Privacy Policy
Last updated: 3 September 2026
AUREA Lab collects only what the studio needs to welcome you. No data is sold, rented or passed on to any third party for commercial purposes, and the site sets no advertising trackers.
Who processes your data
AUREA Lab, 1er étage du centre commercial Akoor Digue, Antananarivo, Madagascar. For any question about your data: contact@aurealab.vip or +261 37 51 584 91.
What we collect, and why
When you request an appointment
Your name, your email address, your phone number, the service you would like, the date and time you have chosen, and any message you may add.
This information is used to prepare your appointment and to reply to you. Your name and time slot are needed to keep the diary; your email and phone number to confirm, or to let you know should something prevent us from keeping it.
When you write to the studio
Your name, your email address and your message, solely in order to reply to you.
If you create an account from the app
Your email address only. There is no password to remember: you sign in with a six-digit code sent by email, valid for ten minutes.
How long we keep it
- Appointments are kept for the running of the diary and to follow your history at the studio.
- Sign-in codes are erased as soon as they are used, and at the latest ten minutes after they are sent.
- The app’s session tokens expire after thirty days and are deleted one week later.
- Messages sent through the contact form are kept for as long as it takes to reply and follow up.
Who has access
The studio only. Technically, the data is stored with our hosting provider, Hostinger. It is not passed on to any other recipient.
Trackers and third-party services
This site uses neither Google Analytics, nor advertising pixels, nor social network buttons that track your browsing. Fonts are served from our own servers and not from Google Fonts: your IP address is therefore disclosed to no one other than the site’s hosting provider. The only cookies set are the technical ones WordPress needs to make the forms work.
Your rights
You may ask to see the data we hold about you, to have it corrected, or to have it erased. You may also object to its processing. A single request is enough, by email or by WhatsApp — we reply within one month.
From the app, deleting your account takes effect immediately: your upcoming appointments are cancelled, the time slots released, and your past appointments anonymized — the studio keeps a record of its activity, with nothing left that identifies you.
Security
The site is served over HTTPS. Login codes and session tokens are never stored in plain text: the database keeps only an irreversible fingerprint, which cannot be used to sign in even if it were leaked.