Privacy policy

Version dated 3 October 2026. This policy describes the processing of personal data when you visit stylebyveronica.com, purchase a digital guide, receive the file, subscribe to the newsletter or contact support.

1. Who is responsible for your data

The controller of personal data is LearnDo OÜ, registration code 16818398, VAT number EE103013266. Address: Harju maakond, Tallinn, Mustamäe linnaosa, Kadaka tee 42b, 12915, Estonia. For privacy enquiries and to exercise your rights: support@stylebyveronica.com. Telephone: +49 160 2459904.

2. Data we receive

For a purchase: email, name and billing address provided through Stripe; product, amount, currency, payment time and status; payment and order identifiers, available payment-method and card-country information; refund or dispute information. To document the purchase terms, we retain the text and version of the acknowledgements, time, IP address, browser information and available request-country indicator.

For file delivery: the relationship between the order and the guide version, access expiry, secure link and email-sending results. For subscriptions: email, subscription status, request and confirmation times, consent version, unsubscribe events and sending identifiers. A daily IP-address hash is used to protect the form. When you contact us: contact details, correspondence and materials you attach. Do not send card details or documents that are not needed to resolve your enquiry.

When you visit, servers and infrastructure providers process technical request data, including IP address, time, page address, browser and diagnostic information. Additional advertising and analytics data depend on your cookie choices. Data come from you, your browser, Stripe and the services that deliver emails and operate the website.

3. Purposes and legal bases

Processing purchases, verifying payment, delivering the PDF and providing order support are necessary to enter into and perform the contract — Article 6(1)(b) GDPR. Recording transactions and meeting mandatory accounting and tax requirements are based on Article 6(1)(c).

Protecting forms and payments against abuse, diagnosing failures, evidencing the transaction terms and defending rights in disputes are based on LearnDo OÜ's legitimate interests — Article 6(1)(f) GDPR. Our interests are service security, fraud prevention and the ability to demonstrate fulfilment of our obligations. You may object to this processing on grounds relating to your situation.

The newsletter and additional advertising or analytics tracking are based on separate consent — Article 6(1)(a) GDPR. Newsletter consent is not a condition of purchase. This policy provides information about processing and does not replace separate consent where it is required.

4. Payment and receiving the guide

Payment takes place on Stripe's secure page. Our website does not receive or store the full card number or CVC. Stripe and the selected payment service process payment information under their own rules, including fraud prevention and their own obligations. We receive the information needed to verify and record the order.

After payment confirmation, the file is available on the order page; an access link is sent by email. For new orders, access lasts 7 days from payment verification. Links directly to the file are short-lived and do not extend that period. Link expiry does not delete order records or a PDF already saved on your device. Do not share your personal link with others.

5. Newsletter

The newsletter covers new guides and other products, launches, when bookings open for personal styling, and news from Veronica. You must confirm your subscription through an email from support@stylebyveronica.com. The confirmation link lasts 24 hours. Without confirmation, the address does not become an active subscriber. A purchase alone does not subscribe you to marketing emails.

You may withdraw consent through the newsletter's unsubscribe link or by emailing support@stylebyveronica.com. Opting out of marketing does not cancel a purchase or prevent necessary order messages. Withdrawal does not affect the lawfulness of earlier processing.

6. Cookies and advertising services

Necessary cookies save preferences and provide secure administrator access. Meta Pixel loads on the main page only after advertising consent: it sends technical information and a page-view event to Meta for advertising measurement and audience creation. The website does not send the buyer's email or a purchase event through the pixel. Meta may associate this information with its users and use it for advertising profiling.

Google Analytics is provided for in the website settings; its current connection status is shown on the Cookie information page. Analytics does not load without the corresponding consent. Optional categories are off by default. You can change your choice through Cookie settings. Refusal does not prevent a purchase. Details, cookie names and durations are on the cookies page in the menu.

7. Who receives data

The service uses Vercel for hosting and private order-record storage; Supabase for the subscriber database and private PDF storage; Resend for service emails; and Stripe for payments. Staff and contractor access is limited to support and maintenance tasks. Accountants, advisers and competent authorities may receive information necessary for accounting, legal requirements and the protection of rights.

With advertising consent, data are also received by Meta Platforms Ireland Limited and related Meta companies. When analytics is connected and you consent, Google Ireland Limited and related Google companies receive data. Payment and advertising services may act as independent controllers for their own purposes; their policies apply in addition to this one.

8. International processing

Using a European storage region does not mean all processing takes place exclusively within the EEA. International providers and their subprocessors may process data, including in the USA. The published terms of Vercel, Supabase and Resend provide contractual international-transfer mechanisms, including EU standard contractual clauses; an EU adequacy decision may apply to qualifying recipients. The applicable mechanism depends on the recipient and transfer. You can request recipient information and a copy of applicable safeguards at support@stylebyveronica.com.

9. Retention periods

Accounting source documents are retained for 7 years after the end of the financial year in which the transaction is recorded. Where law requires longer retention for a particular transaction, that period applies. This does not mean all technical or marketing data must be kept for 7 years.

Active subscription data are used until consent is withdrawn or the newsletter ends. After unsubscribing, a minimal opt-out record is needed to prevent sending from restarting without new consent. Consent evidence and dispute correspondence may be retained until the applicable limitation period ends and, if proceedings have started, until they conclude. The subject of the enquiry, applicable limitation period and need for evidence are taken into account.

The validity of a subscription confirmation link (24 hours) or purchase access (7 days) is not an automatic record-deletion period. In the current system, link expiry alone does not delete the record. Technical-log retention depends on diagnosis of the particular failure or incident and the provider's retention settings. To ask how long a particular record is kept or request deletion, contact support@stylebyveronica.com.

10. Your rights

Where provided by the GDPR, you may access your data and obtain a copy, correct inaccuracies, and request erasure or restriction of processing. Portability applies to data you provided that are processed automatically on the basis of consent or contract. Erasure may be limited by document-retention duties or the need to defend rights.

You may object to processing based on legitimate interests for reasons relating to your situation. You may object at any time to direct marketing, including related profiling; that processing will stop. Consent can be withdrawn without cancelling a completed purchase.

To exercise your rights, email support@stylebyveronica.com. If we have reasonable doubts, we may request only the information needed to verify your identity. A response is normally provided free of charge within one month. For complex or numerous requests, this may be extended by two further months; we will explain the reason within the first month.

11. Complaints

You may lodge a complaint with Andmekaitse Inspektsioon: www.aki.ee, info@aki.ee, Tatari 39, 10134 Tallinn, Estonia. You may also contact the supervisory authority in the country of your habitual residence, work or the alleged infringement and seek a judicial remedy. Contacting us first is not a prerequisite for a complaint.

12. Required data and automated decisions

Without an email and necessary payment information, we cannot process a purchase and deliver the file. Newsletter subscriptions and advertising cookies are voluntary. The website does not create a buyer account or make solely automated decisions about the buyer with significant legal effects. Payment services' payment and risk checks are governed by their own terms and policies.

13. Policy updates

When processing changes, we will update this page and its version date. For a new purpose requiring consent, we will request it separately. Material changes do not remove your rights. Send data-related questions, including about your messages or images published on the website, to support@stylebyveronica.com.

Contentsquare — website behaviour analytics (added 04.10.2026)

Only after analytics consent does Contentsquare collect clicks, scrolling, device, browser and homepage-visit information to create heatmaps and session recordings. This helps identify difficult-to-use website elements. Form, input-field, dialog and review content is masked before transmission. We do not send buyer emails, order numbers or purchased-file links to Contentsquare, and do not connect it on payment, download, subscription-confirmation or administrator pages.

The service uses first-party cookies: _cs_id for up to 13 months and _cs_s for up to 30 minutes; other technical Contentsquare cookies may be used. Refusal does not prevent buying or subscribing. Withdraw consent through Cookie settings at the bottom of the website: collection stops and accessible analytics cookies are removed. Withdrawal does not delete previously collected data. For processing and deletion enquiries: support@stylebyveronica.com. Provider and processing details: https://contentsquare.com/privacy-center/.