1. Who is responsible
Adria Essence d.o.o., Pod bori 2, 1218 Komenda, Slovenia, is responsible for the personal information described in this policy. For privacy questions or requests, email adriaessence@gmail.com and use the subject Privacy request.
2. Information you provide
A personal enquiry contains your first name, surname, email, country of residence, skincare preferences, routine answers, product interests and selected quantities. It also includes your delivery country, street and house number, city and postal code, or your confirmation that the destination has no postal code.
A customer-service message contains your name, email, country, subject and question, together with any product or enquiry reference you choose to provide. We record the submission reference, date and the version of the terms and privacy notice you acknowledged.
These forms concern cosmetic preferences. Do not include diagnoses, medication lists, medical records, identity documents or payment-card information. If a question about your routine does not fit, use the available Not sure or None option rather than adding sensitive information.
3. Why we ask
Your name and email let us identify the request and reply to you. Cosmetic preferences help us discuss suitable product textures, routine steps and the areas you want to focus on. Your country helps us assess the service and delivery arrangements relevant to you.
The delivery address is used to check the destination for the personal offer you request and prepare accurate delivery details. It is not needed for a general product or support question; use Contact us if you only want information. Do not provide an address belonging to someone else without their permission.
Fields marked as required are needed to submit that form. You remain free to browse the collection without filling in a form or creating an account.
4. Legal reasons for processing
We process information needed to prepare an offer at your request or fulfil an agreed purchase under GDPR Article 6(1)(b). We use information needed to answer general service questions, prevent form abuse and protect the service under Article 6(1)(f); our interests are responding to customers and keeping the service secure.
Where information must be retained or disclosed to meet a legal obligation, Article 6(1)(c) applies. A privacy acknowledgement confirms that the notice was available to you. It does not give us unrestricted permission to use your information.
The forms do not enrol you in a newsletter. Replies and necessary follow-up questions about your own request are service communications. Any separate marketing programme would need its own clear choice and privacy information.
5. What happens when you submit
The form stores your request in our private WordPress enquiry database hosted by OVHcloud. A successful receipt confirms that the request was saved for our team to review. We also send a service acknowledgement to your email address; email delivery can be delayed or filtered by your provider.
Form answers stay in the page while you complete and review them. A saved product selection contains product identifiers and quantities; it does not store your contact details in the browser. We do not use the forms for automated decisions with legal or similarly significant effects.
6. Access, email and other recipients
Access to saved enquiries is limited to the people who need to handle the request and maintain the service. We do not sell your details or disclose them to advertising networks.
If you write directly to adriaessence@gmail.com, your correspondence is handled through Google's Gmail service and your own email provider. Google operates internationally and may process email outside the European Economic Area. Google's applicable privacy information and transfer arrangements govern its processing. Contact us for information about the email arrangements applicable to your request.
Our website and service email transport use OVHcloud. The team receives a notification in Gmail containing a reference and a link to the protected request, rather than your full form answers. If you proceed to an order, payment and delivery providers receive only the information needed for the agreed service, with their details explained before that processing begins.
We may disclose information when required by law or when necessary to establish, exercise or defend a legal claim. Any further use of a submission must have a lawful basis and appropriate privacy information.
7. How long information is kept
Saved form submissions expire after 30 days. Expired records are removed during form requests and scheduled maintenance. Use the deletion control on your receipt during the same browser session, or email us with your reference. Deleting the form record does not remove emails already sent or records we must retain for an order or legal obligation.
The server-side product selection expires after 24 hours of inactivity. Browser session preferences last for the tab session; a session restored by your browser may keep them available longer.
Correspondence you send directly by email is separate from the form database. It is kept for the time needed to handle your request and any resulting legal obligation or dispute. The form's 30-day deletion does not delete messages already sent through an email provider. Order and invoice records are subject to their applicable legal retention requirements.
8. Your rights
Depending on the legal basis and circumstances, you may request access, correction, erasure, restriction or a portable copy of your information. You can object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting processing that was lawful before withdrawal.
Email adriaessence@gmail.com to make a request. We may need proportionate information to verify that the request is yours. We normally respond within one month; if a lawful extension is necessary, we explain it within that month.
You may complain to the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, SI-1000 Ljubljana, email gp.ip@ip-rs.si, or to another competent data-protection authority. You do not have to complain to us first.
9. Security and changes
The form service uses restricted access, validation and session protections. Please keep your enquiry reference private and do not use the forms to send sensitive documents. No online service can promise absolute security.
We update this policy when the way we handle information changes. A material new purpose or service provider will be explained before the related processing where the law requires it.