Privacy policy

Last updated: 25 February 2026

ROSELY COSMETICS operates this shop and website, including all related information, content, features, tools, products and services, in order to provide you, as a customer, with a personalised shopping experience (the “Services”).

ROSELY COSMETICS is a store powered by Shopify, which enables us to provide the Services to you. This Privacy Policy explains how we collect, use and disclose your personal data when you access or use the Services, make a purchase or other transaction, or otherwise communicate with us.

In the event of any inconsistency between our Terms of Service and this Privacy Policy, this Privacy Policy shall prevail in relation to the collection, processing and disclosure of your personal data.

Please read this Privacy Policy carefully. By accessing or using our Services, you confirm that you have read and understood this Privacy Policy and the practices described herein.

Personal Data We Collect or Process

When we refer to “personal data”, we mean any information that identifies you or could reasonably be linked to you, directly or indirectly.

Personal data does not include anonymised data or information that can no longer be used to identify you.

Depending on how you interact with our Services, your location, and applicable law, we may collect or process the following categories of personal data:

  • Contact details: name, postal address, billing address, delivery address, telephone number and email address.

  • Financial information: payment card details, bank account details, transaction details, payment confirmations and other payment information.

  • Account information: username, password, security questions, preferences and account settings.

  • Transaction information: products viewed, added to basket or wishlist, purchased, returned, exchanged or cancelled, and purchase history.

  • Communications: information you provide when contacting us, including customer service enquiries.

  • Device information: IP address, device type, browser type, network connection details and other technical identifiers.

  • Usage data: information about how and when you access or interact with the Services.

Sources of Personal Data

We may collect personal data from:

  • You directly, when you create an account, place an order, contact us or otherwise provide information;

  • Automatically, through your use of our Services, including via cookies and similar technologies;

  • Our service providers, who process data on our behalf;

  • Business partners or other third parties.

How We Use Your Personal Data

Depending on your interaction with us, we may use your personal data for the following purposes:

Providing and Improving the Services

To process orders and payments, arrange deliveries and returns, manage your account, personalise your shopping experience and improve our Services.

Marketing and Advertising

To send promotional communications (by email, SMS or post) and display advertisements tailored to your interests. You may opt out of marketing communications at any time.

Security and Fraud Prevention

To verify accounts, secure transactions, prevent fraud and protect our Services and customers. You are responsible for maintaining the confidentiality of your account credentials.

Customer Support and Communication

To respond to enquiries and manage our relationship with you.

Legal and Regulatory Compliance

To comply with legal obligations, respond to lawful requests from public authorities, enforce our terms and policies, and protect our legal rights.

Disclosure of Personal Data

We may disclose your personal data in the following circumstances:

  • To Shopify and our service providers (including payment processors, hosting providers, logistics partners, customer support providers and analytics services);

  • To business and marketing partners in connection with personalised advertising;

  • Where you have provided consent or requested such disclosure;

  • Within our corporate group, where applicable;

  • In connection with a business transaction (such as a merger, acquisition or insolvency), or where required by law.

Relationship with Shopify

Our Services are hosted by Shopify, which may collect and process personal data in order to provide and improve the Services.

Certain enhanced features may involve the use of data derived from your interactions with our store and other merchants using Shopify. In such cases, Shopify may act as an independent data controller in respect of certain processing activities.

For further information, please refer to Shopify’s Consumer Privacy Policy at:
https://privacy.shopify.com/en

Third-Party Websites and Links

Our Services may contain links to third-party websites or platforms. We are not responsible for the privacy practices or content of such third parties. We encourage you to review their privacy policies before providing any personal data.

Children’s Data

Our Services are not intended for individuals under the age of majority in their jurisdiction. We do not knowingly collect personal data from children.

If you believe that a child has provided us with personal data, please contact us so that we may take appropriate steps to delete such information.

Data Security and Retention

While we implement appropriate technical and organisational measures to protect your personal data, no system can guarantee absolute security.

We retain personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes and enforce our agreements.

Your Rights

If you are resident in the United Kingdom or the European Economic Area, you may have the following rights under applicable data protection law (including the UK GDPR):

  • Right of access

  • Right to rectification

  • Right to erasure

  • Right to restrict processing

  • Right to object to processing

  • Right to data portability

  • Right to withdraw consent (where processing is based on consent)

You may also opt out of marketing communications at any time via the unsubscribe link included in our emails.

We may need to verify your identity before responding to a request. You will not be discriminated against for exercising your rights.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK, or with your local data protection authority.

International Transfers

Your personal data may be transferred to and processed in countries outside the United Kingdom or the European Economic Area.

Where such transfers occur, we rely on appropriate safeguards, such as Standard Contractual Clauses approved under applicable law, unless the destination country is recognised as providing an adequate level of protection.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time for operational, legal or regulatory reasons. Any updated version will be published on our website with a revised “Last updated” date.

Contact Details

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:

Email: roselycosmetics01@gmail.com
Address: 5 Rue de la Caspienne, 92160 Antony, France

For the purposes of applicable data protection legislation, ROSELY COSMETICS acts as the data controller of your personal data.