PRIVACY POLICY

1. Introduction

This Privacy Policy (also referred to as the “Privacy Statement”) describes how Amazonian SRL (hereinafter referred to as “the Company,” “we,” or “our”) collects, uses, stores, and discloses your personal data when you use our website, contact us, or purchase our products/services.

This Policy is in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR) and the Belgian Law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data (as well as any applicable supplementary legislation).

By using the website or providing your personal data, you declare that you have read, understood, and accepted the practices described in this Policy.

2. Data Controller

Company Name: Amazonian SRL
Registered Office: Boulevard de L’Empereur 10, 1000 Brussels, Brussels-Capital Region
Company Number: BE1003077097
Telephone (Landline): +3228860317
Contact Page: https://www.amazonian-hair.com/helpdesk

We are responsible for processing your personal data in accordance with the GDPR and Belgian legislation on privacy and data protection.

3. Personal Data Collected

3.1. Data You Provide Directly

Registration Information: When you create an account or place an order on our website, you may be asked to provide your full name, email address, password, billing/shipping address, phone number, and any other necessary details.
Payment Information: When you make purchases, you may provide payment data (for example, credit card or PayPal information). These are processed directly by secure payment service providers and are not stored by the Company, except for partial or confirmation data required for billing or order history.
Communications: If you contact us via the contact form, email, phone, or other means, we may collect the content of your messages as well as any other information you voluntarily provide (for example, for customer service).

3.2. Data Collected Automatically

Cookies and Similar Technologies: When you browse our website, we may use cookies, web beacons, and other technologies to collect information about your interaction (IP address, browser type, pages visited, time spent on each page, and other browsing metrics).
Session and Device Data: We may collect information about the type of device you use, the operating system, your preferred language, and other technical data necessary to ensure the website’s compatibility and security.

3.3. Data from Third Parties

Integrations and Social Networks: If you choose to interact with us through social media (e.g., Facebook, Instagram) or use third-party accounts to sign up on our site, we may receive data you have made available on those platforms, in accordance with their respective privacy policies.
Payment and Shipping Services: We may receive additional information from payment service providers or shipping services (e.g., payment confirmation, delivery date).

4. Purpose and Legal Basis of Processing

We process your personal data for the following purposes and on the following legal bases:

Performance of a Contract: To process your orders, provide the products/services purchased, and manage the contractual relationship (Article 6(1)(b) GDPR).
Compliance with Legal Obligations: For billing, accounting, fraud prevention, and other obligations provided by Belgian or EU legislation (Article 6(1)(c) GDPR).
Legitimate Interests: To improve the performance of the website, carry out statistical analyses, personalize your browsing experience, respond efficiently to your inquiries, and ensure the security of our site (Article 6(1)(f) GDPR).
Consent: For marketing activities (for example, sending newsletters and promotional offers) or other situations where the law requires prior consent. You have the right to withdraw your consent at any time, without affecting the lawfulness of the processing carried out until the date of withdrawal (Article 6(1)(a) GDPR).

5. Sharing of Personal Data

We share your personal data with third parties only in the following contexts:

Service Providers: Companies that provide us with hosting, payment, order shipping, customer support, marketing, or other functions essential to our business. These third parties will process data only in accordance with our instructions and under confidentiality agreements.
Legal Obligations: If we are required to disclose information in order to comply with legal or regulatory obligations, court decisions, or requests from competent authorities in Belgium or within the European Union.
Corporate Changes: In the event of a merger, acquisition, restructuring, or sale of the Company’s assets, your data may be transferred to the successor entity, while maintaining the privacy protections required by Belgian and European legislation.

6. Retention Period

We will retain your personal data only for the time strictly necessary for the purposes described in this Policy or to comply with Belgian or EU legal obligations. For example:

User Accounts: For as long as your account remains active or until you request its deletion.
Order and Billing Data: For the period required by Belgian tax and commercial legislation (usually 10 years).
Marketing Data: Until you withdraw your consent or until the maximum period allowed by law, if that consent is not renewed.

After the end of the retention period, the data will be deleted or anonymized in a secure manner.

7. Data Subject Rights

Pursuant to the GDPR and Belgian legislation, you have the following rights with respect to your personal data:

Right of Access: To request confirmation that your data is being processed and, if so, to obtain a copy of it.
Right to Rectification: To correct or update inaccurate or incomplete personal data.
Right to Erasure (“Right to be Forgotten”): To request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected or when you withdraw your consent (if the processing relies solely on that).
Right to Restriction of Processing: In certain circumstances, to request the restriction of your data (for instance, while you contest its accuracy).
Right to Data Portability: To receive your personal data in a structured, commonly used, and machine-readable format and to transfer it to another data controller when technically feasible.
Right to Object: At any time, to object to the processing of your personal data based on the Company’s legitimate interests or to its use for direct marketing purposes.
Right not to be Subject to Automated Decisions: Not to be subject to decisions based solely on automated processing (including profiling) which produce legal effects or similarly significantly affect you.

To exercise any of these rights, please contact us through our página de contacto or in writing at our registered office, attaching sufficient proof of your identity if necessary.

8. Security Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or accidental disclosure, including:

Encryption of sensitive data in transit (e.g., via SSL/TLS).
Password policies and access controls for employees.
Monitoring of systems and networks to detect suspicious activity.
Confidentiality agreements and data protection training for staff involved in processing.

Although we strive to ensure data security, no system is entirely fail-safe. If you suspect or identify any security breach, please contact us immediately.

9. International Data Transfers

If it is necessary to transfer data outside the European Economic Area (EEA), including to service providers, we ensure such transfers comply with Belgian and EU data protection legislation (GDPR), for example through European Commission adequacy decisions or Standard Contractual Clauses.

10. Cookies and Similar Technologies

Our website uses cookies (text files stored on your device) and similar technologies to enhance your browsing experience, analyze traffic, and enable certain features (e.g., keeping you logged in). You can manage or disable these cookies through your browser settings; however, this may affect some website functionalities. For more details, please refer to our Cookie Policy (if available).

11. Processing of Minors’ Data

Our products and services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors without parental or legal guardian consent. If you believe we have inadvertently received data from a minor without proper authorization, please contact us so that we can delete this information.

12. Contact for Privacy Queries

If you have any questions regarding this Privacy Policy or wish to exercise your rights, you can reach us at:

Contact Page: https://www.amazonian-hair.com/helpdesk
Phone: +3228860317
Address: Boulevard de L’Empereur 10, 1000 Bruxelas, região de Bruxelas-Capital

If you are not satisfied with our response, you have the right to lodge a complaint with the competent authority for data protection in Belgium, the Data Protection Authority (DPA), which can be found at https://www.autoriteprotectiondonnees.be.

13. Changes to this Policy

We reserve the right to update or modify this Privacy Policy at any time by posting the revised version on our website. It is your responsibility to periodically review this Policy to stay informed about any changes. Your continued use of the website after the publication of changes constitutes your acceptance of them.

Last Updated: 07/02/25

By using this website and/or providing your data, you declare that you have read, understood, and accepted this Privacy Policy.