Aladin Beauty is the controller of your personal data for the purposes described in this Privacy Policy, except where this Privacy Policy states that another party is responsible for a specific type of processing.

Aladin Beauty
Satijnbloem 45
3068 JP Rotterdam
The Netherlands
E-mail: info@aladinbeauty.nl
Telephone: +31 108920186
CoC (KvK): 98784412
VAT: NL868641704B01

Depending on how you use our website and services, we may process the following categories of personal data:

• Identification and contact data: such as your name, billing address, delivery address, e-mail address, telephone number and account details.
• Order and transaction data: such as products ordered, order history, cart contents, shipping method, delivery information, invoice details, refunds and payment status.
• Payment-related data: such as payment method and transaction references. Payment processing is generally handled by external payment providers.
• Communication data: such as messages you send to us by e-mail, contact form, chat, social media or telephone.
• Technical and usage data: such as IP address, browser type, device information, website interactions, log data and approximate location derived from IP.
• Marketing preference data: such as newsletter subscriptions, consent preferences, and interactions with our marketing communications.
• Fraud prevention and security data: such as indicators relevant to account, payment or order security.

We collect personal data:

• directly from you, for example when you place an order, contact us, create an account or subscribe to our newsletter;
• automatically, when you visit and interact with our website through cookies, pixels, logs and similar technologies, subject to applicable consent requirements;
• from service providers and partners involved in payment, delivery, fraud prevention, analytics, marketing or website operations;
• from Shopify and apps or integrations enabled on our store, where relevant to the operation of our webshop.

We process your personal data only where we have a valid legal basis to do so, including performance of a contract, compliance with legal obligations, our legitimate interests, or your consent where required.

• To process and deliver your orders and manage payments, shipments, returns, refunds and customer service.
• To manage your customer relationship, including responding to questions, complaints and requests.
• To operate, maintain and secure our webshop, including technical administration, fraud prevention and troubleshooting.
• To improve our website, products and services through analytics, service optimisation and performance monitoring.
• To send service communications, such as order confirmations, shipping updates, and important account or policy notices.
• To send marketing communications and personalized promotions where you have consented or where otherwise permitted by law.
• To comply with legal and regulatory obligations, including tax, accounting, and consumer law requirements.

Our webshop is hosted on Shopify. Shopify provides the e-commerce platform that allows us to operate our store, process orders, manage the checkout experience, and support the technical operation of our website.

This means that personal data you submit to our store may be processed by Shopify on our behalf in order to host, operate and improve the store and the services connected to it.

In addition, if Shopify enhanced services or similar Shopify features are enabled on our store, Shopify may process certain data about your interactions with our store for its own purposes, as described in Shopify’s Consumer Privacy Policy. Where Shopify is responsible for that processing, rights requests relating to Shopify’s own processing can be exercised through Shopify’s Privacy Portal.

Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/consumers

Shopify Privacy Portal:
https://privacy.shopify.com/

We only share personal data where this is necessary for our services, our legal obligations, or our legitimate business operations.

• Shopify and website technology providers for store hosting, store operation, apps, support, and technical services.
• Payment service providers to process payments, refunds, and payment-related security checks.
• Shipping and logistics partners to pack, dispatch, and deliver your order.
• IT, security, and fraud prevention providers to protect our store, systems and customers.
• Analytics and marketing partners where enabled on our store and, where required, based on your consent.
• Professional advisers and authorities where necessary for legal compliance, accounting, dispute handling or law enforcement requests.

Where third parties process personal data on our behalf, we aim to ensure that appropriate contractual and security measures are in place.

Our website may use cookies, pixels, tags and similar technologies to keep the website functioning, remember preferences, understand usage, measure performance, prevent fraud and support advertising or remarketing activities.

Some of these technologies are strictly necessary for the website to function. Others are optional and are used only where consent is required and has been provided.

Depending on the tools enabled on our store, this may include technologies provided by Shopify and third-party providers for analytics, advertising, marketing automation, customer service or reviews.

Some of our service providers may process personal data outside your country or outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we aim to ensure that appropriate safeguards are in place, such as an adequacy decision or Standard Contractual Clauses, where required by applicable law.

We do not keep personal data longer than necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Order, invoice, and transaction data: retained as long as necessary for order fulfillment, customer service, legal compliance, and accounting obligations.
• Customer service communications: retained for as long as reasonably necessary to handle your request, complaint, or service history.
• Marketing and newsletter data: retained until you unsubscribe, withdraw consent, or we otherwise stop using the data for that purpose.
• Technical and security data: retained for as long as necessary for website operation, security, fraud prevention and evidence purposes.

We take reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration and destruction. Access to personal data is limited to persons who need it for their role.

However, no security method is completely infallible, and we cannot guarantee absolute security.

Our website and services are not intended for children, and we do not knowingly collect personal data directly from children where doing so would require parental consent under applicable law. If you believe a child has provided us with personal data, please contact us so that we can review and, where appropriate, delete the information.

Subject to applicable law and any relevant limitations, you may have the following rights:

• the right to be informed about how your personal data is used;
• the right of access to your personal data;
• the right to rectification of inaccurate or incomplete data;
• the right to erasure of personal data in certain circumstances;
• the right to restriction of processing in certain circumstances;
• the right to data portability where applicable;
• the right to object to certain processing, including direct marketing;
• the right to withdraw consent at any time where processing is based on consent;
• the right to lodge a complaint with a supervisory authority.

You can exercise your privacy rights by contacting us at info@aladinbeauty.nl.

To protect your privacy, we may ask for additional information to verify your identity before responding to your request. We aim to respond within the period required by applicable law.

If your request relates to Shopify’s own processing of personal data for Shopify-controlled purposes, you may also use Shopify’s Privacy Portal: https://privacy.shopify.com/

If you have concerns about how we handle your personal data, please contact us first so that we can try to resolve the issue.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

https://www.autoriteitpersoonsgegevens.nl/

Our website may contain links to third-party websites, platforms or services. We are not responsible for the privacy, content or security practices of third-party websites or services. We encourage you to review their privacy policies before providing personal data to them.

We may update this Privacy Policy from time to time to reflect changes in our business, services, legal obligations or privacy practices. The most current version will always be posted on our website with the updated revision date.