Everlum — Legal Hub

Who is bound: all visitors/customers of Everlum.

Age & account: online services from 13; injectable/medical services — 18+ (16–17 only with medical indication and written guardian consent).

Permitted use: no unlawful content/IP violations, security bypassing, malware, or presenting marketing as medical advice.

Contract, prices, taxes: electronic contract; prices incl. VAT; EU OSS rules apply. Maintenance downtimes possible.

IP & liability: content/software owned by Delta Invest Group OÜ or licensors; liability limits as permitted by law; consumer rights preserved.

Seller: Delta Invest Group OÜ (registry code 12346057), Liivalaia tn 40-182, 10145 Tallinn, Estonia.

Payments: bank-link and card payments are provided through the MakeCommerce payment service operated by Maksekeskus AS. The available payment methods are shown at checkout. The seller remains responsible for fulfilling the order and handling customer support.

Booking: ≥24h — free cancellation/reschedule; <24h/no-show — fee/deposit retained.

Injectables: healthcare service by a licensed provider (Terviseamet) after in-person consultation and informed consent.

Goods & delivery: delivery is offered to the destinations and by the carriers shown at checkout. The exact charge and estimated delivery time are displayed before the order is confirmed. Risk transfers according to applicable consumer law.

Controller: Delta Invest Group OÜ; data-protection contact — everlumclinic@gmail.com, +372 5566 4136; supervisory authority — Estonian Data Protection Inspectorate (AKI), Tatari 39, 10134 Tallinn.

Categories: guest or account data (first and last name, phone and/or email); request and booking data (service, practitioner, date and time, selected payment method and status); transactional notices and enquiries; health data (with explicit consent); technical logs, payments and cookies.

Purposes and legal bases (GDPR Arts 6 and 9): handling a request and creating or performing a booking or contract; securely managing schedules, resources, conflicts and operation evidence — contract, pre-contractual steps and legitimate interests; compliance with legal duties; separate consent for marketing, non-essential cookies and health data.

Guest booking and contact: an account and email or phone verification are not conditions for creating a booking. A first name, last name and at least one contact — phone or email — are sufficient. The contact is used to service the booking and provide transactional notice: by email or by manual phone contact; automated phone messaging is used only after the relevant channel is enabled. The contact is used for marketing only with separate consent.

Cookies/CMP: no non-essential cookies before consent.

Recipients: hosting, email/analytics/payment providers and AI providers receive only the data required for their service (DPAs in place). For payment initiation and confirmation, the necessary order and payment data are transmitted to Maksekeskus AS, which operates the MakeCommerce payment service and processes data under its own legal obligations. Outside EEA — SCC 2021/914 + TIA.

Retention: contact data are kept while needed for the booking, service, follow-up or dispute, then deleted. Booking records retained by law or for the defence of claims are separated from direct contact values and pseudonymised. Medical, payment and audit records are retained separately for the applicable mandatory periods; payment documents for 7 years and access or technical logs usually for 12–24 months.

Access and erasure: a request may be made using an email or phone number; to protect the data, we may verify the requester's identity. Where no other lawful duty applies, direct contact values are erased and retained records are pseudonymised. An active or future booking, unfinished notice, or mandatory medical, accounting or audit retention may limit immediate erasure of the relevant record, but does not permit using it for a new incompatible purpose.

Rights: access, rectification, erasure, portability, restriction, objection and withdrawal of consent; complaints may be submitted to the Estonian Data Protection Inspectorate (AKI).

AI assistant: informational replies; short chat logs to admin email only with separate consent.

I give explicit consent to process my health data (skin status, contraindications, before/after photos, care/injection protocols) for delivering services, maintaining my Account and post-procedure support. I may withdraw consent anytime; SCC may be used for cross-border transfers.

Applies to: botulinum toxin (Rx), HA fillers, mesotherapy; performer — physician with valid provider licence.

• Description/alternatives/off-label;
• Contraindications;
• Risks (incl. ptosis);
• Expected outcomes/temporary nature;
• Before/after photos (separate consent for marketing);
• Pre/post care; emergency contacts; age policy.

Available delivery methods, carriers, costs and estimated timelines are shown at checkout before confirmation. Tracking is provided when supported by the carrier. Payment is made through the MakeCommerce service operated by Maksekeskus AS using the bank-link or card methods displayed at checkout.

Goods: 14-day withdrawal; exception — sealed goods not suitable for return for health/hygiene reasons once unsealed (e.g., cosmetics). Refund within 14 days (we may wait for receipt/proof of return). Return shipping borne by customer unless stated otherwise.

Services: withdrawal before performance; if service starts within 14 days, explicit consent to lose the right of withdrawal after full performance. Late cancellation/no-show fee per service card.

Site content and AI assistant responses are not medical advice. Injectables are medicinal and provided based on indications.

Aim for WCAG 2.2 AA. Report barriers to support@everlum.ee — we will address them promptly.

© Delta Invest Group OÜ. All rights reserved. Trademarks belong to their owners.

If a service is legally classified as healthcare, it may be provided only by a provider holding the required valid authorisation for that service and location. Verify the specific provider and service location in the official Terviseamet MEDRE register. This page does not confirm that a particular authorisation number exists.

DSA contact: support@everlum.ee. Report manifestly illegal content via form/email (URL, description, contacts). We act under applicable law.

EU Withdrawal Form
To: Delta Invest Group OÜ, Liivalaia tn 40-182, 10145 Tallinn, Estonia, support@everlum.ee
I/We hereby withdraw from the contract for the sale of the following goods/provision of services: ____
Ordered on “__” ____ 20__ / received on “__” ____ 20__
Consumer name: ____ • Address: ____
Signature (if on paper): ____ • Date: “__” ____ 20__