Privacy policy

1. Introduction

Quentaris LTD (“we”, “us”, “our”) operates next-skin.net. We are committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679).

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have under the GDPR.

2. Data Controller

The data controller responsible for your personal data is:

Quentaris LTD

Email: support@next-skin.net

Website: https://next-skin.net

3. Data We Collect

We collect the following categories of personal data:

Identity Data: Full name.
Contact Data: Email address.
Transaction Data: Purchase history, order numbers, and payment status. We do not store full card details — these are handled by our payment processors.
Technical Data: IP address, browser type, time zone, device and operating system information.
Usage Data: Pages visited, actions taken, and how you interact with our website.
Communications Data: Messages you send us via email or our support channels.

4. How We Collect Data

We collect personal data through:

Direct interactions — when you register, make a purchase, or contact us.
Automated technologies — cookies, web beacons, and server logs.
Third-party providers — payment processors and analytics services.

5. Legal Basis for Processing (GDPR Article 6)

We process your personal data on the following legal grounds:

Contract Performance (Art. 6(1)(b)): To fulfill your order and deliver your purchased products.
Legal Obligation (Art. 6(1)(c)): To comply with applicable EU and member state laws (e.g., VAT, anti-fraud, consumer protection).
Legitimate Interests (Art. 6(1)(f)): To prevent fraud, maintain security, and improve our services.
Consent (Art. 6(1)(a)): For marketing communications, where you have opted in. You may withdraw consent at any time.

6. How We Use Your Data

We use your personal data to:

Process and fulfill your orders.
Send order confirmations and deliver digital keys.
Provide customer support.
Detect and prevent fraud or unauthorized activity.
Comply with legal and regulatory obligations.
Improve our website and services.
Send marketing emails where you have opted in (unsubscribe at any time).

7. Data Sharing

We do not sell your personal data. We may share it only with trusted third parties where necessary:

Payment Processors: To handle secure transactions.
Email Service Providers: To deliver your order and communications.
Analytics Providers: To understand website usage (data is anonymized or pseudonymized where possible).
Public Authorities: Where required by EU or member state law.

All third-party processors are contractually bound to handle your data in compliance with the GDPR.

8. International Data Transfers

If we transfer your personal data outside the European Economic Area (EEA), we ensure adequate protection is in place through Standard Contractual Clauses (SCCs) approved by the European Commission, or other lawful transfer mechanisms.

9. Cookies

Our website uses cookies to enhance your experience:

Essential Cookies: Required for core functionality (e.g., session management, shopping cart).
Analytics Cookies: To track usage and improve our website (e.g., anonymized analytics).
Marketing Cookies: To serve relevant content — only with your explicit consent.

You can manage your cookie preferences via our cookie consent banner or your browser settings. Disabling certain cookies may affect website functionality.

10. Data Retention

We retain your data only as long as necessary:

Order and transaction records: up to 7 years (for tax and legal compliance).
Account data: for as long as your account is active, plus a reasonable period after closure.
Marketing data: until you unsubscribe or withdraw consent.

11. Your Rights Under the GDPR

You have the following rights regarding your personal data:

Right of Access (Art. 15): Request a copy of the data we hold about you.
Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data.
Right to Erasure (Art. 17): Request deletion of your data, subject to legal retention obligations.
Right to Restrict Processing (Art. 18): Request that we limit how we use your data.
Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format.
Right to Object (Art. 21): Object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent (Art. 7(3)): Withdraw consent at any time where processing is consent-based.

To exercise any of these rights, contact us at support@next-skin.net. We will respond within 30 days.

12. Data Security

We implement appropriate technical and organizational security measures to protect your personal data, including SSL/TLS encryption, access controls, and regular security reviews. No internet transmission is 100% secure, but we take all reasonable precautions.

13. Children’s Privacy

Our website is not directed at individuals under 18. We do not knowingly collect personal data from minors. If we become aware of such data, we will delete it promptly.

14. Complaints

If you are unsatisfied with how we handle your data, you have the right to lodge a complaint with the supervisory authority in your EU member state of residence.

A full list of EU data protection authorities is available at:

https://edpb.europa.eu/about-edpb/about-edpb/members_en

15. Changes to This Policy

We may update this Privacy Policy periodically. The “Last Updated” date at the top of this page will reflect any changes. We encourage you to review this policy regularly.

16. Contact