Personal data protection policy

This Personal Data Protection Policy (the “Policy”) is an integral part of the general terms of use of the website of NATURA TERAPI DOO Skopje (the “Company”), with EMBS 7368267. The Policy was adopted and confirmed by the manager of the Company on date 2019.

The website www.naturatherapy.mk (hereinafter the “Company’s website”) is administered by the Company.

The Policy was drafted and adopted by the Company in accordance with the Law on Personal Data Protection of the Republic of North Macedonia and the applicable personal data protection regulations. It covers the purposes, the manner of processing and the protection applied, the categories of data the Company collects and processes, information on data retention, how the rights of the personal data subject are exercised, and the types of protection.

What information is collected when you use the website?

When you use our website, your personal data is processed, by which you can be identified directly or indirectly.

When you use our website and want to receive a particular service through it (order, contact, subscription), you need to provide us with the categories of personal data listed below. We need this data in order to provide you with the requested service and meet your expectations as our customer.

Categories of data we may collect:

first names and last names;
a valid email address;
phone number;
delivery and/or correspondence address (city, street, number, postal code);
possible preferences (e.g. language, delivery method);
additional data (user content, form message, invoice/billing data).

If you decide to exercise your rights as described in this Policy, we may again ask you to provide some of the above data for identification purposes.

To perform the site’s functions, our information system may automatically collect technical information during standard operations (GET/POST HTTP requests, HTML, CSS and JavaScript), including:

IP address;
browser used;
preferred language settings;
type of device used to load the site;
information about your device’s operating system;
number of clicks and pages you have viewed;
which pages referred you to our site (including via social networks);
time spent on the site;
search keywords on the site;
in the case of advertising posts — number of views.

Under what conditions do we collect and process your personal data?

If you purchase goods and/or services by bank transfer, the Company may request and/or receive from you the number of the bank account (IBAN) from which the payment was made.
When payment is made by payment card, we use the services of a third party — a financial service provider. In those cases the financial service provider is an independent controller of personal data, and our website is a platform through which remote payment can be made, in accordance with that third party’s personal data protection policy. The systems through which the third party provides its services are fully controlled by it.
If you have asked to receive information about our products and/or services, we will collect the necessary personal data to send you the requested information and/or to include you in a subscription program for periodic information, if such a program is active and you have given your consent.
Your personal data may be sent to our accounting service for issuing invoices for orders placed, as well as to courier service providers with whom we have contracts and who will deliver your order to the address you provide.

Children’s personal data

Our services are not intended for persons under 18 years of age. The Company does not aim to and does not wish to collect personal data of children in connection with the services.

If the Company nevertheless receives information about a minor in connection with a request for a service or products from the website, we will not process it and will delete it, unless we are required by regulation to act otherwise.

How is information collected?

Personal data we collect through or in connection with the use of the website may be collected in the following ways:

a) the information is provided voluntarily by a user/visitor of the site (forms, order, contact);
b) the information is collected automatically through the website’s functional features;
c) through the use of “cookies” and other similar solutions to optimize display, for analysis and (with consent) for sending commercial messages.

For more information about cookies, please visit our Cookie use policy.

Legal basis for processing and retention periods

The Company uses the above information for various purposes, on the basis of the appropriate legal grounds under the Law on Personal Data Protection of the Republic of North Macedonia, namely:

Performance of a contract — processing necessary for the sale, delivery, payment, customer support and invoicing. Retention period: up to 60 months (or longer if accounting/tax regulations require it).
Ensuring site functionality — technical data (IP, browser, device) necessary for secure and proper operation. Period: up to 60 months after the user account is closed, unless a shorter period applies.
Legal obligation — official, legal or system notices, legal purposes, cooperation with competent authorities. Period: up to 60 months or as provided by a specific law.
Legitimate interest — analytics, service improvement and statistics. Period: up to 26 months.
Consent — marketing, profiling for targeted messages, newsletter subscription. Period: up to 26 months or until consent is withdrawn.

Measures for lawful processing and security

In accordance with the personal data protection regulations in North Macedonia, the Company maintains appropriate, necessary and proportionate technical and organizational measures to protect users’ data, including to prevent unauthorized access and/or misuse.

Only authorized personnel have access to personal data in our information systems. The collected data are organized in registers with limited physical and technical accessibility, with appropriate protection applied (including cryptographic protection where applicable).

Who do we share your personal data with?

The Company may share users’ personal data with:

industry-recognized analytics and advertising solutions (e.g. Google Analytics, Meta/Facebook), where applicable and with an appropriate legal basis;
courier service providers to fulfill the order;
accounting/financial service providers in order to fulfill legal obligations;
chat and customer support, when such tools are used.

Sharing with accounting providers relates to fulfilling obligations under the applicable accounting and tax regulations in North Macedonia.

We may need to hand over your personal data to administrative, judicial or other competent authorities, financial institutions or law enforcement authorities, when this is necessary under the law, for conducting disputes, or for the prevention and prosecution of criminal offenses and fraud.

Information about you may also be transferred to business partners performing contractual services for us (e.g. marketing), only on the basis of your explicit consent, where required.

Meta ad measurement (Facebook and Instagram)

We show our ads through Meta Platforms Ireland Ltd. (Facebook and Instagram). To know which ads lead to orders and to show them to people who find them useful, we send Meta data about certain events on our website:

adding a product to the cart and starting checkout: only if you have accepted cookies (“Accept”);
order placed: on the basis of our legitimate interest in measuring ads.

With the event we send: the value and products of the order; your email, phone number, first name, last name, city, country and our internal customer number, in encrypted one-way form (SHA-256), so that Meta does not see the data itself but only matches it against its own users; as well as the IP address, browser data and Meta’s identifiers from the _fbp and _fbc cookies.

Meta uses this data under its own data processing terms for businesses. We do not sell it and do not share it with other advertising networks.

You can object to this sending at any time by sending a request to web@naturatherapy.mk. You can withdraw your consent to cookies by deleting the cookies in your browser.

Your rights

In connection with the use of the website and the processing of your personal data, you have the right to:

information on who processes your personal data, for what purpose, in what form, whether it is shared, how it is stored and for how long, and whether profiling is carried out;
access to the information processed about you;
correction of inaccurate personal data;
erasure (“the right to be forgotten”), when the legal conditions are met;
restriction of processing, when the legal conditions are met;
objection to processing based on legitimate interest;
withdrawal of consent at any time, without affecting the lawfulness of processing carried out before the withdrawal;
data portability, where applicable.

During the period of restriction of processing, the data may continue to be stored by the controller, in accordance with the law.

How can you contact us?

NATURA TERAPI DOO Skopje

Address: Vasil Stefanovski St. No. 5, Skopje - Centar

Contact phone: +389 70 230 720

Email: web@naturatherapy.mk

Regarding the protection of your personal data, you can file a complaint with the Directorate for Personal Data Protection of the Republic of North Macedonia (the competent authority for personal data protection).

If you have questions or comments about this policy, you can send us a request at: web@naturatherapy.mk

Last updated: November 2026