Privacy Policy

Privacy Policy

This Privacy Policy explains how Stravida Global AB collects, uses, stores and shares personal information when you visit, interact with or make a purchase from Skincosmetics.com (the “Site”), contact us or otherwise use our services.

By using the Site, you acknowledge that your personal information will be handled as described in this Privacy Policy. Where consent is required by law, we will ask for it before carrying out the relevant processing.

Who We Are

Stravida Global AB is responsible for the personal information described in this Privacy Policy and generally acts as the data controller or responsible organisation for that information.

Personal Information We Collect

The personal information we collect depends on how you interact with us. It may include:

• Contact information: name, email address, telephone number, billing address and delivery address.
• Order information: products ordered, order value, discounts, shipping method, order history, returns and refund details.
• Payment and transaction information: payment method, transaction status and related billing information. Full card details are generally processed directly by our payment providers rather than stored by us.
• Account information: login details, saved addresses, preferences and account activity if you create a customer account.
• Customer service information: messages, support requests, photographs, videos, reviews and other information you send to us.
• Marketing information: newsletter subscriptions, consent records, communication preferences and interactions with our marketing.
• Device and usage information: IP address, browser, device type, operating system, time zone, cookie identifiers, pages viewed, links clicked, products viewed, referring pages and Site interaction data.
• Fraud and security information: information used to identify suspicious orders, misuse, chargebacks, unauthorised access or other security risks.

We do not intentionally collect health information through the ordinary checkout process. Please avoid sending sensitive medical information in reviews, support requests or other communications unless it is genuinely necessary for us to assist you.

How We Collect Information

We may collect personal information:

• Directly from you when you place an order or contact us.
• When you create an account, subscribe or complete a form.
• Automatically through cookies, pixels, tags and similar technologies.
• From Shopify and the service providers used to operate our store.
• From payment, shipping, fraud-prevention and fulfilment providers.
• From advertising, analytics and social media platforms where permitted.
• From publicly available sources where lawful and relevant.

Cookies & Similar Technologies

We use cookies and similar technologies to operate the Site, remember preferences, keep the checkout secure, understand Site performance, measure marketing and personalise content or advertising where permitted.

These technologies may include:

• Essential cookies: required for functions such as the basket, checkout, security and account access.
• Preference cookies: remember settings such as language, location or other choices.
• Analytics cookies: help us understand how visitors use the Site and where improvements may be needed.
• Advertising cookies and pixels: help us measure campaigns and, where permitted, display advertising that may be more relevant to you.

Where required, non-essential cookies are used only after you provide consent. You can manage your choices through the cookie banner or privacy controls shown on the Site. You can also manage cookies through your browser, although blocking essential cookies may affect Site functions.

How We Use Your Information

We may use personal information to:

• Process payments and fulfil, ship and track orders.
• Send order confirmations, delivery updates and service messages.
• Manage accounts, returns, refunds, complaints and guarantees.
• Answer questions and provide customer support.
• Detect fraud, chargebacks, misuse and security incidents.
• Operate, maintain, troubleshoot and improve the Site.
• Analyse customer behaviour, product interest and campaign performance.
• Personalise the Site and advertising where permitted.
• Send email, SMS or other marketing where you have subscribed or where otherwise permitted by law.
• Comply with accounting, tax, consumer protection and other legal obligations.
• Establish, exercise or defend legal claims.

Legal Bases for Processing

Where the GDPR, UK GDPR or similar laws apply, we rely on one or more of the following legal bases:

• Performance of a contract: to process an order, take payment, deliver products and manage returns or customer service.
• Legal obligation: to meet accounting, tax, regulatory, product-safety and other legal requirements.
• Legitimate interests: to operate and improve our business, prevent fraud, secure the Site, understand performance and provide relevant customer service, where those interests are not overridden by your rights.
• Consent: for non-essential cookies, certain analytics, personalised advertising and marketing where consent is required.

Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

Order & Payment Processing

When you place or attempt to place an order, we use your order, transaction and contact information to process payment, assess risk, arrange delivery, send confirmations and provide support.

Payment information is handled by the payment providers available at checkout. We may receive transaction identifiers, payment status, limited billing details and fraud-prevention results, but we do not generally receive or store complete payment card numbers.

Shopify

Our online store is hosted on Shopify. Shopify processes personal information to provide the ecommerce platform, checkout, security, analytics and related services used by our store.

Depending on the Shopify features enabled, Shopify may act as our service provider or processor and may also process certain information for its own purposes as described in Shopify’s applicable terms and privacy notices.

You can learn more and manage certain Shopify privacy choices through Shopify’s privacy portal .

Analytics

We may use Shopify Analytics, Google Analytics or similar services to understand Site traffic, product interest, conversions and technical performance.

These services may process device identifiers, IP address, cookie data, browsing activity and interaction information. Where required, analytics cookies are activated only after consent.

You can manage analytics cookies through our cookie settings. Google also provides information about its data practices and browser-based opt-out tools through its own privacy resources.

Behavioural Advertising

Where permitted, we may use personal information to measure advertising, create audiences and show relevant ads through platforms such as Meta, Google, Shopify and other advertising partners.

Advertising partners may use cookies, pixels, device identifiers and activity information to understand whether an advertisement led to a visit or purchase. We use these technologies in accordance with the consent choices available on the Site and applicable law.

You can manage advertising choices through:

• The cookie and privacy controls on Skincosmetics.com.
• Meta advertising preferences .
• Google My Ad Center .
• Shopify privacy controls .

Opting out does not necessarily stop all advertising. It may instead make the advertising less personalised.

Marketing Communications

If you subscribe to marketing, we may send product news, promotions, offers and other commercial messages.

You can unsubscribe from email marketing by using the unsubscribe link in an email or by contacting us. For SMS marketing, follow the opt-out instructions in the message where applicable.

We may still send non-marketing messages that are necessary for an order, account, security issue, return or customer service request.

Sharing Your Information

We may share personal information only as reasonably necessary with:

• Shopify and ecommerce technology providers.
• Payment processors and fraud-prevention providers.
• Warehouses, fulfilment partners, carriers and customs providers.
• Customer support, email and communications providers.
• Analytics, advertising and social media platforms where permitted.
• IT, hosting, security and professional service providers.
• Insurers, auditors, accountants, lawyers and other advisers.
• Government bodies, regulators, courts or law-enforcement authorities where required.
• A buyer, investor or successor in connection with a merger, restructuring, financing or sale of all or part of our business.

Service providers are expected to handle personal information only for the relevant service and subject to appropriate contractual or legal safeguards.

We do not sell personal information for money. Some privacy laws may use broader definitions of “sale” or “sharing” that can include targeted advertising activities. Where those laws apply, we provide relevant privacy and opt-out controls.

International Data Transfers

We operate from Sweden and use service providers that may process information in other countries, including countries outside the European Economic Area, the United Kingdom, Canada and Australia.

Where required, international transfers are protected through recognised safeguards such as adequacy decisions, standard contractual clauses, contractual protections or other legally permitted transfer mechanisms.

Because our fulfilment, technology and advertising providers may change, the countries involved may also change. You can contact us for further information about relevant transfer safeguards.

Data Retention

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods are determined by factors including:

• How long we need the information to fulfil an order or provide support.
• Accounting, tax, consumer protection and other legal requirements.
• Fraud prevention, chargeback and security needs.
• Applicable limitation periods and the handling of legal claims.
• Whether you have an active account or marketing subscription.
• Whether consent has been withdrawn or a valid deletion request has been made.

When information is no longer required, we take reasonable steps to delete, anonymise or securely dispose of it, subject to legal and technical limitations.

Security

We use reasonable administrative, technical and organisational measures designed to protect personal information from loss, misuse, unauthorised access, alteration or disclosure.

No online service or transmission method is completely secure. You are responsible for keeping account credentials confidential and should contact us promptly if you suspect unauthorised access to your account or personal information.

Your Privacy Rights

Depending on where you live and the circumstances, you may have the right to:

• Request access to personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of personal information.
• Request restriction of processing.
• Receive certain information in a portable format.
• Object to processing based on legitimate interests.
• Object to or opt out of direct marketing.
• Withdraw consent at any time where processing is based on consent.
• Complain to an applicable data protection or privacy authority.

These rights may be subject to legal exceptions. We may need to verify your identity before completing a request and may ask for information reasonably necessary to do so.

To submit a request, email info@skin-cosmetic.com. Please include enough information for us to identify you and understand the request.

European & UK Residents

If you are in the European Economic Area or United Kingdom, your rights may arise under the GDPR, UK GDPR and related data protection laws.

You may contact us to exercise your rights. You may also lodge a complaint with the data protection authority in the country where you live, work or believe an infringement occurred.

In Sweden, the supervisory authority is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).

Canadian Residents

If Canadian privacy law applies, you may request access to and correction of personal information held about you and may raise a privacy complaint with us.

We will investigate privacy complaints in a reasonable manner. If you are not satisfied with our response, you may have the right to contact the Office of the Privacy Commissioner of Canada or the relevant provincial privacy authority.

Australian Residents

Where the Australian Privacy Act and Australian Privacy Principles apply, you may request access to or correction of personal information we hold about you and may submit a privacy complaint.

Please contact us first so we can investigate and respond. If you are not satisfied, you may be able to contact the Office of the Australian Information Commissioner.

We may disclose personal information to overseas service providers as described under “International Data Transfers”.

Children’s Privacy

The Site is not intended for children who are unable to make purchases or provide valid consent under the laws that apply to them.

We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided personal information improperly, contact us so we can review and, where appropriate, delete it.

Third-Party Websites

The Site may link to websites, apps or services operated by third parties. Their privacy practices are governed by their own policies, and we are not responsible for how they handle personal information.

We recommend reviewing the privacy information of any third-party service before providing personal information.

Privacy Complaints

If you have a question or complaint about how we handle personal information, contact us using the details below and describe the issue as clearly as possible.

We will review the matter and aim to respond within a reasonable period. We may contact you for further information or identity verification.

If you are not satisfied with our response, you may have the right to complain to the relevant privacy or data protection authority in your country.

Changes to This Policy

We may update this Privacy Policy to reflect changes to our business, technology, service providers or legal obligations.

The latest version will be published on Skincosmetics.com with an updated revision date. Where required, we will provide additional notice of material changes.

Contact Us

For privacy questions, requests or complaints, contact: