1. Data Controller
The data controller is:
Ekaterina Andreevna Baskakova
Status: Self-employed individual applying the Professional Income Tax regime
Taxpayer ID (INN): 616802838295
Email: info@madamkrasota.ru
Phone: +7 908 181-68-92
Address: 92/1 Sodruzhestva St., Rostov-on-Don, Russia
Creative Factory is a digital project by Madam Krasota.
2. Personal data we may process
Depending on how you interact with the website, we may process:
- your name and other information you voluntarily provide;
- email address;
- phone number, if provided;
- information about your order and purchased digital product;
- payment identifier, amount and payment status, as well as other payment-related information provided to us by the payment service where necessary to fulfil your order;
- customer-support messages and related correspondence;
- technical information automatically processed when you use the website, which may include IP address, browser and device information, date and time of access, server logs and cookies, to the extent such information is actually processed by the technical systems used by the website.
The controller does not independently store customers' full bank card details.
3. Purposes of processing
Personal data may be processed for the following purposes:
- creating and fulfilling orders;
- confirming payments;
- providing access to purchased digital products;
- creating and maintaining individual download links;
- identifying an order when providing customer support;
- providing technical and customer support;
- handling inquiries, claims, cancellations and refunds;
- confirming the scope of a Personal Tattoo License;
- preventing abuse and unauthorized distribution of digital products;
- maintaining the security and proper operation of the website;
- complying with applicable legal obligations;
- protecting the legitimate rights and interests of the controller and customers.
Personal data is not used for marketing emails without a separate lawful basis or appropriate consent where required.
4. Legal bases for processing
Personal data is processed where an appropriate legal basis exists, including:
- where processing is necessary to enter into or perform a contract with the customer;
- where processing is required to comply with legal obligations;
- the data subject's consent where consent is required;
- other grounds permitted by applicable law.
Where a particular type of processing requires consent, such consent will be obtained separately in accordance with applicable requirements.
5. Payments and payment services
Creative Factory uses third-party payment service providers to process payments. The payment methods and payment provider available for a particular transaction may depend on the customer's location and the payment options available at the time of purchase.
During payment, certain information may be entered by the customer directly within the payment service and processed by the relevant payment-service operator in accordance with its own terms and privacy documentation.
Creative Factory may receive information necessary to identify and fulfil the order, including a payment identifier, transaction amount and payment status, together with other information actually provided through the payment integration.
Creative Factory does not independently store customers' full bank card details, including full card numbers or card security codes.
6. Sharing personal data
Personal data may be disclosed to third parties only to the extent necessary for the relevant processing purposes, including:
- payment and banking organizations involved in processing a payment;
- hosting and technical infrastructure providers;
- service providers involved in operating the website or fulfilling an order where such disclosure is necessary;
- public authorities and other parties where disclosure is required by law.
The controller does not sell users' personal data to third parties.
Where the use of an external service involves transferring personal data outside the Russian Federation, such transfer will be carried out only where there is a lawful basis and in accordance with applicable requirements governing cross-border transfers of personal data.
7. Cookies and technical information
The website may use cookies and other technical mechanisms necessary for website functionality, preservation of user settings, security and proper operation.
The server may also automatically record technical information relating to requests made to the website.
If Creative Factory later introduces separate analytics, advertising or other technologies requiring additional notice or consent, appropriate information and consent mechanisms will be added to the website.
8. Data retention
Personal data is retained no longer than necessary for the purposes for which it is processed, unless a different retention period is required by law or is necessary for contract performance, transaction records or protection of the parties' lawful interests.
When the processing purposes have been achieved or the relevant legal basis ceases to apply, processing will cease and personal data will be deleted, destroyed or anonymized within the periods and in the manner required by applicable law, unless another lawful basis requires or permits further retention.
9. Data security
The controller takes necessary legal, organizational and technical measures to protect personal data against unauthorized or accidental access, destruction, alteration, blocking, copying, disclosure, distribution and other unlawful processing.
Access to personal data is limited to the extent necessary to perform the relevant functions.
10. Your rights
Subject to applicable law, you may have the right to:
- obtain information about the processing of your personal data;
- request correction of inaccurate or incomplete information;
- request blocking or deletion of personal data where legally applicable;
- withdraw consent where processing is based on consent;
- object to unlawful processing;
- contact the controller regarding the processing of your personal data;
- exercise other rights provided by applicable law.
Requests regarding personal data may be sent to info@madamkrasota.ru.
Your request should contain enough information to identify the data and interaction to which the request relates. Where necessary, the controller may request information reasonably required to verify the identity of the requester and prevent unauthorized access to another person's data.
11. Children's personal data
Creative Factory is not specifically intended to collect personal data from minors.
If the controller becomes aware that a minor's personal data has been provided without an appropriate lawful basis or the consent of a legal representative where such consent is required, appropriate measures will be taken in accordance with applicable law.
12. Changes to this Policy
This Policy may be updated when applicable law, the services used by Creative Factory, data-processing practices or website functionality change.
The current version will be published on this page. The date of the latest update appears at the beginning of the Policy.
13. Contact
For questions regarding personal data and privacy:
Creative Factory by Madam Krasota
Ekaterina Andreevna Baskakova
Email: info@madamkrasota.ru
Phone: +7 908 181-68-92