Privacy Policy
Last updated: 2026-10-07
1. Data controller
S.R.L. KATALEYA BEAUTY CONCEPT, IDNO 1026023135717, str. Burebista 68, MD-4301, Căușeni, Republica Moldova, e-mail [email — to be added], is the controller of the personal data processed through this site, in accordance with Law no. 195/2024 on personal data protection.
2. What we collect and why
- Orders: first and last name, phone, e-mail, delivery address, products ordered, payment method — to perform the contract (processing and delivering the order, issuing fiscal documents, handling returns and complaints). Basis: contract performance and legal obligations (accounting and tax). - Order tracking: order number and phone — to show you the order status. - Contact form and trade enquiries: name, contact details and message — to reply to you. Basis: our legitimate interest in answering enquiries. - Newsletter: e-mail address — only with your explicit consent, which you can withdraw at any time via the link in every e-mail. - Technical data: IP address and server logs, for site security. Basis: legitimate interest. Your language choice, bag and wishlist are stored only in your browser and are not sent to us.
3. Cookies
The site uses only strictly necessary cookies (selected language, admin session). We do not use analytics or marketing cookies. If we introduce any, we will ask for your consent first through a dedicated banner.
4. Who we share data with
Data is shared only as needed: with courier companies (delivery), the payment provider (card payments, once enabled), the site's hosting and e-mail providers (acting as processors under contract), our accountants, and public authorities where the law requires. We do not sell your data.
5. International transfers
The site is hosted on servers in the European Union. Some providers may process data outside the Republic of Moldova; where that happens we ensure appropriate safeguards are in place.
6. How long we keep data
Order data — for as long as accounting and tax law requires (currently 6 years). Contact messages — up to 2 years after resolution. Newsletter address — until you withdraw consent. Technical logs — up to 12 months.
7. Your rights
You have the right of access, rectification, erasure, restriction, portability, objection (including to marketing, at any time and without reason) and the right not to be subject to solely automated decisions. We make no automated decisions and do no profiling. Send requests to [email — to be added]; we reply within one month, free of charge. You may lodge a complaint with the National Centre for Personal Data Protection (datepersonale.md).
8. Minors
The site is intended for people aged 14 and over. We do not knowingly collect data from children below that age.
9. Security
We use an encrypted connection (HTTPS), restrict access to order data and never store card details. If a security incident affects your rights, we will inform you as required by law.
10. Changes
We may update this policy; the date of the last update is shown above.
