Privacy Policy
What personal data we collect, why, who we share it with, how long we keep it, and your rights.
Last updated: 19 October 2026.
Who is responsible for your data
The controller of your personal data is Sound Clinic Produkcija DOOEL Skopje (САУНД КЛИНИК ПРОДУКЦИЈА ДООЕЛ Скопје), registered at Nikola Parapunov 41, Karpoš, Skopje, company no. (ЕМБС) 7509634, tax no. (ЕДБ) 4057021555467, which runs the SoundClinic studio. For anything about your data, write to us through the contact form.
What we collect
- When you book: your name, email, phone (if you give it), your note for the session, and the room, time and price.
- When you create an account: first and last name, email, phone (if you give it), language and password. We store the password only in protected (hashed) form, which cannot be read back.
- When you sign in with Google or Microsoft: your name, email and your account's ID with them. We never receive your Google or Microsoft password.
- When you write to us through the form: name, email, subject and message.
- Confirmation codes: the code we email you is stored only in protected form and is valid for 15 minutes.
- Technical data: IP address and time when you book, sign in or change something, for security and to prevent abuse.
- Reviews of the studio: published only with your consent and only under the name you choose.
We don't collect payment data: you pay in cash or by bank transfer.
Why we use it
- For your booking: to make and confirm it, to tell you if anything changes and to reach you if needed. Basis: the contract between you and us.
- For your account: so you can see and cancel your bookings. Basis: the contract.
- To answer you when you write to us. Basis: your request and our legitimate interest.
- For security: to protect the site and you from spam, fake bookings and unauthorised access. Basis: legitimate interest.
- For legal obligations, for example when we issue an invoice.
We send no advertising or newsletters, we don't sell data, and the site has no analytics, tracking or ads.
Who we share it with
- MKhost, our email provider: the messages we send you (codes, confirmations) pass through their server.
- Cloudflare (Turnstile): when you request a booking code, use the contact form or create an account, Cloudflare checks that you are human. To do so it processes your IP address and browser data.
- Google and Microsoft: only if you choose to sign in with them.
- No one else, unless the law requires it.
Cloudflare, Google and Microsoft may process data outside North Macedonia, under their own data protection terms.
Where we keep it
On our own server in North Macedonia. Backups are on the same server, on mirrored disks.
How long we keep it
- Bookings and account: while you have the account and for as long as we need them to run the studio and meet legal obligations. We delete them on request, except what the law requires us to keep.
- Contact form messages: as long as we need them to answer you; deleted on request.
- Change log (with IP addresses): one year, then deleted automatically.
- Backups: 30 days.
- Confirmation codes: valid for 15 minutes, then deleted.
Cookies and browser storage
We use only cookies the site cannot work without. There are no analytics, tracking or advertising cookies, which is why we don't ask for consent.
payload-token: keeps you signed in (for customers up to 7 days).sc-customer,sc-customer-keep: tell the site you are signed in and whether you chose "Remember me".sc-oauth,sc-handoff,sc-handoff-ok: signing in with Google or Microsoft (a few minutes).sc-app-hint: whether you closed the "Add to Home Screen" hint.NEXT_LOCALE: the page language, until you close the browser.
While you book, the form keeps your name, email and phone in your browser so you don't lose them if the page reloads; they are removed once the booking is done.
Your rights
Under the Law on Personal Data Protection you can ask for access to your data, correction, erasure, restriction of processing and a copy in a portable format, and you can object to processing. You can withdraw your consent to a published review at any time.
Write to us through the contact form: we answer within one month at the latest. If you think we are not handling your data properly, you can complain to the Personal Data Protection Agency (azlp.mk).
Security
The site works only over an encrypted connection (HTTPS), passwords are hashed, staff sign in with a password and an emailed code, and only the people who handle bookings can access the data.
Under 18
People under 18 book only with the consent of a parent or guardian.
Changes
We update this policy when the way we handle data changes. The date of the last change is at the top of this page.