1. Who we are

This website is operated by Unical Srl, VAT number 02080070762, registered in Italy. You can contact us at [email protected].

We are the data controller for personal data collected through holicosmetics.com.

2. What data we collect

We may collect the following personal data:

• Account data: name, email address, password (hashed), billing and shipping addresses.
• Order data: products purchased, order value, payment method (we do not store card details — payments are processed by Stripe or PayPal).
• Communication data: messages sent via our contact form or email.
• Marketing data: email address if you subscribe to our newsletter.
• Technical data: IP address, browser type, pages visited, time on site — collected via cookies (see our Cookie Policy).

3. How we use your data

• To process and fulfil your orders (contract performance).
• To manage your account and customer service requests.
• To send transactional emails (order confirmation, shipping updates).
• To send marketing emails, if you have opted in (you may unsubscribe at any time).
• To improve our website and services (legitimate interest).
• To comply with legal obligations (e.g. tax records).

4. Who we share your data with

We share data only with trusted third parties necessary to deliver our service:

• Stripe / PayPal — payment processing.
• Shipping carriers — to deliver your order.
• Mailchimp — email marketing (only if you have opted in).
• WooCommerce / WordPress — website and shop infrastructure.

We do not sell your personal data.

5. Your rights (GDPR)

If you are based in the EU or UK, you have the right to:

• Access, correct, or delete your personal data.
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, contact us at [email protected]. You also have the right to lodge a complaint with your national data protection authority.

6. Data retention

We retain order data for 10 years as required by Italian tax law. Newsletter subscriptions are kept until you unsubscribe. Account data is kept as long as your account is active, or up to 3 years after your last purchase.

7. Cookies

We use cookies to operate the website and, with your consent, for analytics and marketing. See our Cookie Policy for details.

8. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or a notice on the website. The date at the top of this page reflects the most recent revision.