privacy policy

PRIVACY POLICY – CLIN BEAUTY

This Privacy Policy explains how Clin Beauty ("we", "the store", "the operator") collects, uses, and protects the personal data of visitors and customers.

Website: clinbeauty.shop
Email: contact@clinbeauty.shop

Clin Beauty complies with data protection legislation:
Regulation (EU) 2016/679 (GDPR) and all applicable national rules.

1. Personal Data Collected

We collect the following categories of data:

🔹 1.1. Data provided directly by the customer

  • First and last name
  • Email address
  • Phone number
  • Delivery address
  • Billing address
  • Payment method
  • Ordered products
  • Data entered when creating an account

🔹 1.2. Automatically collected data

  • IP address
  • Device, browser, operating system
  • Website browsing history
  • Cookies (necessary + anonymous for analytics)
  • Preferences and usage behavior

🔹 1.3. Data collected for payment processing

Our processors (Stripe / Shopify Payments / PayPal) may collect:

  • card number (encrypted)
  • transaction token
  • IP address
  • anti-fraud checks

Clin Beauty does NOT store or have access to card data.

2. Purposes of Data Use

We use data for:

  • processing and delivery of orders
  • payment management and transaction security
  • communications regarding order status
  • creating customer accounts
  • support and technical assistance
  • marketing and newsletter (only with consent)
  • improving the website experience
  • compliance with legal obligations

3. Legal Bases (GDPR)

  • Contract performance (Art. 6(1)(b))
  • Legitimate interest (Art. 6(1)(f)): fraud prevention, service optimization
  • Consent (Art. 6(1)(a)) for newsletter and marketing
  • Legal obligation (Art. 6(1)(c)): invoicing, accounting

4. Who We Share Data With

Data may be shared with:

  • payment processors (Stripe, Shopify Payments, PayPal)
  • courier company FAN Courier/Fedex/DPD
  • Shopify, as an e-commerce platform
  • IT, emailing, hosting providers
  • authorities, only when legally required

We do not sell or transfer personal data to third parties for commercial purposes.

5. Data Storage

Data is stored in accordance with EU legislation.

Periods:

  • Order data: 10 years (legal obligation)
  • Newsletter data: until consent is withdrawn
  • Customer account data: until account deletion
  • Cookies: between 1 and 24 months

6. User Rights (GDPR)

You have the following rights:

  • right of access
  • right to rectification
  • right to erasure ("right to be forgotten")
  • right to restriction of processing
  • right to data portability
  • right to object
  • right to withdraw consent
  • right to lodge a complaint with ANSPDCP (Romania)

Requests should be sent to:
📧 contact@clinbeauty.shop

7. Data Security

Clin Beauty implements technical and organizational measures:

  • HTTPS secure connections
  • encryption of sensitive data
  • Shopify Level 1 PCI DSS security
  • restricted access to internal accounts
  • periodic backups

8. Cookies

The website uses:

  • Necessary cookies (functionality)
  • Analytical cookies (Google Analytics, Shopify Analytics)
  • Marketing cookies (only with user consent)

Users can manage cookie preferences through the banner on the site.

9. Policy Changes

We reserve the right to update this policy without prior notice.
The current version is displayed on the site.

10. Contact

For questions regarding data protection:
📧 contact@clinbeauty.shop