Privacy Policy

Last updated: July 14, 2026

Anna Logor ("we", "us", and "our") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy describes how we collect, use, process, and disclose your personal information when you use our website and services, in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Who Controls Your Data The data controller responsible for your personal information is Anna Logor. If you have any questions or concerns about how we handle your data, please contact us on our contact page.

2. Personal Data We Collect We only collect the personal data necessary to provide you with our services, process your orders, and manage your account. This includes:

Account Information: When you register on our website, we collect your first name, last name, middle name (optional), city, phone number, email address, and password (securely stored in hashed format).
Order and Shipping Information: When you make a purchase, we collect recipient names, phone numbers, email addresses, shipping addresses, order logs, and transaction details. This is necessary to fulfill our contract with you.
Inquiries and Feedback: If you contact us using our feedback or contact forms, we collect your name, email address, phone number, subject category, and the message content to respond to your inquiry.
Essential Storage Data: We store session tokens, shopping cart contents, and cookie banner preferences locally in your browser (via HTTP cookies and local storage) to enable core store functionalities.

3. Legal Basis for Processing Under the GDPR, we process your personal data based on the following legal grounds:

Performance of a Contract: Processing is necessary to create your account, manage your cart, and fulfill and deliver your orders.
Legal Obligation: We must retain order and transaction records for compliance with corporate, tax, and accounting regulations.
Consent: When you register or update your account preferences, you consent to our terms. For marketing communication, you can manage or opt-out at any time via your Personal Cabinet.
Legitimate Interests: To protect our website and services from fraudulent activities, brute-force attacks, and security vulnerabilities.

4. How We Share Your Data We do not sell, rent, or trade your personal data with third parties for marketing purposes. We only share your data with trusted partners under strict confidentiality agreements, including:

Delivery Services: Postal and courier services to ship and deliver your physical products.
Legal Authorities: If required by law to prevent fraud or comply with legal processes.

5. Data Retention We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy:

Account Data: Retained as long as your account remains active and enabled.
Order Records: Retained as required by law for accounting, auditing, and tax compliance.
Feedback Messages: Retained until the inquiry is resolved or as needed for business records.

6. Your Rights Under the GDPR You have specific rights regarding your personal data, which you can easily manage directly from your Personal Cabinet under the Privacy section:

Right of Access & Portability: You can download a complete copy of all your personal data and order history in a structured, machine-readable JSON format by using the "Export Data" tool in your cabinet.
Right to Rectification: You can update or correct your personal profile details (names, phone, city) at any time.
Right to Erasure ("Right to be Forgotten"): You can request the permanent anonymization of your account. Once requested, your personal data (name, email, phone, address) is completely and permanently erased from our records. To maintain financial audit integrity, order statistics are kept anonymously without any link to your identity.
Right to Restrict or Object to Processing: You can turn on/off marketing preferences and consents in your cabinet.

7. Data Security We implement appropriate technical and organizational measures to safeguard your personal data. This includes secure HTTPS encryption for all data transmissions, HttpOnly session cookies to prevent cross-site scripting (XSS) attacks, and password hashing to ensure your credentials are never exposed.

8. Children's Privacy Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will take steps to securely delete such information.

9. Contact Us For any inquiries regarding this Privacy Policy or to exercise your rights, please reach out to us using the contact details on our website.

Biogomm'age Scrub

Об'єм