Privacy policy
What data we collect, why, and how long we keep it.
Who processes the data
Anna Sidorova, individual entrepreneur (Ukraine), giaskin.com.ua. Contact: info@giaskin.com.ua
What we collect
- name, email, phone, city and branch — to place and deliver the order
- email and password — if you create an account; the password is stored encrypted only
- quiz answers and skin photos — if you use the skincare selection or a photo consultation
- anonymised visit statistics — which pages and products are viewed
- email — if you subscribed to the newsletter; you can unsubscribe from any email or by writing to us
Health data — separately
Quiz answers and skin photos are health data: pregnancy, hormonal conditions, allergies, images of your face. The law treats these as a special category, and we process them only on the basis of your explicit consent — the checkbox you tick before sending. Without it neither the quiz result nor a consultation request is accepted.
- legal basis — explicit consent (Art. 7 of the Ukrainian Personal Data Protection Act, Art. 9(2)(a) GDPR)
- purpose — choosing skincare and the cosmetologist's consultation, nothing else
- who has access — you and the cosmetologist handling your consultation
- photos are kept for one year after the consultation ends, then deleted automatically; uploaded but unused ones, for 24 hours
- consent can be withdrawn at any time — write to us and we will delete the data
- complaints — to the Ukrainian Parliament Commissioner for Human Rights
For clients under 18, consultations and profile storage require a legal guardian's consent.
What we do not collect
Card details never reach our site. You enter them on the payment provider's secure page; we neither see nor store them.
Why
Solely to fulfil the order, provide the consultation and contact you about them. We do not sell or pass your data to third parties, apart from the carrier and the payment provider — and only to the extent needed for delivery and payment.
How long we keep it
Order data — as long as accounting requires. Account data — while the account exists. After an account is deleted, orders are anonymised: the amount and contents remain for accounting, your contact details are removed.
Your rights
You may ask what data we hold, correct it, or ask us to delete it. Write to info@giaskin.com.ua — we reply within 30 days.
Cookies
Essential cookies are needed for the cart and for signing in — the site will not work without them. Analytics cookies are switched on only with your consent, and it can be withdrawn at any time.