Privacy Policy

This Privacy Policy explains how we collect, use, process and protect your personal data when you visit our website or place an order with us.

1. Who We Are

LUMI SKINLAB D.O.O.
Pot heroja Trtnika 27
1261 Ljubljana
Slovenia

VAT ID: SI91871948
Email: hello@missalicecosmetics.com

LUMI SKINLAB D.O.O. acts as the data controller for the personal data described in this Privacy Policy.

2. Personal Data We Collect

Information You Provide

When you place an order, create an account, subscribe to our newsletter or contact us, we may collect:

  • Name
  • Billing address
  • Shipping address
  • Email address
  • Telephone number
  • Order details
  • Payment-related information
  • Communications with our customer support team

Information Collected Automatically

When you visit our website, we may automatically collect:

  • IP address
  • Browser type and version
  • Device information
  • Operating system
  • Time zone
  • Referring websites
  • Pages visited
  • Products viewed
  • Date and time of access
  • Website interaction data

We refer to this information as “Device Information”.

3. How We Use Your Data

We use personal data to:

  • Process and fulfil orders
  • Deliver products and services
  • Process payments
  • Provide customer support
  • Send order confirmations and shipping updates
  • Prevent fraud and abuse
  • Maintain website security
  • Comply with legal obligations
  • Improve our products and services
  • Measure website performance and marketing effectiveness
  • Send marketing communications where you have consented to receive them

4. Legal Bases for Processing

Where the General Data Protection Regulation (GDPR) applies, we process personal data on one or more of the following legal bases:

  • Article 6(1)(a) GDPR – Consent
  • Article 6(1)(b) GDPR – Performance of a contract
  • Article 6(1)(c) GDPR – Compliance with legal obligations
  • Article 6(1)(f) GDPR – Legitimate interests

Our legitimate interests may include operating and improving our website, preventing fraud, ensuring security, responding to customer inquiries and conducting business operations efficiently.

5. Shipping Providers

To fulfil and deliver your order, we may share relevant personal data with shipping and logistics providers.

This may include:

  • Name
  • Delivery address
  • Telephone number
  • Email address (where required)

Shipping providers may include DPD, GLS, DHL and other delivery partners.

Your telephone number and email address may be used for delivery notifications, delivery updates or to resolve delivery issues.

Where required for delivery, this information may appear on shipping labels or shipping documentation.

The legal basis for this processing is the performance of a contract under Article 6(1)(b) GDPR.

6. Payment Providers

Payments are processed by third-party payment providers.

Depending on the payment method selected, personal data may be shared with:

  • Stripe
  • PayPal
  • Klarna
  • Other payment service providers offered during checkout

These providers process personal data in accordance with their own privacy policies.

7. Analytics and Marketing Services

Google Analytics

We use Google Analytics to understand how visitors use our website and to improve our services.

More information:

https://policies.google.com/privacy

Meta Pixel

We may use Meta Pixel to measure advertising effectiveness and improve marketing campaigns on Meta platforms such as Facebook and Instagram.

Klaviyo

We use Klaviyo to manage email marketing, newsletters and customer communications.

Marketing emails are only sent where you have provided consent or where otherwise permitted by applicable law.

8. Cookies

Our website uses cookies and similar technologies to ensure functionality, improve user experience, analyse website usage and support marketing activities.

Further details can be found in our Cookie Policy.

9. Marketing Communications

If you have consented to receive marketing communications, we may send you emails regarding products, promotions, offers and company updates.

You may unsubscribe at any time using the unsubscribe link included in marketing emails or by contacting us.

10. Data Minimization

We collect and process only the personal data that is reasonably necessary for the purposes described in this Privacy Policy.

We do not intentionally collect personal data that is not required to fulfil orders, provide customer support, comply with legal obligations, maintain website functionality or conduct legitimate business activities.

11. Consent Records

Where processing is based on consent, we may retain records of consent preferences, consent history and related information for the purpose of demonstrating compliance with applicable data protection laws.

These records may include the date and time consent was provided, the consent options selected and technical information associated with the consent event.

12. Disclosure Required by Law

We may disclose personal data if required to:

  • Comply with legal obligations
  • Respond to lawful requests from public authorities
  • Protect our rights and property
  • Prevent fraud or abuse
  • Protect the safety of our customers or others

13. International Data Transfers

Some service providers may process personal data outside the European Economic Area (EEA).

Where this occurs, we take appropriate safeguards to ensure that personal data remains protected in accordance with applicable data protection laws.

14. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy or to comply with legal obligations.

Order-related information may be retained for accounting, tax, legal and regulatory purposes.

15. Your Privacy Rights

If you are located in the European Economic Area (EEA), the United Kingdom or Switzerland, you may have the following rights:

  • Right of access to your personal data
  • Right to rectification of inaccurate or incomplete data
  • Right to erasure (“right to be forgotten”)
  • Right to restrict processing
  • Right to object to processing
  • Right to data portability
  • Right to withdraw consent at any time
  • Right to lodge a complaint with a supervisory authority

Requests relating to privacy rights, access, correction, deletion or portability of personal data may be submitted to hello@missalicecosmetics.com.

16. Do Not Track

Please note that we do not currently alter our website’s data collection and processing practices in response to “Do Not Track” browser signals.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical or operational changes.

The latest version will always be available on our website.

18. Contact Us

If you have questions about this Privacy Policy or would like to exercise your privacy rights, please contact us:

LUMI SKINLAB D.O.O.
Pot heroja Trtnika 27
1261 Ljubljana
Slovenia

Email: hello@missalicecosmetics.com

Last updated: June 2026