{"id":3,"date":"2026-01-19T13:11:09","date_gmt":"2026-01-19T12:11:09","guid":{"rendered":"https:\/\/naylu.ie\/?page_id=3"},"modified":"2026-04-17T19:32:47","modified_gmt":"2026-04-17T18:32:47","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/naylu.ie\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Privacy Policy<\/h1>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

1. General Information<\/h2>
  1. This policy applies to the Website operating at the URL: https:\/\/naylu.ie\/<\/strong><\/li>
  2. The Website operator and the Data Controller is: NAYLU Cosmetics.<\/strong><\/li>
  3. The operator’s contact email address: info@naylu.ie<\/strong><\/li>
  4. The Operator is the Controller of your personal data with regard to data provided voluntarily on the Website.<\/li>
  5. The Website uses personal data for the following purposes:
    • Handling enquiries submitted via the contact form<\/li>
    • Preparing, packaging, and shipping goods<\/li>
    • Providing ordered services<\/li>
    • Presenting offers or information<\/li><\/ul><\/li>
    • The Website collects information about users and their behaviour in the following ways:
      1. Through data entered voluntarily into forms, which is then stored in the Operator’s systems.<\/li>
      2. Through cookies saved on users’ end devices.<\/li><\/ol><\/li><\/ol>

        2. Data Protection Methods<\/h2>
        1. Login pages and personal data entry points are protected at the transmission layer (SSL certificate). This means that personal data and login credentials entered on the Website are encrypted on the user’s device and can only be read by the destination server.<\/li>
        2. User passwords are stored in hashed form. The hashing function is one-way \u2014 it cannot be reversed, which is the current standard for storing user passwords.<\/li>
        3. To protect data, the Operator performs regular backups.<\/li>
        4. An important element of data protection is the regular updating of all software used by the Operator for processing personal data, which in particular means regular updates of software components.<\/li>
        5. Both the server and the website itself are additionally secured with advanced security solutions, including various firewalls, WAF protections, and data masking methods.<\/li><\/ol>

          3. Hosting<\/h2>
          1. The Website is hosted (technically maintained) on servers operated by: SEOHOST<\/strong>.<\/li>
          2. Hosting company registration details: SEOHOST Sp. z o.o., ul. Obornicka 330, 60-689 Pozna\u0144, Tax ID (NIP): 9721323212, REGON: 520718284, KRS: 0000939910<\/strong><\/li>
          3. The hosting company:
            • applies measures to prevent data loss (e.g. disk arrays, regular backups),<\/li>
            • applies adequate fire protection measures at processing locations (e.g. specialised fire suppression systems),<\/li>
            • applies adequate measures to protect processing systems against sudden power failures (e.g. dual power supply lines, generators, UPS systems),<\/li>
            • applies physical access controls at data processing locations (e.g. access control, surveillance),<\/li>
            • applies measures to ensure appropriate environmental conditions for servers as components of the data processing system (e.g. environmental monitoring, specialised air conditioning systems),<\/li>
            • applies organisational measures to ensure the highest possible degree of protection and confidentiality (training, internal regulations, password policies, etc.),<\/li>
            • has appointed a Data Protection Officer.<\/li><\/ul><\/li>
            • The hosting company maintains server-level logs to ensure technical reliability. The following information may be recorded: