Data & GDPR Statement

Last updated: 10.04.2026

This Data & GDPR Statement explains how the ÇIKA Platform (“we”, “us”, “our”) collects, processes, stores, and protects your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

We are committed to ensuring the lawful, fair, and transparent use of your personal data.

 1. Data Controller

Reine OÜ
Registered in Tallinn, Estonia
Company Registration: 14845847
Email: support@cikawellness.com

 2. Personal Data We Collect

We may collect and process the following categories of personal data:

- Identity Data
- Contact Data
- Account & Profile Data
- Payment Data (processed by third-party providers such as Stripe, Apple, and Google; ÇIKA does not store or access full payment details)
- Usage Data
- Technical Data
- Marketing Preferences

3. Legal Basis for Processing (GDPR Art. 6)

We process your data based on:

- Performance of a contract
- Legitimate interests
- Legal obligations
- Consent (marketing, cookies, optional features)

 4. How We Use Your Data

Your information is used to:

- Create and manage your ÇIKA account
- Facilitate payments through third-party providers
- Provide access to memberships, services, and live classes
- Improve platform performance
- Ensure security and fraud prevention
- Send updates, notifications, and support emails

 5. Consultations

Consultations between users and independent professionals are conducted via live video sessions.

ÇIKA does not record, store, or retain video consultations.

Any information shared during consultations is exchanged directly between the user and the professional.

 6. Data Retention

We retain your personal data only as long as necessary:

- Account data — while your account is active
- Payment & tax data — 5–7 years (as required by law)
- Support data — up to 24 months
- Cookies — according to our Cookies Policy

7. International Transfers

When data is processed outside the EEA, we apply appropriate safeguards, including:

- EU Standard Contractual Clauses (SCCs)
- Adequacy decisions
- Secure and encrypted infrastructure

Our partners (Stripe, Apple, Google, Kajabi, Cloudflare) are required to comply with GDPR standards.

 8. Your GDPR Rights

You have the right to:

- Access your data
- Correct inaccurate or incomplete data
- Request deletion (“Right to be forgotten”)
- Restrict processing
- Object to certain processing
- Withdraw consent at any time
- Request data portability

To exercise your rights, contact: support@cikawellness.com

 9. Automated Decision-Making

The ÇIKA Platform does not engage in automated decision-making that produces legal or significant effects.

10. Data Security

We apply industry-level security measures, including:

- Encryption
- Secure servers
- Access controls
- Monitoring systems

11. Complaints

If you believe your rights have been violated, you may contact:

Estonian Data Protection Inspectorate (AKI)
Website: https://www.aki.ee
Email: info@aki.ee

You may also contact your local EU Data Protection Authority.

12. Contact

For any questions regarding this Data & GDPR Statement:

support@cikawellness.com