This Privacy Policy provides essential information about the purposes, methods of processing, and security of your personal data as a user of the website: www.mila-scott.com (hereinafter referred to as the “Site”). By reviewing the Privacy Policy, you will learn who is the administrator of your personal data, what personal data is collected by the Site, for what purposes it is used, and how it is protected.

§1. Basic Information

The administrator of your personal data is: Bogumiła Kosowska (known as Mila Anna Scott), a business owner registered with the Central Information and Economic Activity Register under the name Bogumiła Kosowska www.mila-scott.com, located in Edinburgh, EH4 4GL, 3 Craigroyston Grove, UTR 2756333751.

Contact with the Administrator is possible via:

Email: mila.anna.scott@gmail.com
Phone: +44 7305546556
You can familiarize yourself with the terms of electronic services here: www.mila-scott.com/store regulations

§2. Data Processing Principles

The Administrator processes personal data according to the following principles: based on a legal basis and in accordance with the law (legality); honestly and fairly (fairness); transparently for the person to whom the data relates (transparency); for specific purposes and not “just in case” (minimization); no more than necessary (adequacy); with care for the accuracy of data (accuracy); no longer than necessary (temporality); ensuring appropriate data security (security).

§3. Purposes, Legal Bases, and Scope of Data Processing

Your data will be processed for:

Contact purposes, to respond to your message sent directly via email or through the form, based on the legitimate interest of the Administrator related to the need to provide you with a response.
Marketing purposes, if you subscribe to the newsletter, to create and manage a user account for you.
To fulfill your order, based on the concluded sales agreement.
For the purpose of allowing you to comment on materials posted on our website.
For the purpose of managing our corporate profile on social media platforms (such as Facebook/Instagram) in accordance with the rules defined by the owners of the respective medium and informing about our products, promotions, and other news related to our activities, which we consider our legitimate interest.
For technical purposes using cookies (technical cookies), based on the legitimate interest of the Administrator related to the proper operation and functioning of the Site.
For statistical and analytical purposes, if you have consented to the use of cookies for analytical purposes (analytical cookies).
For marketing purposes, if you have consented to the use of cookies for marketing purposes (marketing cookies).
We process your data to the extent that:

If you send us a message via email or through the form, we will process the data contained in that message voluntarily. You can request the deletion of this data at any time.
If you subscribe to the newsletter, we will process your email address. Newsletter subscription is voluntary, and you can opt-out at any time.
In case of creating a user account, we will process the data provided in the registration form, especially your name, email address, phone number, address, and gender. Providing your name, surname, and email address is a condition for creating a user account.
If you make a purchase on the Site, we will process your name, address, phone number, email address, and other data provided in the order form, necessary to fulfill our obligations under the sales agreement.
If you decide to publish a comment on the Site, we will process your name and email address. Providing us with this data is voluntary, and you can delete your comment at any time.
If you like or otherwise engage with our profile on social media (e.g., Facebook), we will process the data you provided in that medium and to which we have access. To end the processing, you can unsubscribe from our profile. Other data that the Administrator processes includes IP addresses and other data stored in cookies. You decide to what extent we can use cookies with your data. Providing us with this data is voluntary, and you can change your preferences at any time. You can do this in your web browser or by deleting stored cookies from our Site.

External Partners’ APIs: Our website may use APIs (application programming interfaces) provided by external partners to integrate various functionalities, such as maps, analytical services, advertising, or social media. Using these APIs may result in creating additional cookies or using existing cookies to process user data. External partners may store and process this data in accordance with their privacy policies.

§4. Data Recipients and Intention to Transfer Data to Countries outside the EEA or an International Organization

Recipients of your personal data include:

The entity providing software supporting user accounts.
Online payment intermediaries whose services we use.
If you subscribe to the newsletter, your data will be transferred to the entity managing our newsletter.
If you comment on the site, your data will be transferred to the entity managing the comment module.
If you consent to marketing cookies, your data stored in cookies will be transferred to our advertising partners.
If you consent to analytical cookies, your data stored in cookies will be processed by the entity providing software for analyzing traffic on our site (e.g., Google Analytics).
Your data is not transferred to countries outside the EEA or international organizations, except for the partners mentioned below:

Google Inc. based in the USA for traffic analytics on the site using Google Analytics and providing additional features (such as Google Maps, Google Search Console) related to the proper functioning of the site and displaying search results. See how Google processes and protects your data. This browser add-on allows you to manage the scope and level of access to data collected by Google Analytics.
Google Inc. based in the USA for advertising and measuring its effectiveness in the Google Ads system. See how Google processes and protects your data. Here you can manage your preferences and information in the Google advertising system.
Facebook Inc. based in the USA for account management and access to data on social media services (Facebook, Instagram), advertising, and measuring their effectiveness related to the installation of the Facebook pixel on the site and the Conversion API. See how Facebook processes and protects your data.

§5. Data Storage Period

We cannot specify a single period for which we will process your data.

If you provide us with your data in a message sent via email, through the form, or via social media, on which we have our corporate profiles, we will process your data until you request the deletion of that data or object to the processing, and also if we consider that we have fulfilled the legitimate interest of the Administrator.
If you subscribe to the newsletter, we will process your data until you withdraw your subscription.
If you decide to create a user account, we will process your data until you delete that account.
Data provided to us in connection with a placed order and the sale of digital content are processed for 6 years to fulfill our tax obligations.
If you comment on any of our materials, we will process your data until you or we delete your comment.

§6. User Rights

In connection with the processing of your data, you have the following rights:

Access to your data and the right to correct, delete, or restrict processing.
The right to data portability.
The right to object.
The right to withdraw consent to data processing at any time and in any form, unless the processing of your data is necessary for the performance of a contract

between you and the Administrator.
If you believe that your data is being processed unlawfully, you can file a complaint with the supervisory authority.
To exercise your rights, contact us using the contact details provided in §1. We may refuse to fulfill your request if this would violate the rights and freedoms of others.

§7. Profiling

Your data will not be processed in an automated manner, including in the form of profiling, which would entail legal effects or similarly significantly affect you.

§8. Final Provisions

The Administrator reserves the right to change the Privacy Policy if it is required by applicable laws or changes in the processing of your data. You will be informed about any changes in a visible and understandable manner.

The Administrator processes personal data in accordance with the provisions of generally applicable law, and the content of the Privacy Policy complies with the requirements set out in the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as “GDPR”).