Privacy policy

This Privacy Policy explains how Amelisa OÜ ("Imen Nails", "we", "us", "our") collects, uses, shares, and protects personal data when you visit or buy from https://imennails.eu. We sell internationally and ship to most countries.

1. Data Controller

The controller of your personal data is:

  • Legal name: Amelisa OÜ
  • Registered address: Vesivärava tn 50-201, Kesklinna linnaosa, Tallinn 10152, Harju maakond, Estonia
  • VAT number: EE102720877
  • Email: amelisacompany@gmail.com

We have not appointed a separate data protection officer or EU privacy representative.

2. Personal Data We Collect

We may collect:

  • Identity and contact details: name, billing address, delivery address, email, phone number.
  • Order details: products purchased, order number, returns, refunds, customer service messages.
  • Payment details: payment status and transaction references. Full card details are processed by our payment provider and are not stored by us.
  • Account details: login credentials, saved addresses, preferences, where account features are available.
  • Technical data: IP address, device information, browser type, pages viewed, cookie identifiers, and similar usage data.
  • Marketing preferences: consent status, email subscription preferences, and interactions with marketing messages.

3. Why We Use Your Data

We use personal data for the following purposes:

  • To process and deliver orders.
  • To take payment, prevent fraud, and manage refunds.
  • To provide customer support.
  • To manage returns, warranty claims, and complaints.
  • To operate, secure, and improve the website.
  • To send service messages about orders, delivery, account activity, and policy changes.
  • To send marketing messages where permitted by law or where you have consented.
  • To comply with tax, accounting, product safety, consumer protection, and legal obligations.

4. Legal Bases

Depending on the context, we process personal data under these GDPR legal bases where GDPR applies:

  • Contract: to sell and deliver products, manage payments, and handle customer service related to your order.
  • Legal obligation: to keep accounting records, respond to lawful requests, and meet consumer law obligations.
  • Legitimate interests: to prevent fraud, secure the website, improve our services, and manage business records.
  • Consent: for optional cookies, analytics, targeted advertising, and email marketing where consent is required.

5. Cookies And Similar Technologies

We use cookies and similar technologies to run the website, remember preferences, measure performance, and support marketing.

Non-essential cookies are used only where permitted by applicable law and, where required, after you give consent through our cookie banner. You can update your cookie preferences using the cookie banner shown on the site.

6. Sharing Personal Data

We may share personal data with:

  • Ecommerce platform provider: Shopify Inc. (ecommerce platform, payment processing, hosting).
  • Payment processors and fraud prevention providers.
  • Delivery companies, fulfilment partners, and returns providers.
  • Email, customer support, review, analytics, and marketing service providers.
  • Professional advisers, insurers, auditors, and tax/accounting providers.
  • Public authorities, courts, or regulators where required by law.

We do not sell personal data.

7. International Transfers

Some providers may process personal data outside the EU/EEA. Where this happens, we use appropriate safeguards, such as adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms.

Transfers rely on Shopify's Standard Contractual Clauses.

8. Retention

We keep personal data only for as long as necessary for the purposes described in this policy. Typical retention periods are:

  • Order and invoice records: 7 years (Estonian statutory accounting retention period).
  • Customer support messages: 24 months.
  • Marketing consent records: until withdrawn or no longer needed to evidence consent.
  • Cookie and analytics data: per each tool's default retention setting.

9. Your Rights

Subject to legal conditions and depending on your country or region, you may have the right to:

  • Access your personal data.
  • Correct inaccurate or incomplete data.
  • Delete your data.
  • Restrict or object to processing.
  • Receive a copy of your data in a portable format.
  • Withdraw consent at any time where processing is based on consent.
  • Complain to your local data protection or privacy authority.

To exercise your rights, contact us at amelisacompany@gmail.com.

10. Marketing

You can unsubscribe from marketing emails using the unsubscribe link in our messages or by contacting us at amelisacompany@gmail.com.

Withdrawing marketing consent does not affect service messages that are necessary for orders, accounts, returns, or legal notices.

11. Security

We use technical and organisational measures designed to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure.

12. Changes To This Policy

We may update this Privacy Policy from time to time. The latest version will be posted on this page with the updated date.