Privacy policy

Main Space (mainspace.page) is provided by Nataliia Makarenko, a private individual, address: Cascina Guastalla 1, 20082 Noviglio (MI), Italia. She is the controller of your personal data.

For any questions about personal data, write to hello@mainspace.page.

Specialists (account):

• first and last name, username, email, password (stored only in encrypted form) and profile photo;
• work profile: specializations, services and prices, schedule, work address, phone, Telegram, description;
• subscription and payment details sent by Paddle: name, email, country, subscription and payment status (we never receive card details).

Clients (booking without an account):

• name, phone and booking note, the chosen service and time.

All visitors:

• technical data: IP address, browser and device type, request times (server logs) and error reports from the site;
• the chosen language and essential cookies (see below);
• if you turn notifications on — the push subscription address of your browser.

• Providing the service: account, publishing the page, online bookings and notifications about them — performance of a contract (Art. 6(1)(b) GDPR).
• Subscription payments and bookkeeping — performance of a contract and legal tax and accounting obligations (Art. 6(1)(b) and (c)).
• Security, preventing fraud and abuse, technical logs — legitimate interest (Art. 6(1)(f)).
• Push notifications on your device — your consent (Art. 6(1)(a)), which you can withdraw in your browser or profile settings.
• Service emails (email confirmation, trial and booking reminders) — performance of a contract.

We don't sell personal data, show ads or use third-party analytics or tracking.

• The name, services, prices, schedule, address and contacts a specialist publishes are visible to all visitors.
• Booking details (name, phone, note) are seen only by the specialist you booked with; the client sees their booking through a secret link.
• Paddle.com — our reseller and the Merchant of Record for subscriptions: it handles payments, taxes and refunds.
• Providers processing data on our behalf: DigitalOcean (servers and database in an EU data centre), Sentry (error reports), Cloudflare (file storage), Resend (sending emails), browser push services (Google, Apple, Mozilla, Microsoft).
• Professional advisers (accountant, lawyer) and public authorities — only when the law requires it.

Some providers (DigitalOcean, Sentry, Cloudflare, Resend, Paddle, push services) may process data outside the EU/EEA. Such transfers rely on a European Commission adequacy decision (EU-US Data Privacy Framework) or the Commission's standard contractual clauses.

• The specialist's account and profile — as long as the account exists; they are deleted together with the bookings.
• The client's name, phone and note in a booking — 30 days after the visit, then anonymised: only the date, time and service remain.
• Payment records — as long as tax law requires (in Italy, up to 10 years).
• Technical logs — briefly, usually up to 30 days.

You have the right to access, rectify and erase your data, to restrict processing, to data portability, to object to processing and to withdraw consent. Most data can be changed or deleted in your account settings; for other requests write to hello@mainspace.page. We reply within one month.

You can also lodge a complaint with a data protection authority — in Italy, the Garante per la protezione dei dati personali (garanteprivacy.it) — or with the authority of the country where you live.

We use only essential cookies:

• the sign-in session and form protection;
• the chosen language;
• bookings made on this device (so you can open them again);
• a marker of notifications turned on for the device.

There are no advertising or analytics cookies, so no separate consent is needed.

We transfer data only over secure HTTPS connections, store passwords only in encrypted form and files in private storage. Only those who need it to run the service have access to the data.

The service is not intended for children under 14. Only people aged 18 or over can create a specialist account.

We may update this policy. We will notify specialists of significant changes by email in advance. The date of the last update is shown at the top of the page.