Xochu Nails by Mila

Privacy policy

Last updated: September 27, 2026

This policy explains how we collect, use and protect the personal data you give us on the Xochu Nails by Mila site when you send a request, apply as an artist or pay. Data is processed under the Law of the Republic of Azerbaijan “On Personal Data”.

1. Who is responsible

Xochu Nails by Mila is run by [ŞİRKƏTİN HÜQUQİ ADI] (tax ID (VÖEN) [VÖEN], address: [HÜQUQİ ÜNVAN]), which is responsible for your data.

2. What we collect

  • Request form: full name, phone number, the services you pick, date and time, district and address, a note and, if you like, a sample photo.
  • Artist application: name, phone, email, Instagram, skills, experience, districts and hours, portfolio photos and a certificate.
  • Payment: the booking fee’s amount, time and result. You enter card details on the bank’s secure page — we never see or store them, only the masked card number the bank returns (e.g. •••• 4242).
  • Technical data: a cookie remembering your language, the operators’ sign-in cookie, and a spam check (Cloudflare Turnstile).

3. Why we use it

To carry out your request: pick a suitable artist, confirm the time and price, contact you by phone or WhatsApp, take the booking fee and refund it when due, and handle complaints. To review artist applications and contact applicants. To keep the records the law requires.

We don’t sell your data or share it with anyone for advertising.

4. Legal basis

The consent you give when sending a form, and carrying out your booking. You can withdraw consent at any time — this doesn’t affect work already done.

5. Who we share it with

  • Your assigned artist: name, phone, address, service, note and sample photo — only to carry out the booking.
  • The bank (payment provider): to take and refund the booking fee.
  • Hosting, file storage and security services that keep the site running. Their servers may be outside Azerbaijan; where they are, we require your data to be protected.
  • Public authorities: only when the law requires it.

6. How long we keep it

We keep request and payment records for [RETENTION PERIOD], then delete or anonymise them. Applications we don’t accept are deleted after the decision. We can delete a sample photo or portfolio photos sooner if you ask.

7. Your rights

You can ask whether we hold your data, get a copy, have it corrected or deleted, withdraw your consent, and complain to the competent public authority. Write to us using the contacts below — we reply within 30 days.

8. How we protect it

The site only works over an encrypted connection (HTTPS), files are kept in private storage that only authorised staff can see, and every operator signs in with their own account.

9. Contact

Privacy questions: phone [TELEFON NÖMRƏSİ], email [E-POÇT].

10. Changes

We may update this policy. The new version is published on this page and the date at the top changes.