Privacy Policy

Effective date: 28.08.2025

We value your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you visit innaskincare.com.

1. Who We Are

Website owner: Inna Skincare

Email for privacy inquiries: (  какой эмайл вставить?) 

2. What Data We Collect

We may collect:

• Information you provide (e.g., name, email, phone, billing/shipping address when placing an order or filling out forms).
  
  
• Technical information (e.g., IP address, device type, browser, operating system, language settings).
  
  
• Usage data (pages visited, time on site, clicks, interactions).
  
  
• Cookies and similar technologies (see our Cookie Policy for details).
  
  

3. How We Use Your Data

We process your data for:

• Fulfilling and delivering your orders.
  
  
• Responding to your inquiries and providing customer support.
  
  
• Improving our website and user experience.
  
  
• With your consent only – for analytics and marketing (e.g., Google Analytics, advertising campaigns).
  
  

4. Legal Bases for Processing (GDPR Article 6)

• Performance of a contract – e.g., order processing (Art. 6(1)(b)).
  
  
• Legal obligation – e.g., accounting, tax compliance (Art. 6(1)(c)).
  
  
• Legitimate interests – e.g., website security, fraud prevention (Art. 6(1)(f)).
  
  
• Your consent – for analytics, advertising, and marketing (Art. 6(1)(a)).
  
  

5. How We Share Your Data

We may share data with:

• Payment processors (вставить нужное ).
  
  
• Shipping companies (e.g., Omniva, DHL, DPD).
  
  
• IT service providers (hosting, email services).
  
  
• Analytics and advertising partners (Google, Meta) – only with your consent.
  
  We do not sell your personal data to third parties.
  
  

6. International Data Transfers

If data is transferred outside the European Economic Area (EEA), we use appropriate safeguards, such as Standard Contractual Clauses (SCCs), and apply additional protection measures if required.

7. Data Retention

• Order and invoicing data – 7 years (legal requirement).
  
  
• Customer service communications – up to 3 years.
  
  
• Marketing and analytics data – until consent is withdrawn, but no longer than 12 months of inactivity.
  
  
• Cookies – see retention periods in our Cookie Policy.
  
  

8. Cookies and Tracking Technologies

We use:

• Necessary cookies – essential for site functionality.
  
  
• Functional cookies – to remember your preferences (e.g., language).
  
  
• Analytics and marketing cookies – only with your consent.
  
  You can manage or withdraw your consent at any time via our cookie banner or browser settings.
  
  

9. Your Rights under GDPR

You have the right to:

• Access your data.
  
  
• Rectify or erase your data.
  
  
• Restrict or object to processing.
  
  
• Withdraw your consent at any time.
  
  
• Data portability.
  
  
• Lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon):
  
  Tatari 39, 10134 Tallinn, Estonia
  
  Email: info@aki.ee | Phone: +372 6828 712 | Website: aki.ee
  
  

10. Children

Our website is not intended for children under 16. If we learn that we have collected personal data from a child without parental consent, we will delete it.

11. Data Security

We implement security measures including HTTPS, encryption, restricted access, and regular updates. However, no method of transmission or storage is 100% secure.

12. Contact

If you have any questions about this Privacy Policy or your personal data, contact us at: [вставить эмайл]

13. Updates

We may update this Privacy Policy from time to time. The latest version will always be available on this page with an updated date.

✅ How to publish on WordPress:

• Go to Pages → Add New, title it Privacy Policy, paste this text, and add your details where indicated.
  
  
• Set the permalink: /privacy-policy.
  
  
• Add the link in your footer menu.
  
  

Next step → I’ll prepare a Cookie Policy (in English) and a GDPR-compliant Cookie Banner setup for WordPress.

Do you want the Cookie Policy now? (it will include: what cookies, purpose, retention, and how to manage consent).