Privacy Policy

Last updated: 7 September 2026

This Privacy Policy sets out the way PREMIUMDERMALMART handles personal information obtained through premiumdermalmart.com and through our sales, order fulfilment and customer service activities.

The Policy covers anyone whose information we process through these activities, including website users, purchasers, company representatives, people receiving deliveries and individuals who communicate with us.

Where the law requires your permission for a particular use of information, this Policy does not remove the need for us to obtain that permission.

1. Responsibility for Personal Information

PREMIUMDERMALMART operates premiumdermalmart.com and is referred to throughout this Policy as “we”, “us” or “our”.

For processing activities where we decide the purpose for which personal information is used and the manner in which it is handled, PREMIUMDERMALMART acts as the data controller.

Other companies involved in providing our services may have their own responsibilities for personal information. For example, payment companies, shipping providers and Shopify may process certain information independently under their respective privacy terms.

Privacy enquiries: info@premiumdermalmart.com
Phone / WhatsApp: +372 5360 2282

2. Information We May Process

The information we handle will depend on your relationship with us and the way you use our website or services.

This may include:

• Personal and account details: Your name, telephone number, email address, account information and communication settings.

• Billing and shipping details: Billing and delivery addresses, recipient information and any instructions necessary to complete delivery.

• Purchase information: Items purchased, quantities, previous Orders, discounts, transaction references and payment status.

• Payment and reimbursement records: Payment confirmations, bank-transfer evidence and bank information voluntarily provided when needed for a refund.

• Business or professional details: Company information, licences, professional registrations or authorisations where verification is necessary.

• Delivery and customs information: Tracking information, recipient identification, import paperwork and correspondence relating to customs clearance.

• Technical information: IP address, browser, device information, approximate IP-based location and information concerning use of our website.

• Shopping behaviour: Items viewed, cart activity, completed purchases and engagement with promotions or offers.

• Support and Claim information: Correspondence, complaints, supporting documents, photographs and videos submitted when requesting assistance or making a Claim.

• User-provided material: Reviews, testimonials, photographs or videos provided for publication or other authorised uses.

• Privacy preferences: Cookie selections, marketing choices, consent records, withdrawals and privacy-rights requests.

We try to limit collection to information that serves a genuine purpose. You should therefore avoid sending identification documents, financial information, medical details or other sensitive information unless it is actually necessary.

Where card payments are offered, the payment provider handles the relevant card credentials. Please never send full card numbers or card security codes to us through email or messaging services.

We may nevertheless receive limited transaction details from payment providers where necessary to confirm a transaction, reconcile payments or investigate a dispute.

Bank details supplied for refunds or transfer verification will also be treated as personal information and protected accordingly.

3. How We Obtain Information

Personal information can reach us through several channels.

You may provide it yourself when purchasing a Product, registering an account, communicating with us or making a Claim. We may also receive information from somebody purchasing on your behalf or identifying you as a delivery recipient or company contact.

Certain information is generated automatically when you use our website.

We may additionally receive relevant information from payment companies, delivery and fulfilment providers, professional registers, competent authorities, technology providers and social or messaging platforms through which you interact with us.

If you give us another person's information, you should disclose only what is necessary and make sure you have the appropriate authority to provide it. Where appropriate, that person should also be made aware of this Privacy Policy.

4. Purposes and Legal Grounds for Processing

Where data protection legislation requires a legal justification for processing, the justification we rely upon will depend on what we are doing with the information.

For example:

• Fulfilling an individual customer's Order, arranging payment or delivery and processing a refund may be necessary to perform a contract or take requested steps before a contract is entered into.

• Managing relationships and communications with representatives of business customers may be based on our legitimate business interests.

• Verification and statutory recordkeeping may be necessary to satisfy legal obligations.

• Reasonable fraud, security and eligibility checks may be carried out on the basis of legitimate interests where legally permitted.

• Customer-service matters, complaints and disputes may involve contractual obligations, legal requirements or legitimate interests depending on the circumstances.

• Protecting transactions, accounts and technical systems may rely on our legitimate interests in preventing fraud and maintaining security, together with any applicable legal requirements.

• Improving our operations may rely on legitimate interests where the relevant processing does not require consent.

• Optional analytics, advertising, cookies and tracking technologies will rely on consent where the law requires it.

• Promotional messages will only be sent where consent or another applicable direct-marketing permission exists.

• Identifiable testimonials and promotional materials will only be published where we have suitable permission and a lawful basis.

• Information required for legal proceedings may be processed where necessary to bring, exercise or defend legal claims.

Before relying on legitimate interests, we consider the possible effect on the individuals concerned and whether their rights should take priority.

We will not use legitimate interests simply as a substitute where the law specifically requires consent or another condition.

Some information is necessary to provide our services. Without it, we may not be able to accept or complete an Order, confirm eligibility, deliver Products or fulfil another request.

5. Shopify and Network Intelligence

PREMIUMDERMALMART uses Shopify as the technology platform for its online store.

As part of providing that platform, Shopify receives information relating to visitors and customers, including information generated or submitted while browsing our store, purchasing Products and completing checkout.

Our store has Shopify Network Intelligence enabled.

This functionality permits Shopify to combine information generated through our store with information from Shopify's wider network and other participating merchants. The resulting information may be used to provide enhanced functionality such as analytics, personalisation, advertising-related services and improvements to shopping experiences.

For some of these enhanced functions, Shopify determines how the relevant information is processed and is responsible for responding to privacy requests relating to that processing.

More information and available privacy options can be found through the Shopify Consumer Privacy Policy and Shopify Privacy Portal.

Any consent requirements and legally available opt-out choices remain applicable when these features are used.

6. When Information May Be Disclosed

Operating an online business requires us to provide certain information to other organisations. We do this only where there is a legitimate and lawful reason connected with the purposes explained in this Policy.

These organisations can include:

• Providers supplying hosting, software, communications, customer support, analytics or other technical services.

• Banks, payment companies and financial providers involved in payments, refunds, reconciliation or fraud detection.

• Warehouses, fulfilment companies, couriers and other logistics providers involved in preparing and delivering Orders.

• Manufacturers, suppliers or appropriate specialists asked to assess concerns about Product safety, authenticity, quality or conformity.

• Customs bodies, regulators and other authorities involved in import clearance or legal compliance.

• Accountants, lawyers, insurers and other professional advisers.

• Advertising or marketing providers where their involvement is compatible with applicable law and your privacy choices.

We seek to disclose no more information than is reasonably needed for the particular activity.

Companies processing information solely for us are required to have appropriate safeguards in place. Other recipients may make their own decisions regarding processing and therefore operate as separate controllers under their own privacy terms.

Information may also be disclosed where reasonably necessary to comply with enforceable legal requirements, prevent harm, investigate suspected fraud or illegal activity, pursue or defend legal claims, or facilitate a legitimate corporate sale, restructuring or transfer with appropriate safeguards.

7. Sale, Sharing and Targeted Advertising

PREMIUMDERMALMART does not sell databases or customer information to third parties for monetary payment.

Nevertheless, some privacy legislation gives words such as “sale” and “sharing” a wider legal meaning and may also regulate disclosures connected with targeted advertising.

Consequently, information exchanged through certain advertising tools or Shopify enhanced functionality could fall within these legal definitions even though PREMIUMDERMALMART is not selling customer lists for money.

If such legislation applies and provides you with an opt-out right, you may use the available privacy controls or contact us to exercise that right.

Nothing in this section means that unrelated companies are freely permitted to access your PREMIUMDERMALMART account or Order history.

8. Cookies and Related Technologies

Cookies, pixels, local storage and comparable technologies may be used by our website and our technology partners.

Some are necessary to operate essential features such as account access, checkout, shopping carts, website security and remembering privacy selections.

Others may remember preferences, help us measure website performance and visitor behaviour, or support advertising and personalised experiences.

When applicable law requires prior consent, optional technologies will not be activated until that consent has been provided.

Available cookie choices can be managed through our website's privacy or cookie controls, including withdrawing consent previously given. Your browser may provide additional controls, although restricting certain technologies can affect website functionality.

Declining optional cookies will not prevent access to the core functionality necessary to make a purchase.

Information about the technologies currently in use, including providers and relevant durations, should be available through the applicable cookie controls.

9. Promotional Communications

Marketing messages may be sent where you have agreed to receive them or where applicable legislation provides another specific permission.

You can stop receiving promotional communications at any time by selecting the unsubscribe option in an email, following the opt-out method provided through another communication channel, or contacting info@premiumdermalmart.com.

Opting out of advertising does not prevent us from sending operational messages that are necessary for matters such as Orders, payments, deliveries, Product recalls or enquiries you have made.

A limited record of an opt-out may be retained so that we can continue respecting your preference.

Your marketing choices are independent of your acceptance of our Terms and Conditions.

10. Verification and Identification Documents

Certain Products, transactions or circumstances may require us to confirm professional status, business information, identity details or relevant authorisations.

When conducting these checks, we aim to obtain only the information genuinely required, restrict access to those who need it, avoid retaining entire documents when recording the verification result is sufficient, and keep verification information only for as long as there is a legitimate reason.

Where possible, unrelated details should be removed or obscured before a document is sent to us. If we require a complete document, we will explain why.

11. Product Complaints and Health-Related Information

Investigating certain Product complaints may require photographs of treatment results, medical documentation or other health-related information.

Do not send identifiable patient files or unnecessary medical details through normal email or messaging channels. Contact us first so that we can determine what evidence is actually required and how it should be provided.

If sensitive information genuinely needs to be processed, we will establish the necessary legal grounds, use the information only for the relevant complaint, safety matter or legal issue, restrict who can access it and use anonymised or redacted material whenever this is sufficient.

Permission from one customer does not automatically permit that customer to disclose another person's medical information.

Where appropriate and legally permitted, relevant evidence may need to be shared with a Product manufacturer, specialist, insurer, lawyer or competent authority.

Material supplied as evidence for a complaint will not subsequently be used for advertising without separate appropriate permission.

12. Reviews and Promotional Content

Information included in a review, testimonial, photograph or video submitted for publication may become publicly accessible.

You should not include information identifying another person, particularly sensitive information, unless you have the necessary permission.

We will obtain the appropriate consent or permission before using identifiable photographs, videos or testimonials for promotional purposes.

Where our right to publish material depends on your consent, you may withdraw that consent by contacting us. In some circumstances, it may not be practically possible to retrieve material that was already lawfully distributed or independently copied by other parties, and we will explain any such limitations.

13. Processing Across Borders

Our commercial operations depend on service providers and fulfilment arrangements located in different countries.

As a result, information may be handled outside the country in which you reside, including in locations used by Shopify, logistics providers, couriers and other companies necessary to provide our services.

Privacy protections are not identical in every country.

Where the law places restrictions on an international transfer, we will use an appropriate legal solution. This may include an officially recognised adequacy decision, approved contractual protections such as standard contractual clauses, another authorised transfer mechanism or a legally available exception.

Further safeguards will be implemented where they are required.

You can contact us for additional information regarding applicable transfer protections. Copies or explanations may be subject to reasonable redactions necessary to protect confidential information.

14. Retention of Personal Information

We do not intend to keep personal information indefinitely. Retention depends on why the information was collected and any legal requirements that continue to apply.

For example:

• Customer and account information may remain while an account is active or while required to provide services and satisfy recordkeeping requirements.

• Order, invoice, payment and refund information may be retained to meet tax, accounting, transaction and legal-claim obligations.

• Professional verification information is retained according to the reason for verification and applicable regulatory requirements.

• Delivery and customs records may be necessary until delivery and clearance matters are completed and relevant dispute or recordkeeping periods have passed.

• Product complaints and safety information may be retained for investigation, traceability, regulatory reporting and potential claims.

• Marketing preferences generally remain until changed, while limited opt-out information may continue to be stored to prevent unwanted marketing.

• Technical and analytics information is retained according to the purpose and configured lifespan of the relevant technology and applicable consent rules.

• Records of privacy requests may be maintained where necessary to show that requests were handled correctly.

Longer retention may be necessary while a legal dispute or investigation is active or where an enforceable legal requirement applies.

Once there is no longer a legitimate reason to retain information, it should be deleted or anonymised. Temporary copies may continue to exist within routine backup systems until those backups expire.

A request for deletion does not override a legal requirement that obliges us to preserve particular records.

15. Protecting Your Information

We apply technical and organisational precautions intended to reduce the risk of personal information being lost, misused, accessed improperly or disclosed without authorisation.

The measures used depend on the type of information and level of risk and may include controlled access, protected systems, confidentiality requirements and contractual safeguards with service providers.

Despite these precautions, no online service, communication method or data-storage system can offer absolute security.

You should keep your account credentials secure and should not send full card credentials or unnecessary sensitive information through ordinary support channels.

If a data breach occurs, we will evaluate the incident and take the notification and response measures required under applicable law.

16. Privacy Rights

Privacy rights differ according to the law that applies to you.

Depending on your circumstances, you may be entitled to ask what information we process, obtain a copy of it, correct inaccurate information, request deletion, restrict particular uses, receive eligible information in a portable format, or object to processing carried out on legitimate-interest grounds.

You may also have rights to object to direct marketing, withdraw consent, opt out of legally defined sale, sharing or targeted advertising, exercise protections concerning significant automated decisions, and complain to an appropriate privacy regulator.

These rights may be subject to legal limitations or exceptions. Where required, we will explain why a particular request cannot be granted or can only be fulfilled in part.

Where EU or UK privacy legislation applies, an objection to the processing of information for direct-marketing purposes will be respected.

17. Privacy Rights in the United States

Residents covered by an applicable US state privacy statute may have additional rights regarding information processed by PREMIUMDERMALMART.

Depending on the law, these may include obtaining details about information collected and its sources, purposes and recipients; requesting correction or deletion; opting out of legally defined sale, sharing or targeted advertising; restricting certain processing of sensitive information; appointing an authorised agent; appealing certain decisions; and exercising rights without unlawful discriminatory treatment.

Where required, we will also recognise valid opt-out preference mechanisms such as Global Privacy Control.

The availability of these rights depends on the particular law and circumstances. Including this section does not mean that every US state privacy statute applies to PREMIUMDERMALMART or to every customer transaction.

18. Making a Privacy Request

You may submit a privacy request through:

Email: info@premiumdermalmart.com
Phone / WhatsApp: +372 5360 2282

Tell us what you are requesting and provide enough information for us to identify the records concerned.

Where necessary, we may reasonably verify your identity or confirm that an authorised agent has authority to act for you. Verification requirements will be proportionate and will not be used simply to make exercising privacy rights unnecessarily difficult.

Privacy requests are generally processed without charge unless applicable law permits otherwise.

For requests governed by EU or UK GDPR, our usual response period is one month. Where the law permits additional time because a request is particularly complex or numerous requests have been received, we will provide the required notice and explanation within the initial response period.

Where the CCPA applies, eligible requests concerning access, correction or deletion are generally subject to a 45-day response period, with extensions available where legally permitted. Other rights, including certain opt-outs, may have different deadlines.

We will comply with any other statutory response period that applies.

If we are unable to satisfy all or part of your request, we will provide an explanation and, where applicable, information about available appeal or complaint procedures.

19. Information Concerning Minors

Our website and services are intended for adults rather than individuals below the age of 18.

Please contact us if you believe that a minor has submitted personal information through our services.

We will consider the circumstances and take any steps required by law, which may include deleting the information. Limited records may nevertheless be retained where there is a lawful requirement or genuine safeguarding reason.

20. Third-Party Websites and Platforms

Our website may direct you to external websites, and you may also communicate with us through third-party messaging or social-media services.

Those providers may independently collect and use information under their own privacy policies.

We recommend reviewing their privacy information before supplying information that is sensitive or unnecessary.

21. Revisions to This Privacy Policy

This Policy may be amended when our services, business practices or legal obligations change.

Whenever we revise it, the date displayed at the beginning of the Policy will be updated. Where legislation requires additional notification of a significant change, we will provide it.

If a new activity requires your consent, changing the wording of this Policy will not itself constitute that consent.

22. Contact and Complaints

PREMIUMDERMALMART
Email: info@premiumdermalmart.com
Phone / WhatsApp: +372 5360 2282

When relevant, please indicate that your communication concerns a privacy matter.

You are entitled to approach an appropriate data protection authority without first submitting a complaint to PREMIUMDERMALMART. Where EU or UK privacy rules apply, this may include the regulator responsible for the place where you normally live, where you work, or where the alleged privacy violation occurred.