Privacy Policy

This policy explains how Hanna Consulting OÜ processes personal data when you visit the Beautyhub Jewelry website, contact us, or place an order. Checkout is available for deliveries within Estonia.

Who is responsible for your data?

The data controller is Hanna Consulting OÜ, trading as Beautyhub Jewelry.

• Estonian registry code: 16825754
• Registered address: Kopli tn 96a-13, Põhja-Tallinna linnaosa, Tallinn 10416, Harju maakond, Estonia
• Privacy contact: support@beautyhub-jewelry.ee

What personal data do we process?

• When you email us: your email address, name if provided, and the information in your message and any attachments.
• When you place an order: your name, email address, telephone number, delivery method and any delivery address or pickup-point details you provide, the items and amount ordered, acceptance of the sales terms, and payment status. We do not receive your online banking credentials or full payment-card details.
• When you visit the site: technical connection and security information such as your IP address, browser and device details, pages requested, referring page, and the date and time of the request. Hosting and security systems may create these records.
• Cookie preferences: the choice you make in the cookie panel is stored in your browser’s local storage for up to 180 days so the site can remember your choice.
• Optional marketing measurement: if you allow marketing cookies, Meta Pixel records page views and may receive technical and browsing information such as your IP address, browser and device details, page viewed, referring page, and advertising identifiers. Pixel cookies may include _fbp and, when an advertising click identifier is present, _fbc. We currently use the Pixel for page-view measurement only; we do not send purchase, cart, or checkout events.

The site does not have customer accounts, a contact form, or a newsletter signup. If you contact us by email, please do not include sensitive personal information unless it is needed for your request.

Why do we process the data?

• We use technical information to operate, maintain, and protect the website. The legal basis is our legitimate interest in running a secure and reliable site (GDPR Article 6(1)(f)).
• We use email correspondence to answer your request and, where relevant, take steps you request before entering into a contract. The legal basis is GDPR Article 6(1)(b) or, where appropriate, our legitimate interest in responding to enquiries and handling disputes (Article 6(1)(f)).
• We use order information to take payment, fulfil the sales contract, arrange delivery, provide customer support, and meet accounting and invoicing duties. The legal bases are GDPR Article 6(1)(b) for the contract and Article 6(1)(c) for accounting and other legal duties.
• We use Meta Pixel only after you consent to marketing cookies. The legal basis is your consent (GDPR Article 6(1)(a)). You can change or withdraw it using the cookie preferences control on the Cookies Policy page.

We may also retain or use relevant records where necessary to establish, exercise, or defend legal claims (GDPR Article 6(1)(f)).

Who receives personal data?

Website hosting, security, and email providers may process technical information or email correspondence as service providers to deliver and protect the site and handle messages. When you allow marketing cookies, information is sent to Meta. Meta may also process it under its own policies. Meta’s Privacy Policy explains its processing and international data transfers.

For an order, necessary delivery details are shared with the carrier you select, and payment processing is provided by Maksekeskus AS. For accounting and invoicing, we may use Merit Aktiva and an accountant. If Merit Aktiva is used for an order, the information needed for the accounting record or invoice—such as your name, contact details, delivery address where applicable, items purchased, and payment amount and status—may be processed there. Accounting information may also be shared with public authorities where required by law. You enter bank or card credentials in the bank’s or Maksekeskus’s secure environment; Hanna Consulting OÜ does not receive your online banking credentials or full card details.

How long do we keep personal data?

• Cookie preferences remain in your browser for up to 180 days. Meta’s cookies and data are subject to Meta’s retention practices, which may vary by service and browser.
• Email correspondence is kept for as long as needed to respond and handle the matter, and longer only where needed to comply with law or establish, exercise, or defend legal claims.
• Technical security records are kept only as needed for site operation and security, according to the applicable provider’s retention schedule.
• Accounting source documents, including invoices and records needed to support them, are kept for seven years from the end of the financial year in which the transaction was recorded. Other order data is kept only for as long as needed to perform the contract, meet legal duties, and handle potential claims.

Your rights

Subject to the conditions in law, you may request access to your personal data, rectification, erasure, or restriction of processing. Where the legal conditions are met, you may also request portability of data you provided in a structured, commonly used, machine-readable format. You may object to processing based on legitimate interests, including direct marketing, and you may withdraw consent at any time where processing is based on consent. Withdrawing consent does not affect processing that took place before withdrawal. You may also lodge a complaint with a supervisory authority.

To make a request, email support@beautyhub-jewelry.ee. We normally respond within one month; the period may be extended by up to two further months where the request is complex or there are multiple requests.

You may contact the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, Estonia, or email info@aki.ee.

We do not make decisions about you using automated processing that produce legal or similarly significant effects.

Security and updates

We use appropriate technical and organisational measures to protect personal data. This policy may be updated when the website’s features or service providers change. The date above shows when it was last updated.