Privacy Notice

This Privacy Notice explains how Marija Meskauskiene, Vilniaus 127, Siauliai, Lithuania (“we”, “us”), trading as FINALLY SMART system for PMU artists, handles personal data. We act as the data controller for the personal data described below. Contact: finnalysmart@gmail.com.

Personal data we collect and why

• Account data (name, email address, login credentials) — to create and maintain your account and give you access to the program. Legal basis: performance of a contract.
• Waitlist / marketing data (email address, consent record) — to send you information about the program. Legal basis: your consent, which you may withdraw at any time.
• Order data (order reference, product, purchase status) — to confirm your purchase and unlock access. Legal basis: performance of a contract and legal obligation.
• Support messages — to answer your questions. Legal basis: legitimate interest in supporting our customers.
• Usage and technical data (device identifiers, IP address, log and telemetry data) — for security, fraud prevention and improving the product. Legal basis: legitimate interest.

Payment card details are collected and processed by Paddle, not by us. We never see or store your full card data.

Who we share data with

• Merchant of Record — Paddle.com, for the sale of the product, payments, subscription management, invoicing and tax compliance.
• Service providers / subprocessors — hosting, database, authentication and email delivery providers acting on our instructions.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where required by law.

We do not sell your personal data.

International transfers

We are based in Lithuania (EU). Some providers may process data outside the EEA/UK. Where that happens, transfers are protected by an adequacy decision or by EU Standard Contractual Clauses.

Retention

Account and program data are kept for as long as your account is active and for up to 3 years afterwards. Transaction records are kept for as long as required by accounting and tax law (typically 10 years). Marketing data is kept until you withdraw consent. After that data is deleted or anonymised.

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time. Write to finnalysmart@gmail.com and we will respond within one month. You may also complain to the Lithuanian State Data Protection Inspectorate (VDAI) or your local supervisory authority.

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and row-level access restrictions in our database, to protect your data.

Cookies

We use essential cookies and local storage needed to keep you signed in and to run the checkout. We do not use advertising cookies. You can clear or block cookies in your browser settings, although the site may not work correctly without the essential ones.