Who we are

AromaViva Ltd.,
Registered in England and Wales with a reg. number: 16316213

Website: https://facetaping.co.uk/

This Privacy Policy governs the relationship between the Data Controller and the data subjects (users) of the Website.

Contact Details

1. Legal Bases and Purposes for Processing Your Personal Data

We process your personal data on the following bases:

  1. Contract between you and us, so we can fulfil our contractual obligations.
  2. Your explicit consent—with a clearly stated purpose for each case.
  3. Legal obligations—as required by law.
  4. Our legitimate interests.

Below you will find detailed information on how we handle your data, depending on the specific legal basis for processing.

1.1. Processing Data to Fulfil a Contract or Pre-Contractual Obligations

We process your personal data to carry out our contractual and pre-contractual obligations and to exercise any rights under the contracts we have signed with you.

Purposes of processing:

  • Verifying your identity.
  • Managing and completing your order and executing the signed contract.
  • Preparing an offer for contract conclusion.
  • Issuing and sending invoices for services you use.
  • Providing comprehensive support, as well as collecting fees for the services.
  • Keeping correspondence about orders, requests, problem reports, etc.
  • Informing you about anything related to the services you use.
  • Detecting and/or preventing any unlawful actions or actions that conflict with our service terms.

Categories of data subjects:
Our Clients—i.e., any individual or representative of a legal entity who is in a contractual or pre-contractual relationship with us and wishes to use our services.

Services provided:
Via the Website, we offer online sales of cosmetics, essential oils, cosmetic equipment, and online courses.

Data we process on this basis:
On the grounds of the contract between us, we process information about the type and content of our contractual relationship, and any other information related to it, including:

  • Name(s)
  • Email
  • Address
  • Details of orders placed
  • Correspondence related to comprehensive support
  • Credit/debit card information, bank account number, or other payment details related to transactions

Some of this information is mandatory for us to be able to enter into and fulfil the contract. Without providing these data, we cannot meet our contractual obligations. Such data are usually marked with an asterisk (*) or another indicator. All other data are collected on a voluntary basis.

Disclosure of personal data to third parties:
We may share your personal data with third parties in order to provide you with fast, high-quality, and integrated service. We do not disclose your data before ensuring all necessary technical and organisational measures to protect them, and we exercise strict control in doing so. In such cases, we remain responsible for the confidentiality and security of your data. We have signed data-processing agreements with all third parties who receive your personal data.

We may share personal data with the following categories of recipients (data controllers):

  • Postal operators and courier services.
  • Service providers who maintain the hardware, software, or equipment used to process personal data, essential for the company’s operations.
  • Consultants in various fields—legal, accounting, business consulting, etc.
  • Cloud service providers such as Stripe, PayPal, etc.

When do we delete data collected on this basis?
Data collected on this basis are deleted 3 or 5 years after the contractual relationship ends, whether this happens upon expiry, termination, or another reason. This period is determined by the statutory limitation period for any claims arising from the contract.
Data collected in relation to pre-contractual relationships are deleted 12 months after collection.

1.2. Contact Form

When you fill in and send a contact form, you voluntarily provide us with your data. By submitting the form, you consent to this Privacy Policy. We process these data solely to provide our services to you and potentially enter into a contract. The data are processed and deleted according to the rules set out in this Privacy Policy, in particular the rules for data collected on a contractual or pre-contractual basis.

1.3. User Accounts

Each registered user has a unique profile. From your profile, you can manage your personal data settings—change the personal information you have provided, and subscribe or unsubscribe from email newsletters.

1.4. Automated Decision-Making

We do not use any automated algorithms or profiling for processing personal data.

2. Processing Data to Fulfil Legal Obligations

Sometimes the law may require us to process your personal data. In such cases, we are obliged to do so—for example:

  • Under the Measures Against Money Laundering Act.
  • Fulfilling obligations related to distance selling or off-premises sales under the Consumer Protection Act.
  • Providing information to the Consumer Protection Commission or third parties, as stipulated in the Consumer Protection Act.
  • Providing information to the Commission for Personal Data Protection, to meet data protection regulations.
  • Obligations under the Accounting Act and Tax and Social Insurance Procedure Code, and other related regulations, to maintain proper accounting records.
  • Providing information to courts and third parties as required by applicable legal procedures.
  • Verifying age for online purchases.

When do we delete data collected on this basis?
After the legal requirement for collection and storage has been fulfilled or no longer applies. For example:

  • 11 years for accounting data (under the Accounting Act).
  • 5 years for obligations to provide information to courts or competent state authorities, or other legally mandated grounds.

Disclosure of Data to Third Parties
Where required by law, we may provide your personal data to a competent state authority, individual, or legal entity.

3. Processing Data With Your Consent

We only process your personal data on this basis after receiving your explicit, unequivocal, and voluntary consent. We will not impose any unfavourable consequences if you refuse to provide consent.

Consent is a separate legal basis for processing your data. The purpose of data processing under consent is clearly stated and does not overlap with the other purposes mentioned in this policy. If you give consent, we may prepare suitable service offers for you until that consent is withdrawn or any contractual relationship with you is terminated.

Data we process on this basis:
We only process data for which you have given your explicit consent. The specific data are determined case by case, but typically include name and email.

If we plan to transfer these data to third parties, we will inform you in advance before you provide consent.

Withdrawing Consent

You may withdraw your consent at any time. Withdrawal of consent does not affect the performance of contractual obligations. If you withdraw your consent for one or more of the purposes listed above, we will no longer use your personal data for those specific purposes. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

You can withdraw your consent by contacting us via the details provided in this Policy.

When do we delete data collected on this basis?
We delete data collected on this basis upon your request or store it for the period specified when you gave consent. If no timeframe was specified, we delete the data up to 12 months after initial collection.

3.1. Email Marketing

If you sign up to receive emails from us, you may receive messages with current news about our services, partner services, or other useful information. You can unsubscribe from our mailing list by clicking the “unsubscribe” link (or similar) within any email. You can also unsubscribe using the contact details in this Policy.

MailChimp
We may use MailChimp or similar services to manage email newsletters.

4. Legitimate Interest

We may process and analyse personal data based on our legitimate interest. This is done to improve our overall service. For instance, we may analyse user behaviour and other data, such as: site usage, session duration, non-anonymised IP address, Facebook profile data, precise location, and more.

If collecting any of these data goes beyond our legitimate interest, we will only collect them with your explicit consent.

Data may also be anonymised. Anonymisation is an alternative to deleting data. It involves irreversibly removing all personally identifiable elements, so there is no legal requirement to delete them, as they are no longer considered personal data.

5. How We Protect Your Personal Data

To ensure adequate protection for our clients’ and the company’s data, we apply all necessary organisational and technical measures required by data protection legislation.

We have established rules to prevent misuse and security breaches, and we follow measures to maintain the security of personal data. Where appropriate, we may use additional security mechanisms such as encryption or pseudonymisation during processing, transmission, and storage of your data.

Last updated: 11 Mar 2025

If you have any questions about this Privacy Policy or would like to exercise any of your rights, please contact us at facetapingexpert@gmail.com.