Privacy Policy

1. Who is responsible

The data controller is Nuru Asili Skin OÜ, Estonia, info@rianaturals.eu. For any privacy question or request, email info@rianaturals.eu.

2. What we collect

• ·Identity and contact: name, email address, phone number.
• ·Orders: products ordered, delivery address or DPD parcel machine, order history, returns and withdrawals.
• ·Payments: payment method, transaction references and status. Card, bank and instalment payments are handled by our payment providers; we never see or store full card numbers or bank login details.
• ·Account and preferences, if you create an account or join a waiting list.
• ·Device and usage: IP address, browser, device type and pages visited; analytics only with your consent.
• ·Communications: messages with us, reviews and survey answers.

3. Why we use it and our legal basis

• ·To take, deliver and support your order, and handle returns: performance of our contract with you (GDPR art. 6(1)(b)).
• ·To take payment and prevent fraud: contract and our legitimate interest in secure payments (art. 6(1)(b) and (f)).
• ·To keep accounting and tax records: legal obligation (art. 6(1)(c)); Estonian law requires us to keep accounting records for 7 years.
• ·To answer your questions and improve our shop: legitimate interest (art. 6(1)(f)).
• ·To send newsletters and offers, and to use analytics and advertising cookies: your consent (art. 6(1)(a)), which you can withdraw at any time.

4. Cookies

When you first visit, our cookie banner lets you choose. Only strictly necessary cookies (for the cart, checkout and remembering your choice) are set without consent. Analytics and advertising cookies are used only if you click "Accept all".

You can change your choice at any time by clearing cookies for rianaturals.eu in your browser; the banner will then appear again.

5. Who we share it with

We never sell your personal data. We share only what is needed with:

• ·payment providers (Stripe, Mollie, Modena) to process payments and instalment plans;
• ·DPD, which receives your name, phone number and delivery address or parcel machine;
• ·service providers who host the site (Vercel), manage our catalogue and content (Shopify, Sanity) and send our emails (Resend), acting on our instructions under data processing agreements;
• ·our accountant and authorities where the law requires it.

6. Transfers outside the EU

Some of our service providers are based in, or store data in, the United States or other countries outside the European Economic Area. Where this happens we rely on an adequacy decision (such as the EU–US Data Privacy Framework) or the European Commission’s Standard Contractual Clauses. You can ask us for details.

7. How long we keep it

• ·Order and accounting records: 7 years, as required by Estonian accounting law.
• ·Customer service messages: up to 3 years after the matter is closed, in case of claims.
• ·Marketing data: until you unsubscribe or withdraw consent.
• ·Analytics data: as set out in the cookie banner, normally no more than 14 months.

8. Security

We use encryption in transit, access controls and PCI-DSS compliant payment providers. Only people who need your data to do their job can access it.

9. Your rights

Under the GDPR you have the right to:

• ·access your personal data and get a copy;
• ·have inaccurate data corrected;
• ·have your data erased, unless we must keep it by law;
• ·restrict processing;
• ·receive your data in a portable format;
• ·object to processing based on legitimate interest, and to direct marketing at any time;
• ·withdraw consent at any time, without affecting earlier processing.

To use any of these rights, email info@rianaturals.eu. We reply within one month. You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or the data protection authority in your own EU country.

10. Children

Our shop is not aimed at children under 16, and we do not knowingly collect their data.

11. Changes

We post any changes to this policy on this page and show the date it was last updated below.