Privacy Policy

Last updated: January 26, 2026

This Privacy Policy explains how ANew OÜ collects, uses, stores, and protects your personal data when you visit or make a purchase from www.anewbeauty.eu.

We respect your privacy and are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Data Controller

The data controller responsible for processing your personal data is:

ANew OÜ
Registration number: 16138195
Legal address: Vana-Võidu pst 7-11, Vana-Võidu küla, 70108 Viljandi vald, Viljandi maakond, Estonia
Website: www.anewbeauty.eu

If you have any questions about this Privacy Policy or how we process your personal data, please contact us through the contact details provided on our website.

2. Website Platform

Our website and online store are hosted and operated through Squarespace.

Squarespace provides the platform that allows us to display our website, sell our products, process store activity, manage checkout, and operate our online business.

When you visit or use our website, Squarespace may process certain information on our behalf, including technical data, website usage data, order-related information, and information necessary to operate the website and online store.

Squarespace may collect information such as:

browser and device information;
IP address;
pages visited;
website usage information;
order and checkout information;
information submitted through forms, checkout, or customer accounts;
cookie and analytics information.

Squarespace processes this information in accordance with its own privacy practices and applicable data protection laws.

3. Personal Data We Collect

We may collect the following personal data when you use our website, place an order, contact us, subscribe to our emails, or interact with our store:

full name;
email address;
phone number;
billing address;
shipping address;
order details;
payment status;
delivery information;
customer support messages;
marketing preferences;
information submitted through forms on our website;
any information you choose to provide when contacting us.

We do not store your full payment card details.

4. Information Collected Automatically

When you visit our website, certain information may be collected automatically through Squarespace, cookies, analytics tools, or similar technologies.

This may include:

IP address;
device type;
browser type and version;
operating system;
referral source;
pages viewed;
time spent on the website;
interactions with the website;
approximate location based on IP address;
cookie information.

This information helps us operate the website, improve user experience, understand website performance, prevent fraud, and improve our marketing.

5. How We Use Your Personal Data

We use your personal data for the following purposes:

to process and fulfill your orders;
to deliver products to you;
to process payments and refunds;
to send order confirmations and delivery updates;
to provide customer support;
to respond to questions, complaints, or requests;
to manage website forms and customer communications;
to operate and improve our website;
to prevent fraud, abuse, and security issues;
to comply with accounting, tax, legal, and regulatory obligations;
to send marketing emails, only where permitted by law;
to measure the performance of our website, products, emails, and marketing campaigns.

6. Legal Bases for Processing Personal Data

We process your personal data only when we have a lawful basis under GDPR.

Depending on the situation, we process your personal data based on:

6.1 Performance of a contract

We process your personal data when it is necessary to fulfill your order, deliver products, process payment, provide customer support, or manage your purchase.

6.2 Legal obligation

We process certain data to comply with legal obligations, including accounting, tax, consumer protection, and regulatory requirements.

6.3 Consent

We may rely on your consent for activities such as email marketing, newsletter subscriptions, and non-essential cookies.

You can withdraw your consent at any time.

6.4 Legitimate interests

We may process personal data where necessary for our legitimate business interests, such as website security, fraud prevention, service improvement, analytics, and business performance measurement, provided that your rights do not override those interests.

7. Payments

We use Stripe as a payment service provider.

When you choose Stripe at checkout, your payment is processed by Stripe. Stripe may collect and process personal data necessary to complete your payment, verify the transaction, prevent fraud, and comply with legal obligations.

This may include:

your name;
email address;
billing information;
shipping information;
transaction details;
payment method information;
fraud prevention and security information.

We do not receive or store your full Stripe login details, full card number, or full financial account details.

Stripe processes your personal data in accordance with its own Privacy Statement.

8. Email Marketing

If you subscribe to our newsletter or marketing emails, we may send you emails about our products, beauty tips, offers, launches, discounts, and brand updates.

We may use Mailchimp, Squarespace Email Campaigns, or another email marketing tool available through Squarespace to manage email subscriptions and send marketing emails.

For email marketing, we may process:

your email address;
name, if provided;
subscription status;
marketing preferences;
email engagement information, such as opens and clicks;
purchase-related information, if connected to our email marketing system.

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in our emails or by contacting us through our website.

We will not sell your email address or personal data.

9. Cookies and Similar Technologies

Our website uses cookies and similar technologies to operate the website, improve user experience, understand website traffic, and support marketing activities.

Cookies may be used for:

essential website functionality;
shopping cart and checkout operation;
remembering preferences;
website analytics;
performance measurement;
fraud prevention and security;
email and marketing performance;
advertising and retargeting, if enabled.

Some cookies are essential for the website to function. Non-essential cookies, such as analytics or marketing cookies, may require your consent depending on applicable law.

You can manage cookies through the cookie banner or cookie settings on our website, where available. You can also manage or disable cookies through your browser settings.

Please note that disabling certain cookies may affect website functionality.

10. Analytics and Advertising

We may use analytics and advertising tools provided by Squarespace or third-party service providers to understand how visitors use our website and how our marketing performs.

These tools may collect information about website visits, page views, traffic sources, device information, and interactions with our website.

11. Sharing Your Personal Data

We may share your personal data with trusted third parties where necessary to operate our business and provide our services.

These may include:

Squarespace, our website and e-commerce platform provider;
Stripe, our payment service provider;
Mailchimp or Squarespace Email Campaigns, if used for email marketing;
shipping and courier companies;
IT and hosting service providers;
analytics and marketing service providers;
accounting and legal service providers;
public authorities where required by law.

We only share personal data where necessary and require service providers to handle personal data securely and lawfully.

We do not sell your personal data.

12. International Data Transfers

Some of our service providers, including Squarespace, Stripe, Mailchimp, or other technology providers, may process personal data outside the European Union or European Economic Area.

Where personal data is transferred outside the EU/EEA, we rely on appropriate legal safeguards, such as adequacy decisions, standard contractual clauses, data processing agreements, or other legally approved transfer mechanisms.

13. Data Retention

We keep your personal data only for as long as necessary for the purposes described in this Privacy Policy.

In general:

order and transaction data may be kept for accounting, tax, and legal purposes;
customer support messages may be kept as long as necessary to resolve your request and protect our legal interests;
marketing data is kept until you unsubscribe or withdraw your consent;
technical and analytics data is kept for a limited period depending on the tools used;
account data is kept until you request deletion, unless we are legally required to retain certain information.

When personal data is no longer needed, we will delete it or anonymize it.

14. Data Security

We take reasonable technical and organizational measures to protect your personal data from unauthorized access, loss, misuse, alteration, or disclosure.

Our website is operated through Squarespace, which provides hosting and technical infrastructure for the website. Payments are processed through Stripe, and we do not store full payment card details.

However, no method of internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

15. Your Rights

Under GDPR, you have rights regarding your personal data. These may include the right to:

access the personal data we hold about you;
request correction of inaccurate or incomplete personal data;
request deletion of your personal data;
restrict the processing of your personal data;
object to certain processing activities;
withdraw consent at any time, where processing is based on consent;
request data portability;
lodge a complaint with a data protection authority.

If you are located in Estonia, you may contact the Estonian Data Protection Inspectorate if you believe your data protection rights have been violated.

To exercise your rights, please contact us through the contact details provided on our website.

We may need to verify your identity before responding to your request.

16. Children’s Privacy

Our website and products are not intended for children.

We do not knowingly collect personal data from children without appropriate parental or guardian consent. If you believe that a child has provided us with personal data, please contact us so we can take appropriate action.

17. Customer Reviews and User Content

If you submit a review, testimonial, comment, image, or other content, we may display it on our website, social media, or marketing materials.

Please avoid submitting sensitive personal information in reviews or public comments.

If you want us to remove a review or user-submitted content containing your personal data, please contact us.

18. Links to Other Websites

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices, content, or security of third-party websites. We recommend that you read the privacy policies of any third-party websites you visit.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website, legal obligations, or data processing practices.

The updated version will be posted on this page with a new “Last updated” date.

Your continued use of the website after changes are posted means that you have read the updated Privacy Policy.

20. Contact Information

If you have any questions about this Privacy Policy or how we process your personal data, please contact us through the contact details provided on our website.

ANew OÜ
Registration number: 16138195
Website: www.anewbeauty.eu