We collect only what is needed to communicate with you, provide services, and operate the website.

• Contact data — name (if provided), email, phone (if provided), and message content.
• Booking / request data — details you submit when requesting a private acquisition, visit, or session.
• Technical data — device/browser basics, approximate location (city/country), and site usage (only if analytics is enabled).

• To respond to messages and requests.
• To confirm and manage bookings (manual confirmation).
• To provide customer support and maintain professional boundaries.
• To improve the website (only in aggregate, when enabled).
• To comply with legal obligations (accounting, consumer protection, fraud prevention).

We process personal data on the following bases:

• Consent — when you choose to contact us or opt into optional cookies (if used).
• Contract / pre-contract steps — to handle requests, bookings, and purchases.
• Legitimate interests — to keep the site secure and communicate professionally.
• Legal obligation — accounting and compliance when applicable.

We do not sell personal data. We share data only with trusted service providers (“processors”) necessary to run the site and communicate, for example:

• Website hosting & security providers
• Email delivery / contact form tools
• Payment providers (only if you purchase)
• Analytics (only if enabled and consented where required)

Processors handle data under their own privacy and security obligations.

Some tools may process data outside the EU/EEA. Where this happens, we rely on appropriate safeguards (such as Standard Contractual Clauses) provided by the service vendors.

• Messages and requests are kept only as long as needed to communicate and maintain records.
• Purchase-related records are retained as required by law (e.g., accounting).
• Security logs (if used) are retained for a limited period for fraud prevention and stability.

Depending on your location, you may have rights to:

• Access your data
• Correct inaccurate data
• Request deletion
• Restrict or object to processing
• Data portability
• Withdraw consent (when consent is the basis)

To exercise these rights, email info@bewitchedby13.com. We may ask for verification to protect your data.

We may use essential cookies required for site functionality. Optional analytics or marketing cookies are used only if enabled and, where required, after consent.

(If you use a cookie banner plugin, link it here or describe your cookie categories.)

We use reasonable technical and organizational measures to protect your data. No online system is 100% secure, but we treat privacy as part of studio ethics.

We may update this policy to reflect changes in the site or legal requirements. The effective date at the top will be updated accordingly.