Privacy Policy

Last updated: 19 October 2026

AUREA Lab collects only what the studio needs to welcome you. No data is sold, rented or passed on to any third party for commercial purposes, and the site sets no advertising trackers.

AUREA Lab, 1er étage du centre commercial Akoor Digue, Antananarivo, Madagascar. For any question about your data: contact@aurealab.vip or +261 37 51 584 91.

Your name, your email address, your phone number, the service you would like, the date and time you have chosen, and any message you may add.

This information is used to prepare your appointment and to reply to you. Your name and time slot are needed to keep the diary; your email and phone number to confirm, or to let you know should something prevent us from keeping it.

Your name, your email address and your message, solely in order to reply to you.

Your email address only. There is no password to remember: you sign in with a six-digit code sent by email, valid for ten minutes.

The studio’s offers — promotions, new treatments, freed-up slots — are only sent to you as notifications if you have accepted them in the app. No account is needed, and we receive neither your name nor your address: your phone is simply subscribed, under a technical identifier, to the distribution list for your language.

You can unsubscribe at any time from the menu of the “My appointments” tab, or by turning off AUREA Lab notifications in your phone’s settings.

• Appointments are kept for the running of the diary and to follow your history at the studio.
• Sign-in codes are erased as soon as they are used, and at the latest ten minutes after they are sent.
• The app’s session tokens expire after thirty days and are deleted one week later.
• Messages sent through the contact form are kept for as long as it takes to reply and follow up.
• Your subscription to offers lasts until you unsubscribe or uninstall the app; the studio keeps no list of subscribed phones.
• Detailed audience measurement data is kept by Google Analytics for fourteen months at most.

The studio only. Technically, the data is stored with our hosting provider, Hostinger.

The app’s notifications go through Firebase Cloud Messaging, the Google service that delivers them to Android phones and iPhones. It receives your phone’s technical identifier if you have accepted offers, and the content of each notification: the text of the offer or, for the studio team, the name, service and time of a new appointment request. This data is entrusted to it solely to deliver the notifications.

Traffic on the site is measured by Google Analytics, described below. Your data is not passed on to any other recipient.

The site measures its traffic with Google Analytics, Google’s audience measurement service. For each page viewed, Google receives the page address, the page you came from, your type of device and browser, your screen size and your language. It also receives your IP address, from which it infers an approximate location — country, city — without storing it. This data is processed by Google, including outside Madagascar.

Two cookies, “_ga” and “_ga_RMRLP5947Z”, give your browser a random identifier so that a returning visit can be recognised; they expire after two years at most. The studio only draws overall statistics from them — number of visits, most-read pages, countries of origin — without ever knowing who you are.

To keep your visits from being measured, you can refuse this site’s cookies in your browser settings, or install the opt-out add-on provided by Google: tools.google.com/dlpage/gaoptout.

The site uses no advertising pixels and no social network buttons that track your browsing. Fonts are served from our own servers, not from Google Fonts. The other cookies are technical: “pll_language” remembers the language you chose for one year, and WordPress sets the ones the forms need.

You may ask to see the data we hold about you, to have it corrected, or to have it erased. You may also object to its processing. A single request is enough, by email or by WhatsApp — we reply within one month.

From the app, deleting your account takes effect immediately: your upcoming appointments are cancelled, the time slots released, and your past appointments anonymized — the studio keeps a record of its activity, with nothing left that identifies you.

The site is served over HTTPS. Login codes and session tokens are never stored in plain text: the database keeps only an irreversible fingerprint, which cannot be used to sign in even if it were leaked.

Legal notice