Privacy Policy

ViollaTech

How to read this policy

Each section below has two parts. The short version tells you what the section means in plain language. The details are the full legal text. Both are part of this policy.

1. Who we are

The short version: We're ViollaTech. We sell beauty gadgets and devices online, and this page explains what we do with your information.

The details: This Privacy Policy describes how ViollaTech ("ViollaTech", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use, or make a purchase from [INSERT STORE URL] (the "Site"), or otherwise communicate with us (collectively, the "Services").

For applicable data protection law, ViollaTech is the data controller of your personal information.

Our contact details are:

Business name: [INSERT LEGAL ENTITY NAME, e.g. ViollaTech LLC]

Registered address: [INSERT FULL ADDRESS]

Email: [INSERT PRIVACY EMAIL, e.g. privacy@viollatech.com]

By using the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree, please do not use the Services.

2. What we collect

The short version: The information you type in (name, address, email, payment details), the information your device sends automatically (IP address, browser, pages viewed), and information about your orders.

The details: We collect the following categories of personal information.

Information you give us directly:

Identity and contact data: name, billing address, shipping address, email address, phone number

Order data: products purchased, order value, order history, currency, delivery preferences

Payment data: payment card details and billing information. Note that card numbers are collected and processed by our payment providers, not stored by us

Account data: username, password, saved addresses, order history, wishlist

Communications data: messages you send us by email, contact form, live chat, or social media, including any photos or videos you send us for a support or warranty request

Marketing data: your email or phone number if you subscribe to our newsletter or SMS list, and your preferences about receiving marketing

Optional product-matching data: if you use a quiz, skin-type selector, or device recommendation tool on the Site, the answers you provide

Information collected automatically:

Device and technical data: IP address, browser type and version, time zone, operating system, device identifiers, screen resolution

Usage data: pages viewed, products viewed, referring website or search terms, time spent on pages, clicks, scroll behaviour, cart activity

Cookie and tracking data: as described in Section 6

Information from third parties:

Order, fraud, and payment status information from our payment processors

Shipping and delivery status from our fulfilment and logistics partners

Aggregated advertising and audience data from advertising platforms

Publicly available social media information if you interact with our accounts

3. A note about beauty and skin information

The short version: If you tell us about your skin, we only use it to help you pick the right device. We don't treat it as medical information and neither should you.

The details: Some of our products are used on skin, hair, or body. If you voluntarily share information about your skin type, skin concerns, hair type, or similar characteristics through a quiz, a product review, or a customer service conversation, we use it only to recommend suitable products, respond to your enquiry, and improve our product range.

We do not knowingly collect health, medical, or biometric data, and our products are consumer beauty devices, not medical devices. Please do not send us diagnoses, medical records, or clinical information. If you have a medical condition, consult a qualified healthcare professional before using any beauty device.

Where applicable law treats any of this information as sensitive personal information, we do not sell it, we do not share it for cross-context behavioural advertising, and we use it only for the purposes described above.

4. Why we use your information

The short version: To take your order, deliver it, support you afterwards, keep the store secure, and — only if you let us — send you marketing.

The details: We use your personal information to:

Process, fulfil, and deliver your orders, and send order confirmations, shipping notifications, and delivery updates

Process payments, refunds, exchanges, and returns

Provide customer support, handle warranty claims, and respond to your questions

Create and manage your customer account

Send marketing communications where you have consented or where we are otherwise permitted to do so

Personalise your experience on the Site, including product recommendations

Measure and improve the performance of the Site, our products, and our advertising

Detect, investigate, and prevent fraud, abuse, chargebacks, and security incidents

Comply with our legal, tax, accounting, and regulatory obligations

Establish, exercise, or defend legal claims

Our legal bases (for visitors in the EEA and UK): We rely on performance of a contract for order processing and delivery; consent for marketing communications and non-essential cookies; legitimate interests for fraud prevention, site security, analytics, and improving our Services; and legal obligation for tax and record-keeping requirements.

5. Who we share it with

The short version: Our store platform, our payment processors, our shipping partners, and our marketing and analytics tools. We do not sell your information for money.

The details: We share personal information with the following categories of recipients, only as needed for the purposes above:

Category	What they do	Examples
E-commerce platform	Hosts our store and processes orders	Shopify
Payment processors	Take payment and screen for fraud	[INSERT, e.g. Shopify Payments, Stripe, PayPal]
Fulfilment and shipping	Pack and deliver your order	[INSERT SUPPLIERS AND CARRIERS]
Email and SMS marketing	Send newsletters and order emails	[INSERT, e.g. Klaviyo, Shopify Email]
Analytics	Measure how the Site is used	[INSERT, e.g. Google Analytics]
Advertising	Show and measure our ads	[INSERT, e.g. Meta, TikTok, Google Ads]
Customer support	Handle your enquiries	[INSERT, e.g. Gorgias, Zendesk]
Professional advisers	Legal, accounting, and tax services	As needed

We may also disclose personal information to comply with a law, regulation, subpoena, court order, or lawful government request; to enforce our terms; to protect the rights, property, or safety of ViollaTech, our customers, or others; and in connection with a merger, acquisition, financing, or sale of all or part of our business.

We do not sell your personal information for monetary consideration. However, our use of advertising and analytics cookies may be considered a "sale" or "sharing" of personal information under certain US state privacy laws. See Section 8 for how to opt out.

6. Cookies and tracking

The short version: We use cookies to make the store work, to understand what's popular, and to show ads. You can turn off the non-essential ones.

The details: Cookies are small data files placed on your device. We use:

Strictly necessary cookies, which keep your cart, session, and checkout working. These cannot be switched off.

Analytics cookies, which tell us how visitors use the Site so we can improve it.

Advertising cookies and pixels, which let us and our advertising partners show you relevant ads on other websites and measure whether those ads worked.

You can manage non-essential cookies through the cookie banner on our Site, and you can block or delete cookies through your browser settings. Blocking strictly necessary cookies may prevent parts of the Site, including checkout, from working.

To opt out of interest-based advertising more broadly, you can visit the opt-out tools operated by the Digital Advertising Alliance, the Network Advertising Initiative, or the European Interactive Digital Advertising Alliance.

Some browsers send a "Do Not Track" or Global Privacy Control signal. We honour Global Privacy Control signals where required by applicable law.

7. How long we keep it

The short version: As long as we need it, and longer for order records because tax law requires it.

The details: We retain personal information for as long as necessary to fulfil the purposes described in this policy. In practice:

Order and transaction records: retained for [INSERT PERIOD, commonly 7 years] to meet tax and accounting obligations

Customer account data: retained while your account is active, and for [INSERT PERIOD] after you close it

Marketing contact data: retained until you unsubscribe, and then on a suppression list so we do not contact you again

Support conversations: retained for [INSERT PERIOD]

Analytics data: retained for [INSERT PERIOD] in accordance with our analytics providers' settings

When we no longer need your personal information, we delete or anonymise it.

8. Your rights

The short version: You can ask to see your data, correct it, delete it, or stop us using it for marketing. Email us, and we'll handle it.

The details: Depending on where you live, you may have the right to:

Access the personal information we hold about you and receive a copy

Correct inaccurate or incomplete information

Delete your personal information

Withdraw consent at any time, where we rely on consent

Object to or restrict certain processing

Receive your data in a portable, machine-readable format

Opt out of the sale or sharing of personal information, and of targeted advertising

Not be discriminated against for exercising your privacy rights

Appeal a decision we make about your request

Lodge a complaint with your local data protection authority

How to exercise your rights: Email us at [INSERT PRIVACY EMAIL] with the subject line "Privacy Request". We will respond within the timeframe required by applicable law, generally within 30 days for GDPR requests and 45 days for US state privacy law requests. We may need to verify your identity before acting, usually by asking you to confirm details of a recent order. An authorised agent may submit a request on your behalf with proof of authorisation.

Marketing opt-out: Every marketing email includes an unsubscribe link. For SMS, reply STOP. You will still receive transactional messages about orders you have placed.

9. International transfers

The short version: Your data may be stored or handled in another country, including the United States.

The details: Our service providers and we operate internationally, so your personal information may be transferred to, stored in, and processed in countries other than your own, including the United States, which may have different data protection standards.

Where we transfer personal information out of the EEA or the UK, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, or transfers to countries recognised as providing an adequate level of protection. You may request a copy of the relevant safeguards by contacting us.

10. Security

The short version: We protect your data, but no online system is perfectly secure.

The details: We maintain administrative, technical, and organisational measures designed to protect personal information, including encryption of data in transit (TLS), access controls, and use of PCI-DSS compliant payment providers. We do not store full payment card numbers on our systems.

No method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account password confidential.

11. Children

The short version: Our store is not for children.

The details: The Services are intended for users aged 18 and over, and are not directed to children. We do not knowingly collect personal information from anyone under [INSERT AGE, commonly 16 or 13 depending on jurisdiction]. If you believe a child has provided us with personal information, contact us at [INSERT PRIVACY EMAIL], and we will delete it.

Some of our devices carry age restrictions or require adult supervision. Please read the product listing and the manufacturer's instructions before use.

12. Third-party links

The short version: If you click a link to another site, their privacy policy applies, not ours.

The details: The Services may contain links to third-party websites, including social media platforms, affiliate sites, and payment providers. We are not responsible for the privacy practices or content of those sites. We encourage you to read their privacy policies.

13. Changes to this policy

The short version: If we change this policy, we'll update the date at the top.

The details: We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will post the revised policy on this page and update the "Last updated" date. Where the changes are material, we will provide additional notice, such as an email or a banner on the Site. Your continued use of the Services after the revised policy takes effect constitutes acceptance of the changes.