Privacy policy

This policy explains what personal data SKINMENU uses when you use the SKINMENU marketplace or a store's shop on SKINMENU, why, and your rights.

Who is responsible

SKINMENU runs the marketplace and the shops' websites, accounts, checkout and emails, and is responsible for that data:

SkinMenu OÜ, registry code 12969672 Harju tn 6, 10130 Tallinn, Estonia support@skinmenu.com

The store you buy from is responsible for its own records of your purchase — the order, its invoice, delivery and any return — and for how it looks after you as its customer.

On this shop: Makberta OÜ, Harju 6, 10130 Tallinn, Estonia, info@makberta.com.

What we use, and why

Your account. Your email address, password (stored scrambled) or Google sign-in, name, phone number, addresses you save, language and delivery country, and, if you buy for a business, your company and VAT number. We use them to give you the account you asked for (the contract with you). If you sign in with Google, Google tells us your email address and name.

Your name, and your picture if you add one, are shown to stores and other people beside routines you share. If you have not given a name, we take one from your email address and tell you so.

When you change your email address, we keep your previous addresses with your account so that your earlier orders stay with it.

Your orders. What you bought and from which store, delivery details, how you paid, your messages about the order, and any withdrawal or return. We use them to run the checkout and send you the order emails (the contract), and we keep order records because accounting law requires it (a legal obligation). We pass what the store needs to it (see Who receives your data).

Withdrawals. When you use Withdraw from contract here, we record your name, email address, the order and items, and the time, send you an acknowledgement and pass the statement to the store, because consumer law requires it (a legal obligation).

Saved products and routines. Products you save, and routines you keep or share, with the visibility you choose. If you save a product nobody sells yet, we email you once when it can be bought, because you asked us to (the contract).

Stores you are linked to. If a store invites you to a trade account or to be its client, we show you the invitation when you sign in, and record your answer. You can unlink a store at any time on your account's Stores page.

Lists stores give us. A store may give us the names, email addresses, phone numbers and companies of its own customers, so that it can offer them a trade account, link them, or place an order for them. We use this data only for the store, on its instructions; the store is responsible for it. We do not write to anyone on these lists.

Keeping the service safe and working. Technical data such as your IP address, browser and the time of a request, in the server logs of our hosting providers, to run the service securely (our legitimate interest in protecting it). We use your IP address's country, without storing it, to suggest a delivery country until you choose one.

Who receives your data

• The store you buy from: your name, contact details, delivery address, the order, how you paid, and any withdrawal statement. A store you buy from or are linked to also sees your name, email address, company and what you bought from it.
• Service providers working for us: hosting of the website and the database, file and image storage, and email delivery. They process data only on our instructions. The database and application servers are in the Netherlands, and the website's servers in Germany.
• The payment provider, if you pay by card: your name, email address, phone number, billing address and the payment.
• Google, if you choose to sign in with Google.
• The EU's VAT number check (VIES), if you give a VAT number.
• Carriers, through the store that sends your parcel, or SKINMENU for goods sent from its Vault: your name, address and phone number, so they can deliver.
• Authorities, when the law requires us to.

How long we keep it

• Orders, invoices and credit notes: seven years from the end of the financial year in which they were recorded, as Estonian accounting law requires.
• Your account: until you ask us to delete it. Order records stay for the period above.
• Withdrawal statements: with the order they belong to.
• Sign-in: you stay signed in for 30 days unless you sign out.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict how we use it, to object to our use based on legitimate interests, and to receive the data you gave us in a portable form. Write to support@skinmenu.com. We answer within one month; if a request is complex we may take up to two months more, and we tell you if so.

You can change most account details yourself on your account page.

If you think we use your data unlawfully, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, info@aki.ee, www.aki.ee, or to the data protection authority in the EU country where you live or work.

What you need to give us

An email address to create an account or place an order; a name, address and phone number for delivery. Everything else is your choice. We make no decisions about you by automated means alone that have legal or similar effects on you.

Cookies and similar storage

We use cookies and your browser's storage to make the service work; none is used for advertising.

• Sign-in (skinmenu_session_token): keeps you signed in, for 30 days.
• Language (skinmenu_locale): the language you chose or signed in with, for one year.
• Delivery country (skinmenu_market): the country you chose, for one year.
• Closed suggestions (skinmenu_prompt): suggestions you closed, so they are not shown again, for one year.
• Colour scheme (skinmenu_shop_scheme, on a shop; theme, in your browser's storage, on the marketplace): if you choose light or dark.
• Bag (browser storage): what is in your bag, until you check out or empty it.
• Payment provider: on the checkout and payment pages, the payment provider stores fraud-prevention cookies (__stripe_mid, one year; __stripe_sid, 30 minutes).
• For stores: sign-in, the selected store and its status, for 30 days, and the layout of the store workspace, for 7 days.

If you apply to sell on SKINMENU

We use what you give in the application — your name, contact details, evidence that you are a professional, and later your business and bank details — to decide on the application and to run your store (the contract), and keep it as the law requires.

Changes

We will update this policy when what we do changes, and show the date it took effect at the top.