Privacy Policy

NITLINK SOLUTIONS LIMITED (also referred to as “Company”) has prepared this privacy statement to inform you about how we collect, use, and protect your personal data. This privacy statement applies to all personal data collected by the Company for the online services we offer. In this context, the Company is regarded as the ‘Controller’ as defined in the Personal Data Protection Act.

If you visit our website, you automatically provide certain data. What information we receive from you and store depends on how you use the GraceAcademy.skin website. You can read more about the following topics below:

  1. What personal data are processed, for what purposes, what legal basis is there for the processing, and with whom do we share the data?
    • If you use the website
    • If you subscribe to the newsletter or request informational material
    • If you shop in our webshop
    • If you use our customer service
    • If you post a review of a product
  2. How are your data protected?
  3. How long are your data stored?
  4. Access to, rectification and amendment of your data, and other rights you have
  5. Secure payments and transaction data
  6. Contact details and amendments to the policy
  1. What personal data are processed, for what purposes are the data used, and with whom might they be shared?

The Company records various personal data in the context of our service provision. What data are involved depends on how you use our website. You can use our website in the following ways:

If you subscribe to the newsletter or request informational material:

When you subscribe to a newsletter from the Company or ask us to send informational material, your personal data are used to inform you about our products and services.

Data processed:

  • First name and surname
  • Email address

Purpose:

  • To deliver the newsletter or informational material

Legal Basis:

  • Consent

Shared with:

  • Third parties that manage our mailing lists and send the newsletters

If you shop in our webshop:

You do not need to register as a customer to place an order via our website. You personally enter the data we need to carry out your order and can change this data yourself at any time.

Data processed:

  • First name and surname
  • Email address
  • IP address
  • What products you have ordered

Purpose:

  • To process your orders
  • To improve our online services, products, and browsing experience

Legal Basis:

  • Performance of a contract

Shared with:

  • Partners who improve your online shopping experience
  • Partners who handle the payment
  • Partners who provide the database for our website

If you post a review of a product:

If you wish to post a review or give feedback on our customer service or products, you can do this on the website.

Data processed:

  • Your name (or the fictional name you want displayed with the review)
  • Email address
  • The feedback you provided or the content of your review
  • The number of stars you gave our product

Purpose:

  • To show other customers your feedback
  • To find a solution for any problem you may have raised

Legal Basis:

  • Consent

Shared with:

  • Partners who manage the website
  • Customer Care, who may be able to help you with a complaint

If you use the customer service:

If you contact us, for instance, by asking customer service a question via info@GraceAcademy.skin, telephone, social media, or post, we use your personal data to respond to your question.

Data processed:

  • First name and surname
  • Email address

Purpose:

  • To respond to your queries and improve our service provision

Legal Basis:

  • Performance of a contract

Shared with:

  • Partners who help us provide and perform our customer service
  1. How are your data protected?

Company understands that storing your personal data securely is extremely important. The data stored in our database are protected via the usual electronic security techniques, in accordance with the applicable data security standards.

  • Our websites and web applications are secured by SSL certificates. You can see this from the green padlock icon to the left of the URL in your browser’s address bar. All data you send and receive via our website are encrypted and cannot be read by third parties.
  • The exchange of data between our websites and our processing partners also takes place via secure connections.

GDPR and Security Measures:

  • We adhere to GDPR principles, ensuring lawful, fair, and transparent processing of personal data.
  • We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including pseudonymization and encryption of personal data.

Strong Customer Authentication (SCA) and PSD2 Compliance:

  • We comply with PSD2 requirements, which enhance consumer rights and security for online payments.
  • Strong Customer Authentication (SCA) is implemented to ensure secure payment processes.
  1. How long are your data stored?

Company stores your data for no longer than permitted by law and no longer than necessary for the purposes for which your data are processed. The duration of data storage depends on the nature of the data and the purposes for which they are processed.

  1. Access to and rectification of your data and other rights you have:

a) Access to, rectification, and erasure of your data:

You can request an overview of the personal data we have on file for you. If the information is incorrect or storing the information violates legislation, we will rectify or erase it at your request. Requests can be submitted at any time by emailing info@GraceAcademy.skin. We will normally respond within 3 days.

b) Objecting to data processing:

You can object to the processing of your data at any time by emailing info@GraceAcademy.skin. We will normally respond within 3 days.

c) Data portability:

You have the right to receive the personal data you provided to us in a usable format for transfer to another controller. Requests can be made by emailing info@GraceAcademy.skin, and we will normally respond within 3 days.

d) Revoking permission granted earlier:

You can revoke permission to process your personal data at any time by emailing info@GraceAcademy.skin. We will normally respond within 3 days.

e) Complain to a supervisory authority:

You can report concerns about our privacy practices to the relevant data protection authority.

5. Secure Payments and Transaction Data

We use trusted third parties to process payments on our website. These third parties comply with stringent security standards to ensure the protection of your payment information.

Data processed:

  • We do not process or store any payment data. Payments to our website are processed via a third-party service provider. You enter your credit card or bank account details only on these secure pages.

Purpose:

  • To securely process your payments

Legal Basis:

  • Performance of a contract

Shared with:

  • Trusted third-party payment processors

6. Contact details and amendments to the policy:

For questions or comments about this privacy statement, contact us at:

Email: info@GraceAcademy.skin

Company may amend this Privacy Policy from time to time if new developments occur or if deemed necessary.