Last updated: April 25 2025
1. Who We Are
Cutivara.com (“Cutivara,” “we,” “our,” or “us”) is an online directory that helps users discover licensed estheticians, skin-care services, and curated products.
2. Information We Collect
| Category | Examples | Legal Basis* |
|---|---|---|
| Account & Contact Data | Name, email address, password, phone number | Consent; Contract |
| Listing & Profile Data | Business name, license number, specialties, pricing | Legitimate Interest; Contract |
| Marketing Data | Newsletter opt-in status, preferences | Consent |
| Usage Data | IP address, browser type, pages visited, referring URL | Legitimate Interest |
| Device & Cookie Data | Session cookies, analytics cookies, cache storage | Consent (where required) |
*Under GDPR / UK GDPR.
3. How We Use Your Information
- Provide and maintain the directory, search, and booking functions.
- Send transactional emails (account verification, password reset).
- Deliver marketing communications only if you have opted in (e.g., “Early-Access” e-mails).
- Improve Cutivara through analytics and A/B testing.
- Detect, prevent, and address technical issues or fraud.
4. Sharing & Disclosure
We do not sell personal data. We share it only with:
| Recipient | Purpose | Safeguards |
|---|---|---|
| Service providers (hosting, email delivery, analytics) | Operate Cutivara | DPA / Standard Contractual Clauses |
| Payment processors (if applicable) | Process product purchases or listing fees | PCI-DSS compliance |
| Legal authorities | Where required by law or to protect rights | Court order or lawful request |
5. Cookies & Similar Tech
We use:
- Essential cookies – site login, security.
- Analytics cookies (e.g., Google Analytics) – aggregate usage stats.
- Marketing cookies – only after explicit consent.
Manage or withdraw consent via the banner or browser settings at any time.
6. Data Retention
Personal data is kept only while you have an active account or as needed to provide services, comply with legal obligations, or resolve disputes.
7. Security
We employ TLS/HTTPS, encryption at rest for sensitive data, role-based access controls, and routine penetration testing. No method of transmission is 100 % secure, so we cannot guarantee absolute security.
8. Your Rights
| Region | Rights |
|---|---|
| EEA/UK | Access, rectification, erasure, restriction, portability, objection, lodge complaint with supervisory authority |
| California (CCPA/CPRA) | Know, delete, correct, opt out of “sharing,” limit sensitive data use |
| Other | We extend similar rights worldwide where feasible |
Exercise rights by e-mailing [email protected].
9. Children
Cutivara is not directed to children under 13. We do not knowingly collect data from minors.
10. Third-Party Links
Links to external sites (brands, esthetician websites) are provided for convenience. We are not responsible for their privacy practices.
11. Changes
We may update this policy; material changes will be announced via e-mail or site notice at least 30 days in advance.
12. Contact
Questions? [email protected]