top of page

Privacy Policy

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information in compliance with the EU General Data Protection Regulation (GDPR).

​

1. Who We Are

Company name: LoveCards (our official business name found in the Finnish business register) 3349485-2
Our address: Pähkinärinteentie 21 B 45, 01640 Vantaa
Email: Colorsworkbeauty@gmail.com
Data Controller: Jouni Lötjönen

​

2. What Personal Data We Collect

We collect the following personal data when you use our website or purchase a color analysis service:

  • Full name

  • Email address

  • Uploaded photos (for color analysis)

  • Payment details (processed securely via a third-party provider)

  • IP address and device/browser data (for analytics and security)

 

3. Legal Basis for Processing

We process your data based on the following legal grounds:

  • Consent – when you provide us with information for analysis 

  • Contract – to deliver our color analysis service to you.

  • Legal obligations – where required by law (e.g., tax regulations).

 

4. How We Use Your Data

We use your personal data to:

  • Provide you with a personalized color analysis report

  • Communicate with you regarding your order

  • Improve our website and services

  • Maintain internal records and comply with legal obligations

 

5. How Long We Store Your Data

We retain your data only as long as necessary:

  • Uploaded photos and questionnaires: stored for up to 12 months, unless you request deletion sooner

  • Email and name: stored until you unsubscribe or request deletion

  • Payment data: not stored by us, handled securely by our payment provider

 

6. Sharing Your Data

We never sell your personal data. We only share it with:

  • Our team and authorized personnel for analysis

  • Service providers (e.g., payment processors, email services) under strict data processing agreements

  • Legal authorities if required by law

All third-party services we use comply with GDPR standards.

​

7. Your Rights Under GDPR

  • Access the personal data we hold about you

  • Correct or update any inaccurate information

  • Request deletion of your personal data (“right to be forgotten”)

  • Withdraw consent at any time

  • Restrict or object to certain processing

  • Data portability (request a copy of your data in a structured format)

  • Lodge a complaint with your local data protection authority

​

10. Security

We use appropriate technical and organizational measures to secure your data, including encrypted storage and secure communication protocols (HTTPS).

​

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page.

bottom of page