Privacy Policy
Introduction
Sásta Skin Health ("Sásta", "we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect when you use www.sastaskinhealth.ie or purchase our products, how we use it, who we share it with, and the rights you have. We are the data controller for the purposes of the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.
Who We Are
Sásta Skin Health, [registered address: Clonmore House, Killeshin, Carlow, County Laois, R93 T9Y9]. If you have any questions about this policy or how we handle your data, you can contact us at info@sastaskinhealth.ie.
Information We Collect
We may collect the following categories of personal data:
Identity & contact — your name, email address, phone number, billing and delivery address.
Order & payment — your purchase history and subscription details. Card details are processed securely by our payment providers; we do not store full card numbers.
Account — login details, preferences and saved items.
Communications — messages you send us, product reviews and survey responses.
Technical & usage — IP address, device and browser type, and pages viewed, collected via cookies and similar technologies.
Marketing preferences — your choices about receiving communications from us.
How We Collect It
We collect data directly from you (when you place an order, create an account, subscribe, or contact us), automatically (through cookies and analytics as you browse), and occasionally from third parties (such as our payment and delivery partners, or social media platforms if you interact with our ads).
How We Use Your Information
We process your personal data for the following purposes, each with a lawful basis under GDPR:
To fulfil, deliver and manage your orders and subscriptions — performance of a contract.
To provide customer care and handle returns and complaints — contract / legitimate interests.
To send marketing such as our newsletter and offers, where you have opted in — consent.
To improve our website, products and service — legitimate interests.
To meet our legal, tax and accounting obligations — legal obligation.
Cookies & Tracking
We use cookies and similar technologies to operate the site, remember your basket and preferences, and understand how the site is used so we can improve it. You can manage your preferences via our cookie banner or your browser settings. For more detail, please see our Cookie Policy.
Sharing Your Information
We never sell your personal data. We share it only with trusted partners who help us run our business, including our e-commerce platform (Shopify), payment providers, delivery and courier partners, email and marketing tools, and analytics providers. These partners are only permitted to process your data securely and on our instructions. We may also disclose data where required to do so by law.
International Transfers
Some of our partners may process personal data outside the European Economic Area (EEA). Where this happens, we ensure appropriate safeguards are in place, such as European Commission Standard Contractual Clauses, to protect your data to the standard required by GDPR.
Data Retention
We keep your personal data only for as long as necessary for the purposes set out in this policy. For example, order and transaction records are retained for [X years] to meet accounting and legal obligations, and marketing data is kept until you unsubscribe or ask us to stop.
Your Rights
Under GDPR you have the right to access your data; to correct inaccurate data; to request erasure; to restrict or object to processing; to data portability; and to withdraw consent at any time. To exercise any of these rights, email info@sastaskinhealth.ie. We will respond within one month.
Marketing Preferences
You can opt out of marketing communications at any time by clicking "unsubscribe" in any marketing email, or by contacting us. Opting out of marketing will not affect service messages that relate to your orders or subscription.
Data Security
We use appropriate technical and organisational measures to protect your personal data, including secure hosting, encryption of data in transit, and restricted access on a need-to-know basis. While no method of transmission over the internet is completely secure, we work hard to safeguard your information.
Children's Privacy
Our website and products are not directed at children, and we do not knowingly collect personal data from anyone under 18. In line with our philosophy, younger children should not have a skincare routine.
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites, and we encourage you to review their privacy policies.
Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or the law. The latest version will always be posted on this page along with the date it was last updated.
Contact & Complaints
If you have any questions or concerns about how we handle your data, please email info@sastaskinhealth.ie. You also have the right to lodge a complaint with the Irish Data Protection Commission (www.dataprotection.ie) if you believe we have not handled your personal data properly.
This policy is provided as a starting draft and should be reviewed by a legal/GDPR advisor before publishing. Contact:info@sastaskinhealth.ie.
