Privacy Policy

Last updated: 3 August 2026

This Privacy Policy explains how Somavera Wellness Lab ("Somavera," "we," "us," or "our") collects, uses, and shares information when you visit somavera-wellness.com, book a consultation, or otherwise interact with our services.

We are committed to protecting your privacy and handling personal data in line with the EU General Data Protection Regulation (GDPR) and applicable Maltese law.

Who we are

Somavera Wellness Lab operates this website and related wellness and skincare offerings.

Privacy contact: nikang701@gmail.com

If you have questions about this policy or how we use your data, email us at the address above.

Information we collect

Information you provide

Contact details — name, email address, and any message content when you email us or submit an enquiry
Consultation booking details — information you enter when scheduling a Skin & Mind consultation (for example through Calendly), such as name, email, preferred time, and notes you choose to share
Purchase or fulfilment details — if you order products, information needed to process and deliver your order (name, shipping address, email, and order preferences)

Information collected automatically

When you visit our website, we may collect technical data such as:

IP address, browser type, device type, and approximate location derived from IP
Pages viewed, referring URLs, and general usage patterns
Cookie and similar technology identifiers (see "Cookies" below)

We do not intentionally collect special-category health data through the public website. If you share skin, wellness, or medical information during a consultation, we use it only to provide that service and follow professional confidentiality expectations.

How we use information

We use personal data to:

Operate, secure, and improve the website
Respond to enquiries and provide customer support
Schedule and deliver consultations
Process orders, payments (via our payment providers), shipping, and returns
Send service-related messages (order updates, appointment confirmations)
Send marketing communications only if you have opted in, and with a clear way to unsubscribe
Analyse aggregated traffic so we can improve content and performance
Comply with legal obligations and protect our rights

Legal bases (GDPR) may include: performance of a contract, legitimate interests (site security, service improvement, basic analytics), consent (where required for marketing or non-essential cookies), and legal obligation.

Cookies and similar technologies

We may use:

Necessary cookies — required for the site to function (for example security or load balancing)
Analytics cookies — optional tools that help us understand how the site is used
Marketing cookies — optional tools used only if we enable advertising or remarketing features

Where required, non-essential cookies run only after you give consent. You can change browser settings to block cookies; some features may not work correctly if you do.

Sharing your information

We do not sell your personal information.

We may share data with trusted processors who help us run the business, under appropriate agreements, such as:

Website hosting and content delivery (including Velafa / cloud infrastructure providers)
Booking tools (for example Calendly) when you book a consultation
Email or customer-support tools
Payment, shipping, and fulfilment partners when you place an order
Analytics providers, if enabled

We may also disclose information if required by law, court order, or to protect the rights, safety, or property of Somavera, our clients, or others.

International transfers

Some providers may process data outside Malta or the EEA. Where that happens, we use appropriate safeguards (such as Standard Contractual Clauses or an adequacy decision) where required by law.

How long we keep data

We keep personal data only as long as needed for the purposes above, including:

Enquiry emails — typically up to 24 months after the last correspondence, unless a longer period is needed for an ongoing matter
Consultation records — for as long as needed to deliver the service and meet professional or legal retention needs
Order and invoicing records — for the period required by tax and accounting law
Marketing lists — until you unsubscribe or we delete inactive contacts

Your rights

If you are in the EEA/UK (or otherwise protected by similar laws), you may have the right to:

Access your personal data
Correct inaccurate data
Request deletion ("right to be forgotten") in certain cases
Restrict or object to certain processing
Data portability
Withdraw consent where processing is based on consent
Lodge a complaint with a supervisory authority

In Malta, the supervisory authority is the Office of the Information and the Data Protection Commissioner (IDPC).

To exercise your rights, contact nikang701@gmail.com. We may need to verify your identity before fulfilling a request.

Children

Our website and services are directed to adults. We do not knowingly collect personal data from children under 16. If you believe a child has provided us data, contact us and we will delete it where appropriate.

Security

We use reasonable technical and organisational measures to protect personal data. No method of transmission or storage is completely secure; please use strong unique passwords for any accounts you control and contact us promptly if you suspect misuse of your information.

Third-party links

Our site may link to third-party websites or tools (social platforms, booking widgets, payment pages). Their privacy practices are governed by their own policies. We are not responsible for those sites.

Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. Significant changes may also be highlighted on the website or by email where appropriate.

Contact

Somavera Wellness Lab
Email: nikang701@gmail.com
Website: somavera-wellness.com