Cookies & Privacy policy

Cookie and Privacy Policy

PERSONAL DATA PROCESSING POLICY

Publication date: August 23, 2026

Last updated: August 23, 2026

This Personal Data Processing Policy (hereinafter referred to as the “Policy”) has been developed in accordance with the Law of the Republic of Moldova No. 195/2024 on the Protection of Personal Data and other applicable legislation of the Republic of Moldova concerning the protection of personal data.

This Policy defines the procedure for processing and protecting personal data that may be collected by A Queen SRL, operating under the brand BUTTERFLY (hereinafter referred to as the “Controller”), when using the website https://bfstudio.md/.

1. General Provisions

1.1. The Controller respects every person's right to privacy and takes appropriate legal, organizational and technical measures to protect personal data.

1.2. This Policy applies to all information that the Controller may receive about users when they visit and use the website bfstudio.md, as well as when they contact the Controller through contact forms, email, telephone or other communication channels available on the website.

1.3. The Controller processes personal data only to the extent necessary for specific, defined and lawful purposes.

1.4. By using the website, the User confirms that they have read this Policy. Where applicable law requires separate consent to the processing of personal data, such consent shall be provided separately by the User.

2. Definitions

2.1. Personal Data means any information relating directly or indirectly to an identified or identifiable natural person.

2.2. Processing of Personal Data means any operation or set of operations performed on personal data, including collection, recording, organization, storage, modification, use, disclosure, transfer, deletion and destruction.

2.3. Controller means a natural or legal person that determines, alone or jointly with others, the purposes and means of processing personal data.

2.4. User means any natural person visiting or using the website bfstudio.md.

2.5. Consent means a freely given, specific, informed and unambiguous indication of the User's wishes by which they agree to the processing of their personal data for specified purposes.

2.6. Anonymized Data means data that does not allow a specific user to be directly or indirectly identified without the use of additional information.

2.7. Cookies means small text files stored on the User's device when visiting the website, which may be used to ensure website functionality, analyze website traffic and remember certain settings.

3. Information about the Controller

Legal entity: A Queen SRL

Brand: BUTTERFLY

Website: https://bfstudio.md/

Email: info@bfstudio.md

Phone: +373 79 122 331

For questions concerning the processing of personal data, exercising User rights or obtaining additional information, Users may contact the Controller using the email address indicated above.

4. Personal Data That May Be Processed

4.1. Depending on the nature of the User's request, the Controller may process the following personal data:

first and last name;
telephone number;
email address;
information provided by the User in a message or request;
information necessary for preparing an offer or providing services;
other information voluntarily provided by the User through the relevant form.

4.2. The amount of personal data requested depends on the specific form and the purpose of the processing.

The Controller does not request excessive personal data where such data is not necessary for the relevant processing purpose.

4.3. When visiting the website, technical and anonymized information may be automatically processed, including:

IP address;
browser type and version;
device type;
operating system;
browser language;
date and time of visit;
pages visited by the User;
source from which the User accessed the website;
technical information concerning interaction with the website.

Some of this information may be processed using Cookies and third-party analytics and advertising services.

4.4. The Controller does not intentionally collect special categories of personal data unless such collection is expressly required to comply with legal obligations.

Users are advised not to provide information concerning health, political opinions, religious beliefs, racial or ethnic origin or other special categories of personal data through website forms unless such information is specifically requested by the Controller in accordance with applicable law.

5. Purposes of Personal Data Processing

5.1. Processing User requests.

Personal data may be used for:

receiving and processing requests;
contacting the User;
providing consultations;
preparing commercial offers;
discussing terms and conditions of services;
responding to User inquiries;
organizing further communication and cooperation.

5.2. Provision of services. Personal data may be used for preparing, concluding and performing agreements, as well as for other activities related to the provision of services by the Controller.

5.3. Improving the website. Data may be used to analyze website traffic, evaluate the effectiveness of pages and advertising campaigns, identify technical errors, and improve the structure, content and functionality of the website.

5.4. Analytics and advertising. The website may use third-party services, including:

Google Analytics;
Google Ads;
Google Tag Manager;
Meta Pixel and related Meta technologies.

Such services may use Cookies and similar technologies to measure advertising effectiveness, analyze website traffic and evaluate User interaction with the website.

5.5. Website security. Data may be processed to prevent abuse, fraudulent activity, attacks, automated requests and other security violations.

5.6. Compliance with legal requirements. Personal data may be processed where necessary to comply with the laws of the Republic of Moldova, protect the legitimate rights and interests of the Controller or fulfill obligations towards public authorities.

6. Legal Grounds for Processing Personal Data

Personal data is processed on one or more legal grounds provided by applicable legislation, depending on the specific purpose of processing.

Such grounds may include:

the User's consent;
the necessity to take steps at the User's request prior to entering into an agreement;
the necessity to perform an agreement;
compliance with legal obligations of the Controller;
the legitimate interests of the Controller or a third party, provided that such interests do not override the rights and freedoms of the User;
other grounds provided by the legislation of the Republic of Moldova.

6.1. Where processing is based on the User's consent, the User may withdraw such consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

7. Use of Cookies

7.1. The website bfstudio.md may use Cookies and similar technologies.

Cookies may be used to ensure proper website functionality, analyze website traffic, improve the User experience and evaluate advertising campaign effectiveness.

7.2. Depending on their purpose, Cookies may include:

Necessary Cookies — ensure the technical operation of the website and its essential functions;
Analytics Cookies — help analyze website traffic and User interaction with the website;
Advertising Cookies — may be used to evaluate advertising effectiveness and generate advertising campaign statistics.

7.3. The website may use Google and Meta technologies for analytics and advertising, including Google Analytics, Google Ads and Meta Pixel.

Such services may place their own Cookies or receive technical information regarding the User's interaction with the website in accordance with their respective data processing policies.

7.4. The User may restrict or disable Cookies through their browser settings.

However, disabling certain Cookies may result in some website functions not operating properly.

7.5. Where applicable law requires the User's prior consent for certain categories of Cookies, such technologies shall only be used after obtaining the required consent.

8. Disclosure of Personal Data to Third Parties

8.1. The Controller does not sell or disclose Users' personal data to third parties for their independent use for purposes unrelated to the provision of the Controller's services or the operation of the website.

8.2. Where necessary, data may be provided to service providers acting on behalf of or under the instructions of the Controller, including:

hosting providers;
technical contractors;
website developers and maintenance specialists;
analytics service providers;
advertising technology providers;
other processors whose involvement is necessary for the operation of the website or provision of services.

8.3. When engaging processors, the Controller takes appropriate measures to ensure an adequate level of personal data protection.

8.4. Personal data may be disclosed to public authorities or other persons where required or permitted by applicable law.

9. International Transfers of Personal Data

9.1. Due to the use of international online services, including analytics, advertising, technical and infrastructure solutions, personal or technical data of Users may be processed in other countries.

9.2. Where personal data is transferred internationally, the Controller takes the measures required by the legislation of the Republic of Moldova to ensure an appropriate level of data protection.

9.3. Depending on the specific service, data may be transferred to Google, Meta and other technology partners used on the website.

10. Data Retention Period

10.1. Personal data is retained for no longer than necessary to achieve the purposes for which it was collected, unless a longer retention period is required by law.

10.2. The retention period may depend on:

the purpose of the request;
the nature of the services provided;
contractual relationships;
legal requirements;
the need to protect the legitimate interests of the Controller.

10.3. Once the purposes of processing have been fulfilled, personal data is deleted, destroyed or anonymized unless further retention is required by law.

11. Personal Data Security

The Controller takes appropriate technical and organizational measures to protect personal data against:

unauthorized access;
unlawful use;
alteration;
disclosure;
destruction;
accidental loss;
other forms of unlawful processing.

Such measures may include restricting access to data, using information security measures, backup procedures, access control and other measures appropriate to the nature and risks of the processing.

12. User Rights

In accordance with applicable legislation, the User has the right to:

obtain information as to whether their personal data is being processed;
access their personal data and information concerning its processing;
request correction of inaccurate or incomplete personal data;
request deletion of personal data where provided by law;
request restriction of processing in cases provided by law;
object to certain types of processing;
withdraw previously provided consent;
where provided by law, receive personal data in a structured format and request its transfer to another controller;
submit a complaint to the National Center for Personal Data Protection of the Republic of Moldova (CNPDCP) if the User believes that their personal data rights have been violated.

13. Exercising User Rights

To exercise their rights, the User may send a request to:

info@bfstudio.md

The request should preferably include:

first and last name;
contact details;
the subject of the request;
information necessary to identify the relevant request or interaction.

The Controller may request additional information necessary to verify the identity of the applicant where this is required to prevent unauthorized access to personal data.

Requests are processed within the time limits and according to the procedure established by the applicable legislation of the Republic of Moldova.

14. User Responsibility

The User is responsible for the accuracy and relevance of the personal data provided.

The User undertakes not to provide personal data of third parties through website forms without an appropriate legal basis or their consent where such consent is required by law.

15. Links to Third-Party Resources

The website may contain links to third-party websites and online services.

The Controller is not responsible for the content, security or personal data processing practices of third-party resources.

When visiting a third-party resource, Users are advised to review its privacy policy and personal data processing practices.

16. Changes to this Policy

The Controller may periodically amend this Policy due to changes in legislation, technologies used, website functionality or personal data processing practices.

The new version of the Policy becomes effective upon publication on the website unless otherwise stated in the updated version.

Continued use of the website after publication of an updated Policy constitutes acknowledgement of its provisions.

17. Contact Information

For all matters concerning the processing and protection of personal data, Users may contact the Controller:

A Queen SRL