1. Introduction Welcome to VIIKA BEAUTY (“we,” “our,” or “us”). We value the trust you place in us when you choose our products. We are committed to protecting your privacy and ensuring your personal data is handled with integrity, transparency, and in full compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Maltese laws.

This policy explains how we collect, use, and protect your information when you visit or make a purchase from www.viika.beauty.

2. Information We Collect We collect personal data to provide you with a seamless shopping experience. This includes:

  • Identity Data: First name, last name, and username (if you create an account).

  • Contact Data: Billing address, shipping address, email address, and telephone numbers.

  • Transaction Data: Details regarding payments to and from you, and other details of products you have purchased from us. Note: We do not store your full credit/debit card details. All financial transactions are processed by secure, third-party payment providers.

  • Technical Data: Internet Protocol (IP) address, your browser type and version, time zone setting, and operating system. This helps us ensure our website functions correctly for your device.

3. How We Use Your Data We will only use your personal data when the law allows us to. Most commonly, we use your personal data in the following circumstances:

  • Order Fulfilment: To process and deliver your order, manage payments, fees, and charges.

  • Customer Support: To manage our relationship with you, including notifying you about changes to our terms or privacy policy, and responding to your inquiries.

  • Business Improvement: To use data analytics to improve our website, products/services, marketing, customer relationships, and experiences.

  • Marketing: To send you updates about new products or special offers (only if you have explicitly opted in/consented to receive them). You may unsubscribe at any time.

4. Data Sharing & Third Parties We do not sell your personal data. To run our business efficiently, we may share your data with trusted third parties who act as “data processors” on our behalf. These include:

  • Payment Processors: To securely process your payment.

  • Logistics & Delivery Partners: To deliver your package to your door.

  • IT & System Administration Services: To host and maintain our website.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. They are only permitted to process your personal data for specified purposes and in accordance with our instructions.

5. Data Security We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. Access to your personal data is limited to those employees, agents, contractors, and other third parties who have a business need to know.

6. Data Retention We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements (such as tax laws in Malta).

7. Your Legal Rights Under the GDPR, you have specific rights regarding your personal data, including the right to:

  • Access: Request a copy of the personal data we hold about you.

  • Correction: Request correction of incomplete or inaccurate data.

  • Erasure: Request us to delete your personal data (the “right to be forgotten”), subject to certain legal exceptions.

  • Restriction: Request us to suspend the processing of your personal data.

  • Withdraw Consent: Withdraw consent at any time where we are relying on consent to process your data (e.g., marketing emails).

To exercise any of these rights, please contact us using the details below.

8. Contact Us If you have any questions about this Privacy Policy or our privacy practices, please contact us.