Privacy Policy
Privacy Policy
Last updated: August 2026.
1. Data controller
The data controller is [COMPANY_NAME], [ADDRESS], privacy contact: info@belloracosmetics.com.
2. Data we collect
- Account data: email, name, password (hashed).
- Order data: shipping address, phone, order history.
- Payment data: handled by Stripe and PayPal; we do not store card numbers.
- Technical data: IP address, browser type, pages visited (cookies).
3. Purposes and legal bases (art. 6 GDPR)
- Contract performance: order and account management.
- Legitimate interest: statistics, fraud prevention.
- Consent: marketing communications (opt-in only).
- Legal obligation: retention of fiscal documents.
4. Retention
We keep data for as long as your account exists or as needed to provide services. Fiscal documents are kept for 10 years as required by Italian law.
5. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection (arts. 15-21 GDPR), plus the right to complain to the Italian supervisory authority (Garante). Write to info@belloracosmetics.com.
6. Recipients
We share data only with: Stripe and PayPal (payments), couriers (delivery), IT providers (hosting). Each under their own policy.