Privacy policy

Last updated: 1 October 2026

We are a small studio and we keep your data to what we need to run workshops and answer you. This page explains what we collect, why, who helps us handle it, how long we keep it and what you can ask us to do.

Who is responsible for your data

The data controller is Vitaliya Vintonyak (Bloom Inspo Studio), NIF 276014456, R. João de Deus 1, 8150-152 São Brás de Alportel.

For anything about your data, write to bloominspo.space@gmail.com.

What we collect, why, and for how long

Bookings: Name, email, phone, number of participants, optional notes, payment method and whether you agreed to photos. We use them to manage your place, contact you about the workshop and confirm payment (performance of a contract, Art. 6(1)(b) GDPR). We delete phone number and notes 12 months after the workshop. Payment records that the law requires us to keep are kept for the legally required period.
Private event requests: Name, email, phone, occasion, date, number of guests and your notes. We use them to answer and plan your event (steps you ask for before a contract, Art. 6(1)(b)). We delete them 12 months after the request is closed, unless it became a booking.
Waiting list: Name, email and optional phone. We use them only to tell you if a place opens (your request, Art. 6(1)(b)). We delete them once you have been told or the workshop has passed, at the latest 30 days afterwards.
Messages: Name, email, optional phone and your message. We use them to reply to you (our legitimate interest in answering enquiries, Art. 6(1)(f)). We delete them 12 months after the conversation is closed.
Photos: Photos taken at workshops and events. We publish photos of identifiable people only with their consent (Art. 6(1)(a)); for children, with a parent or guardian's consent. We keep them until you withdraw consent or we stop using them.
Visiting the website: Anonymous, aggregated statistics about visits and page speed, provided by our hosting provider, without cookies and without identifying you (our legitimate interest in keeping the site fast and working, Art. 6(1)(f)). To stop spam we briefly count requests per network address in memory; this is not stored.

Children and photos

Children are welcome at our workshops, but bookings are made by a parent or guardian, and we never ask children for their data directly.

Ticking the photo box when you book is optional and is not a condition of taking part. If you do not tick it, we will not publish photos in which you or your children can be recognised. You can withdraw your consent at any time by writing to us, and we will remove the photos from the website and our Instagram.

Who helps us handle your data

We use a small number of service providers who process data only on our instructions: a database and file-storage provider, a website hosting provider (which also supplies anonymous statistics) and an email service provider (for notifications to the studio). We do not sell your data and we do not use it for advertising.

Our database and file storage are hosted in the EU (France). Some of our providers are based outside the EU, or may access or process data outside the European Economic Area, for example to deliver emails or our website, or to give us technical support. Where they do, the transfer is protected by the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

Cookies and the map

We do not use tracking or advertising cookies. The only cookie is a login cookie used by studio staff.

The map on the contact page is provided by Google. It loads only if you press the button, because it connects your browser to Google. Links to Instagram and Google Maps lead to those services, which have their own policies.

Your rights

You can ask us at any time to show you your data, correct it, delete it, restrict its use, give you a copy you can reuse, or stop using it where we rely on our legitimate interest. Where we rely on your consent, you can withdraw it at any time without any effect on what happened before.

Write to bloominspo.space@gmail.com. We reply within one month. If you think we are handling your data wrongly, you can complain to the Portuguese data protection authority, the CNPD (www.cnpd.pt), or to the authority in your own country.

Security and changes

Your data is stored in access-controlled systems that only the studio can read, and sent over encrypted connections. If a breach puts your rights at risk, we will tell you and the authority as the law requires.

If we change how we handle data, we will update this page and its date.