Privacy Policy

Privacy Policy

Last updated: 31 October 2026

This Privacy Policy explains how Celurelle ("we", "us") collects and uses personal data when you interact with our Instagram account (@celurelle) and our website celurelle.com.

1. Who we are
Celurelle is operated by JoTi Commerce OÜ, Sepapaja 6, 15551 Tallinn, Estonia.
Contact: support@celurelle.com

2. What data we collect
When you comment on one of our Instagram posts or Reels, or send us a direct message, we receive from Instagram (Meta):
- your Instagram username and Instagram-scoped user ID
- the text of your comment or message, and its ID
- the date and time of the comment or message

We do not receive your password, email address, phone number or any data from your private account content.

3. How we use it
We use this data only to:
- reply to your comment or message, including sending you a direct message with the product link you asked for (for example, when you comment a keyword such as "link")
- avoid sending you the same message more than once
- answer questions and provide customer support

We do not use this data for advertising profiles, and we do not sell it.

4. Legal basis (GDPR)
We process this data based on our legitimate interest in responding to people who contact us or ask for information (Art. 6(1)(f) GDPR), and, where you request a link or information, to take steps at your request (Art. 6(1)(b) GDPR).

5. Who we share it with
- Meta Platforms (Instagram), which provides the messaging and comments service
- our hosting provider, which stores the minimal records described above
We do not share your data with anyone else, unless required by law.

6. How long we keep it
We keep records of comments and messages we responded to for up to [90 days], then delete them. Messages remain in our Instagram inbox as long as Instagram keeps them, unless you or we delete the conversation.

7. Your rights
Under the GDPR you can ask us to access, correct or delete your data, object to its processing, or ask for a copy of it. You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee).

8. Data deletion
To have your data deleted, send us a direct message on Instagram (@celurelle) or email [your email] with your Instagram username and the request "delete my data". We will delete all records linked to your account within 30 days and confirm when done.

9. Changes
We may update this policy. The date at the top shows the latest version.