Valmusa Labs ("we", "us", "our") is a skincare brand operating at valmusalabs.com. We are committed to protecting your personal data and being transparent about how we handle it. This Privacy Policy describes what data we collect, why we collect it, and your rights under the General Data Protection Regulation (GDPR) and applicable privacy law.
If you have any questions about this policy or how we handle your data, please contact us at valmusalabs@proton.me.
Information you provide directly
When you place an order, create an account, contact us, or subscribe to our newsletter, we collect: your name, email address, delivery address, billing address, phone number (if provided), and any message content you send us.
Transaction data
When you complete a purchase, we receive transaction information such as the products ordered, price paid, and payment method type (e.g. Visa ending in ****). We do not store full card numbers — these are processed and held securely by our payment provider.
Automatically collected data
When you visit our website, we may collect your IP address, browser type, device type, referring URL, pages visited, and time spent on the site. This is used for performance monitoring, fraud prevention, and improving the site experience.
We use your personal data to: process and fulfil your orders; send you order confirmations, shipping notifications, and service communications; respond to your enquiries; prevent fraud and maintain the security of our site; send you marketing communications where you have opted in (you may unsubscribe at any time); and comply with legal obligations including tax record-keeping.
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.
We process your data under the following legal bases: Contract — to fulfil orders you've placed; Legitimate interests — for fraud prevention, site security, and analytics; Consent — for marketing emails and non-essential cookies; and Legal obligation — for tax and regulatory compliance.
We share your data only as necessary to operate our business. This includes: our shipping and logistics partners (your name and address, to fulfil delivery); our payment processor (billing and transaction data); our email service provider (email address, to send transactional and marketing emails); and our website hosting and analytics providers. All third parties are contractually bound to handle your data in accordance with GDPR.
We do not sell your personal data to any third party, and we do not share it for advertising purposes outside of our own marketing communications.
We use essential cookies to make our site function correctly (session management, cart persistence, fraud prevention). We may also use optional analytics cookies to understand how visitors use our site. You can manage cookie preferences using the cookie settings panel, accessible via the "Cookies" link in the site footer. Refusing optional cookies will not affect your ability to use the site or place an order.
We retain order and transaction data for 7 years to comply with tax and accounting obligations. We retain your email address for marketing purposes until you unsubscribe, after which we will delete it within 30 days. If you close your account or request deletion, we will remove your personal data from our active systems within 30 days, retaining only what is required by law.
You have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data (subject to legal obligations); restrict or object to processing; request a portable copy of your data; and withdraw consent at any time for processing based on consent (such as marketing emails).
To exercise any of these rights, email us at valmusalabs@proton.me. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. This includes TLS encryption for data in transit, restricted access to personal data within our team, and vetting of third-party providers. In the event of a data breach affecting your rights and freedoms, we will notify you and the relevant supervisory authority as required by law.
If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us at valmusalabs@proton.me. We are committed to resolving data concerns promptly and transparently.