Privacy Policy

1.1. This Policy applies to all website visitors, customers, newsletter subscribers, product subscription users, and individuals who contact us via the website, phone, email, or messengers.

1.2. By using the website, placing an order or subscription, registering a personal account, subscribing to our newsletter, or leaving a review, you confirm that you have read this Policy, have been informed about your rights and the purpose of data processing, and provide your consent to the processing of your personal data under the terms of this Policy.

1.3. If you do not agree with this Policy, please do not provide us with personal data and do not use the website functions that require it.

1.4. We process data transparently, only to the extent necessary for specified purposes, and take measures to protect it.

2.1. Data you provide yourself:

• contact details: surname, name, phone number, email address;
• delivery data: city, address, carrier's branch or parcel locker number;
• order and subscription data: products, amounts, dates, payment status, subscription frequency, purchase history;
• personal account data: login email, saved addresses, settings;
• for sole proprietorships and legal entities: name, EDRPOU or RNOKPP code, invoice details;
• reviews, ratings, photos, and texts you publish on the website;
• answers in the skincare quiz (skin type, skin concerns, preferences);
• content of inquiries to customer support, partnership forms, or resumes.

2.2. Data collected automatically: IP address, device type, browser, operating system, language, approximate location by IP, pages you view, items in the cart, referral source, date and time of visit. Cookies and similar technologies are used for this (Section 8).

2.3. Payment data. We do not receive or store your bank card number, expiration date, or CVV code. These are processed by payment services and banks. We receive only information about the payment result, amount, and for subscriptions — a secure card token and the last 4 digits.

2.4. Skin condition data. Answers in the quiz regarding skin type and concerns are used only to recommend products. These are not medical data, and we do not provide diagnoses. Do not include information about your health in the quiz or inquiries that is not necessary for skincare recommendations.

3.1. Performance of a contract (offer and subscription terms):

• processing, confirmation, payment, and delivery of orders;
• processing subscriptions, automatic charges, reminders about the next delivery;
• managing your personal account and loyalty discount program;
• returns, exchanges, review of claims.

3.2. Your consent:

• marketing newsletters via email, SMS, and messengers about new products, promotions, and useful materials;
• publication of your reviews;
• analytical and advertising cookies;
• reviewing resumes and cooperation proposals.

3.3. Legitimate interests of the Seller: protecting the website from fraud and abuse, analyzing website performance and improving service, responding to your inquiries.

3.4. Compliance with legal requirements: accounting and tax records, issuance of financial documents, responding to lawful requests from government authorities.

4.1. We do not sell your personal data. We transfer it only to the extent necessary to perform a specific task:

• Carriers (Nova Poshta, Ukrposhta, Meest Poshta, Rozetka Delivery, courier services) — name, phone, address, or branch for delivery.
• Payment services and banks — for processing payments, installment plans, refunds, and automatic subscription charges.
• Online store platform Shopify — the website operates on the Shopify platform, whose servers store data on orders, customers, and subscriptions.
• Services for managing orders and customers (CRM, accounting, customer support, review service, newsletter services).
• Analytics and advertising services (e.g., Google, Meta) — anonymized or pseudonymized data about visits, if you have consented to the relevant cookies.
• Government authorities — only in cases and in the manner provided by law.

4.2. Our partners process data based on our instructions or their own privacy policies and are required to ensure its protection.

5.1. Some of our services, including the Shopify platform, analytics and newsletter services, store data on servers outside of Ukraine (in European Union countries, the USA, Canada, and others).

5.2. Such services ensure an adequate level of personal data protection. By consenting to this Policy, you agree to the cross-border transfer of your data for the purposes stated in Section 3.

• Order data and financial documents — for the period required for accounting and tax records, as a rule, at least 3 years after the year of the order.
• Personal account and subscription data — for as long as the account exists or the subscription is active, and subsequently for the period required for record-keeping and reviewing potential claims.
• Marketing newsletter data — until consent is withdrawn or you unsubscribe.
• Customer support inquiries — up to 3 years after they are processed.
• Candidate resumes — up to 1 year, unless you have agreed to a longer period.
• Cookies — according to the expiration period of each file (Section 8).

After the storage period expires, the data is deleted or anonymized.

7.1. In accordance with Article 8 of the Law of Ukraine "On Personal Data Protection", you have the right to:

• know what data we process, where it was obtained, for what purpose, and to whom it is transferred;
• access your data;
• request correction of inaccurate or outdated data;
• request deletion of data if it is processed unlawfully or is no longer needed, and delete your personal account;
• object to processing or restrict it;
• withdraw consent at any time, in particular by unsubscribing from newsletters via the link in the email;
• know the mechanism of automatic data processing and be protected from automated decisions that have legal consequences for you;
• file a complaint with the Commissioner for Human Rights of the Verkhovna Rada of Ukraine or to a court.

7.2. To exercise your rights, email care@skinexi.com from the address you used on the website, or send a letter to our postal address. Specify your name, email, phone, and the nature of your request. We may ask you to verify your identity to avoid transferring data to third parties.

7.3. We respond to data access requests within 30 calendar days. If processing is based on a contract or law, deletion of certain data (e.g., data about paid orders) is only possible after the mandatory storage period has expired.

8.1. Cookies are small text files that the website stores in your browser. They help remember your cart, language, account login, and understand how people use the website.

8.2. We use:

• necessary — for the cart to function, order placement, login, and security. Without them, the website will not function;
• functional — remember your language and settings;
• analytical — show which pages are visited and how the website performs;
• marketing — help show relevant advertising and evaluate its effectiveness.

8.3. Analytical and marketing cookies are installed only with your consent, which can be changed in the cookie banner or on the "Privacy Settings" page. You can also delete or block cookies in your browser settings, but then some website features may not work correctly.

8.4. More about Shopify platform cookies: shopify.com/legal/cookies.

9.1. Service messages (order confirmation, delivery status, subscription charge reminders, receipts) are always sent because they are required for the performance of the contract.

9.2. Marketing emails and messages are sent only with your consent. You can unsubscribe via the link in each email, in your personal account, or by emailing care@skinexi.com.

10.1. We use a secure connection (HTTPS), restrict access to data only to those employees who need it for their work, and work only with reliable services that have their own security measures.

10.2. No method of data transmission over the internet is completely secure. Do not share your password or confirmation codes with anyone and do not send full card details in emails or messengers. We never ask for them.

10.3. If you suspect that a third party has gained access to your account, contact us immediately.

11.1. The website is intended for adults. Individuals aged 14 to 18 may use the website and make purchases with the consent of parents or other legal representatives.

11.2. We do not knowingly collect data from children under 14. If you believe a child has provided us with their data, please contact us and we will delete it.

The website may contain links to social networks, marketplaces, and partner websites. We are not responsible for their privacy policies. We recommend reading them before providing your data.

We may update this Policy. The new version is published on this page with the date indicated. We notify registered customers and subscribers by email of any significant changes that affect your rights.

Private Entrepreneur Khan Daryna Andriivna, RNOKPP 3628409384
Address: 76026, Ivano-Frankivsk region, Ivano-Frankivsk, 164 Hetmana Mazepy St.

Email regarding personal data: care@skinexi.com
Phones: +38 (050) 551-47-03, +38 (096) 551-47-03, +38 (073) 551-47-03
Website: skinexi.ua