Last updated: October 5, 2026
This policy explains what personal data we collect when you join the Face Studio founding list, answer our survey, or become a member of the club, why we collect it, and the rights you have. We keep it short and plain on purpose.
The data controller is Alexander Dembouski Studio (sole proprietor Alexander Dembouski), registered in Poland at ul. Władysława Pytlasińskiego 16/13, 00-777 Warszawa, Poland.
For any privacy question, or to exercise your rights, contact us at hello@joinfacestudio.com.
If you only join the list or take the survey, we don't ask for your name, payment details or any identity documents.
When you join the club, we also collect:
Our legal basis for this is the contract between us (GDPR Article 6(1)(b)): we need this data to give you the membership. If you choose to tell us about your health in a question or show it in a video, we use that only to answer you, based on your explicit consent (Article 9(2)(a)), which you give by sending it.
We keep billing records for as long as tax law requires: in Poland, five years from the end of the year in which you paid. Here our legal basis is a legal obligation (GDPR Article 6(1)(c)).
As a member you'll also get emails about your membership: your sign-in links, receipts, and a short note when new sessions open. These are part of the service, so they don't depend on marketing consent.
The survey asks about your face and what you have tried for it: your routine, what worked, what got in the way, what you would want from a club, your age range and where in the world you are. Some questions touch on things you may consider private — for example, whether you have had cosmetic treatments such as Botox, fillers or threads.
Every question is optional. You can skip any of them and still finish the survey and receive the free session. Where a question concerns your health or medical treatments, we rely on your explicit consent (GDPR Article 9(2)(a)), which you give simply by choosing to answer it. Skipping it costs you nothing.
We deliberately store your answers apart from your email address:
Your email record also carries a few short segment labels derived from your answers — for example, a label meaning "wants a clear plan". The answers themselves never reach our email system.
This split is also why a deletion request is easy for us to honour: we can drop your answers by their identifier without touching anything else.
Before you become a member, we use your email only to:
We use your survey answers only to decide what to build and who to build it for. We publish results, if at all, only as combined figures that cannot be traced back to one person.
For the list and the survey, our legal basis is your consent (GDPR Article 6(1)(a)), plus your explicit consent (Article 9(2)(a)) for any health-related answer you choose to give. You can withdraw it at any time (see below).
We don't sell or rent your data. We share it only with the service providers that run the list and the club, acting as our processors (Stripe also acts on its own account for its legal duties as a payment provider):
Some of these providers (Cloudflare, Fly.io, Stripe and Google) are based in the United States or process data there, so your data may be processed outside the European Economic Area. Where that happens, the transfer is covered by the European Commission's Standard Contractual Clauses (or an equivalent safeguard). Brevo stores your email within the EU.
Your email (waitlist only): until you unsubscribe or ask us to delete it, or until we decide not to launch — whichever comes first. After that we remove it from our active list within 30 days.
Your survey answers: 24 months from the day you answer, after which they are deleted automatically. Before that point we may keep combined figures — counts and percentages across everyone — which carry no identifier and are no longer personal data.
Your feedback on the session: kept with your survey answers, on the same 24-month clock.
Your membership account and practice: while you're a member, and for 12 months after your membership ends, so you can come back to the same account. Then deleted.
Billing records: five years from the end of the year of payment, as Polish tax law requires.
Questions to Ask Tati and Tati's replies: kept with your account, on the same terms.
Technique-check videos: 30 days after Tati replies.
Under the GDPR you have the right to:
To unsubscribe or withdraw consent: click the unsubscribe link at the bottom of any of our mailings, or simply reply to any email from us and we'll take you off.
To have your survey answers deleted: reply to any email from us and say so. You don't need to quote a reference — we can find your answers from your address and remove them.
We set no advertising or tracking cookies anywhere on this site. The member area uses one essential cookie to keep you signed in, and Stripe's checkout may set its own cookies to prevent fraud. We use Cloudflare Web Analytics, which counts page views without cookies and without building a profile of you, which is why you see no cookie banner here. We also keep a simple count of a few anonymous events, such as which button was clicked and which link brought a visitor here (for example, a link in one of my emails). This count is kept without cookies, without your IP address and without anything that could identify you.
The survey does store one thing in your browser: the random identifier described above. It is what lets you stop and come back and have your answers continue under the same identifier rather than starting a second, separate set. Your answers themselves are saved on our side as you go, so nothing is lost if your browser closes.
If we change how we handle your data, we'll update this page and change the "last updated" date above. If you're a member and the change is significant, we'll also email you.