleted 12 months after your inquiry if no booking follows.
• Records we must keep for tax reasons: for as long as German law requires, usually up to 10 years.

You have the right to access your data, have it corrected or deleted, restrict its processing, receive it in a portable format, and withdraw any consent you gave, with effect for the future. Email support@shafaqsmakeupstudio.com to use these rights. You also have the right to complain to a data protection authority. Ours is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

Where we process your data based on our legitimate interests (Art. 6(1)(f) GDPR), you can object at any time for reasons arising from your particular situation. We'll then stop, unless we have compelling legitimate grounds or need the data to establish or defend legal claims.

We'll update this policy when our services or the law change. The current version is always on this page.