Privacy Policy

Resoul Studio
Last updated: 12.07.2026

At Resoul Studio, we respect your privacy and are committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Bulgarian data protection legislation, including the Bulgarian Personal Data Protection Act (Закон за защита на личните данни).

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, create an account, book appointments, communicate with us, or use our services.

1. Data Controller

The controller responsible for processing your personal data is:

(Hereinafter referred to as "Resoul Studio", "we", "us", or "our".)

2. What Personal Data We Collect

Depending on how you use our website and services, we may collect the following categories of personal data:

Account Information

When you create an account on our website, we may collect:

• Full name
• Email address
• Telephone number
• Username
• Password information (stored securely in encrypted form)
• Account preferences

Appointment and Service Information

When you book a sound therapy session, we may collect:

• Name
• Contact details
• Preferred appointment date and time
• Selected service
• Booking history
• Communication related to your appointment

Health-Related Information

Sound therapy is a wellness service that may require certain information to ensure your comfort and safety. You may voluntarily provide information such as:

• Pregnancy status
• Hearing sensitivity
• Medical devices (for example pacemakers)
• Relevant health conditions
• Physical limitations
• Other information you choose to share regarding your well-being

Health-related information is considered special category personal data under Article 9 GDPR and is processed only with your explicit consent or where legally permitted.

Providing health information is voluntary. However, failure to provide relevant information may prevent us from safely adapting the session to your needs.

Payment Information

If payments are processed through online payment providers, we may process payment confirmation information, transaction reference numbers, and billing information where required.

We do not store complete payment card details. Payment information is processed through secure third-party payment providers according to their own privacy policies.

Website Usage Information

When you visit our website, we may automatically collect:

• IP address
• Browser type
• Device information
• Operating system
• Website interaction data
• Cookie information

This information helps us maintain website security, improve functionality, and understand how visitors use our website.

3. How We Use Your Personal Data

We process personal data for the following purposes:

Providing Our Services

Including creating and managing user accounts, processing appointment bookings, providing sound therapy sessions, communicating regarding appointments, and managing customer requests.

Communication

We may use your contact information to confirm appointments, send reminders, respond to inquiries, and provide important service information.

Marketing communications will only be sent where permitted by law and, where required, after obtaining your consent.

Website Management and Security

We process technical data to protect our website from misuse, maintain website functionality, prevent fraudulent activities, and improve user experience.

Legal and Administrative Obligations

We may process personal data to comply with accounting and tax obligations, maintain required business records, and respond to legal requests.

4. Legal Basis for Processing

We process personal data based on the following legal grounds under GDPR:

• Contract Performance – Article 6(1)(b) GDPR: to create your account, manage bookings, and provide requested services.
• Consent – Article 6(1)(a) GDPR: where you voluntarily provide consent, including marketing communications, optional cookies, and health-related information.
• Explicit Consent for Health Data – Article 9(2)(a) GDPR: health-related information is processed only when you provide explicit consent.
• Legal Obligation – Article 6(1)(c) GDPR: where processing is required by law, such as accounting and tax obligations.
• Legitimate Interest – Article 6(1)(f) GDPR: for purposes such as website security, fraud prevention, and service improvement.

5. User Accounts and Login Data

If you create an account on our website: your account information is stored securely, your password is encrypted and cannot be accessed by our staff, and you are responsible for keeping your login credentials confidential.

You may request deletion of your account at any time by contacting us. Deletion of an account does not remove information that we are legally required to retain.

6. Online Booking System

When you book an appointment through our website, your booking details are stored to manage your appointment. You may receive confirmation emails and reminders, and we may contact you regarding changes, cancellations, or important information.

Booking information is retained only for as long as necessary for business, legal, and accounting purposes.

7. Data Retention Periods

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy. Typical retention periods include:

• Account information: until account deletion or inactivity according to our retention policy
• Appointment records: as required for business administration and legal obligations
• Accounting information: according to Bulgarian tax and accounting laws
• Health information: only as long as necessary for providing services and with your consent

After the retention period expires, personal data is securely deleted or anonymized.

8. Sharing of Personal Data

We do not sell, rent, or trade your personal data. We may share information only with trusted third parties when necessary, including:

• Website hosting providers
• Appointment booking providers
• Payment processors
• Email service providers
• IT and security providers
• Accounting providers

These providers process personal data only according to appropriate agreements and GDPR requirements.

9. International Data Transfers

If personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as European Commission adequacy decisions, Standard Contractual Clauses approved by the European Commission, or other legally recognized safeguards.

10. Cookies and Tracking Technologies

Our website may use cookies to enable essential website functions, maintain login sessions, remember preferences, improve website performance, and analyze website traffic.

Where required by law, we request your consent before placing non-essential cookies. You can manage or disable cookies through your browser settings.

11. Data Security

We use appropriate technical and organizational measures to protect personal data, including secure website connections (SSL encryption), access controls, secure password storage, restricted access to personal information, and regular security monitoring.

However, no internet transmission method can guarantee absolute security.

12. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of Access – you may request information about the personal data we hold about you.
• Right to Rectification – you may request correction of inaccurate or incomplete information.
• Right to Erasure – you may request deletion of your personal data where legally possible.
• Right to Restriction of Processing – you may request limitation of how your data is processed.
• Right to Data Portability – you may request your data in a structured, commonly used format.
• Right to Object – you may object to certain types of processing.
• Right to Withdraw Consent – where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect processing performed before withdrawal.

13. Exercising Your Rights

To exercise your rights, please contact us at info@resoul-studio.com. Please include your name, contact details, and a description of your request.

We may request proof of identity to protect your personal information. We will respond within the legally required timeframe.

14. Right to Lodge a Complaint

If you believe your personal data has been processed unlawfully, you have the right to submit a complaint to the Bulgarian supervisory authority:

Commission for Personal Data Protection (CPDP) (Комисия за защита на личните данни – КЗЛД)
Website: https://www.cpdp.bg

15. Children's Privacy

Our services and website are not intended for children under 18 unless parental or legal guardian consent is provided. We do not knowingly collect personal data from children without appropriate consent.

16. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of third-party websites. We recommend reviewing their privacy policies before providing personal information.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time due to changes in legislation, changes in our services, or improvements to our data practices. The updated version will always be published on our website with the latest revision date.

18. Contact Us

If you have questions about this Privacy Policy or how we process your personal data, please contact:

© Resoul Studio – All rights reserved.