1. Data Controller

The owner and data controller of this website is: HC ja Partnerid OÜ, registration code: 1221024, email: cadrin@zoganfacelift.com.

2. Purpose of Data Collection

Personal data is collected and processed on this website in order to:

• Issue invoices and fulfill orders.
• Communicate with the client regarding orders or invoices.
• Use e-mail and phone number to provide delivery information for physical products and general order-related notifications.
• Use e-mail to confirm orders for trainings and treatments and to provide necessary information.

3. Data Collected

Via the contact form:

• Name
• Email

In the online store, the following data is collected during checkout for invoicing and order fulfillment:

• First and last name
• (Optional) Company name
• E-mail address
• Phone number
• Address (country/region, street and house number, postal code, city/town/village)

Billing and delivery data is processed only for fulfilling orders.

4. Data Sharing

For order and payment processing, data is shared with Maksekeskus AS.

Data is not shared with other third parties, except where required by law (e.g., accounting).

5. Cookies and Tracking

This website does not use marketing or analytics cookies (Google Analytics, Meta Pixel, etc.). Only necessary cookies are used to ensure the functioning of the online store.

6. Data Retention

• Inquiry data is stored for up to 1 year.
• Online store purchases and billing data are stored for 7 years in accordance with accounting laws.

7. Customer Rights

You have the right to:

• receive information about the processing of your data,
• request correction or deletion of your data (except where required by law),
• object to the processing of your data,
• contact the Estonian Data Protection Inspectorate or another supervisory authority if you believe your data is being processed unlawfully.

For questions related to data processing, please contact: cadrin@zoganfacelift.com 

8. Security

The website uses HTTPS encrypted connection to ensure the security of transmitted data.

9. International Customers

Products and services can also be purchased by customers outside Estonia, including Finland and the Baltic states. Data is processed in accordance with the General Data Protection Regulation (GDPR) of the European Union.

10. Changes to the Privacy Policy

The Privacy Policy may be updated from time to time to ensure compliance with legal requirements and actual data processing practices.