Privacy Policy

This Privacy Policy explains how Elarune SPA collects, uses, stores and shares personal data when you visit our website, place an order, subscribe to our communications or contact our customer service team.

Elarune SPA is responsible for the processing of personal data collected through our online store. We process personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable European and national data protection laws.

1. Personal Data We Collect

We may collect the following categories of personal data:

Contact Information

• full name;
• email address;
• telephone number;
• billing address;
• delivery address;
• country of residence or delivery.

Order and Payment Information

• the products you order;
• order number and purchase history;
• selected payment method;
• payment status;
• transaction information;
• shipping and delivery information.

Payment card details are normally processed directly by our authorised payment providers. Elarune SPA does not normally receive or store complete payment card details.

Technical and Usage Information

When you visit our website, we may collect:

• IP address;
• browser type and version;
• device type and operating system;
• date and time of access;
• website activity and browsing behaviour;
• referral source;
• pages and products viewed;
• cookie identifiers and similar tracking information.

Customer Communications

We may retain information that you provide when you contact customer service, submit a return or refund request, participate in a survey, leave feedback or otherwise communicate with us.

2. How We Use Personal Data

We may use your personal data to:

• process payments and orders;
• confirm, prepare, dispatch and deliver orders;
• provide tracking and delivery updates;
• manage cancellations, returns, exchanges, refunds and complaints;
• respond to customer service enquiries;
• verify transactions and prevent fraud or misuse;
• maintain the security and functionality of our website;
• improve our products, website and customer experience;
• analyse website performance and customer interactions;
• comply with accounting, tax and other legal obligations;
• establish, exercise or defend legal claims;
• send marketing communications where permitted by law.

3. Legal Bases for Processing

We only process personal data where we have a valid legal basis. Depending on the circumstances, this may include:

• Performance of a contract: when processing is necessary to complete and deliver your order or provide a service you requested.
• Legal obligation: when processing is necessary to comply with accounting, tax, consumer protection or other legal requirements.
• Legitimate interests: when processing is necessary for our legitimate business interests, provided that your rights and interests do not override those interests.
• Consent: when you have provided clear and valid consent, including for certain marketing or non-essential cookies.
• Legal claims: when processing is necessary to establish, exercise or defend legal rights.

4. Marketing and Newsletters

If you subscribe to our email list, we may send you product news, beauty tips, promotional messages and exclusive offers.

Where required by applicable law, we will only send electronic marketing after receiving your consent.

You may withdraw your consent or unsubscribe at any time by:

• using the unsubscribe link included in our marketing emails; or
• contacting us at elarunespa@outlook.com.

Withdrawing your consent will not affect the lawfulness of processing carried out before the consent was withdrawn.

You may still receive non-marketing communications relating to active orders, payments, deliveries, returns, security or customer service matters.

5. Sharing Personal Data

We do not sell or rent your personal data.

We may share personal data with trusted service providers where necessary to operate our online store, including:

• e-commerce and website-hosting providers;
• payment processors and fraud-prevention providers;
• warehousing, fulfilment, shipping and logistics partners;
• customer service and communication providers;
• email and marketing platforms;
• website analytics and advertising providers;
• IT, cybersecurity and technical support providers;
• accountants, auditors, insurers and professional advisers;
• government authorities, regulators, courts or law-enforcement bodies where legally required.

These recipients may only process personal data for the purposes for which it was provided and in accordance with applicable data protection requirements.

Some service providers may act as independent data controllers for certain processing activities, such as payments, delivery services or fraud prevention. Their own privacy policies may apply to those activities.

6. International Data Transfers

Some of our service providers may process personal data outside the European Economic Area, the United Kingdom or the country in which you reside.

Where personal data is transferred to a country that is not recognised as providing an adequate level of data protection, we will seek to use appropriate safeguards as required by applicable law.

These safeguards may include:

• an official adequacy decision;
• approved standard contractual clauses;
• binding corporate rules;
• another legally recognised transfer mechanism.

7. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to:

• process and deliver orders;
• provide customer service;
• manage cancellations, returns, refunds and disputes;
• comply with accounting, tax and legal obligations;
• maintain security and prevent fraud;
• establish, exercise or defend legal claims.

The applicable retention period may vary depending on the type of information, the purpose of processing and the legal requirements in the relevant country.

When personal data is no longer required, it will be securely deleted, anonymised or otherwise handled in accordance with applicable law.

8. Cookies and Similar Technologies

We use cookies and similar technologies to:

• ensure that the website, checkout and shopping cart function correctly;
• remember your preferences and selections;
• maintain website security;
• analyse website traffic and performance;
• measure advertising and marketing effectiveness;
• personalise content and the customer experience.

Strictly necessary cookies may be used without consent where permitted by applicable law because they are required for the website to function.

Non-essential cookies, including certain analytics, personalisation and advertising cookies, will only be activated after valid consent has been obtained where required.

You can manage your preferences through the cookie settings available on our website. You may also block or delete cookies through your browser settings, although this may affect certain website features.

Further information may be provided in our separate Cookie Policy or cookie-preference tool.

9. Your Data Protection Rights

Depending on your location and the circumstances of the processing, you may have the right to:

• receive information about how your personal data is used;
• request access to your personal data;
• request correction of inaccurate or incomplete information;
• request deletion of your personal data;
• request restriction of processing;
• object to certain processing activities;
• withdraw consent at any time;
• receive certain personal data in a structured, commonly used and machine-readable format;
• request that certain data be transferred to another organisation;
• object to direct marketing;
• request information about certain automated decisions;
• submit a complaint to the relevant data protection authority.

These rights are subject to applicable legal conditions and exceptions. We may need to retain certain information where required by law or where necessary to establish, exercise or defend legal claims.

10. Exercising Your Rights

To exercise your data protection rights, contact us at:

📧 elarunespa@outlook.com

Please provide enough information for us to identify your account or order and understand your request. This may include your full name, email address and relevant order number.

For security purposes, we may request additional information to verify your identity before completing a request.

Please do not send complete payment card details, passwords or other highly sensitive information by email.

We will respond within the period required by applicable data protection law.

11. Complaints to a Supervisory Authority

If you believe that your personal data has been processed unlawfully, you may have the right to submit a complaint to the data protection authority in the European country where you live, work or where the alleged infringement occurred.

We encourage you to contact us first so that we can attempt to resolve your concern directly.

12. Data Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, destruction or disclosure.

These measures may include access controls, secure payment processing, encrypted communications, security monitoring and restricted access to personal data.

However, no method of transmitting or storing information online can be guaranteed to be completely secure or risk-free.

13. Children’s Privacy

Our website and products are not specifically directed at children.

We do not knowingly collect personal data from children below the minimum age required to provide valid consent under the laws applicable in their country.

If you believe that a child has provided personal data to us without appropriate authorisation, please contact us so that we can review and, where appropriate, delete the information.

14. Third-Party Links

Our website may contain links to external websites, applications or services operated by third parties.

Elarune SPA is not responsible for the privacy practices, content or security of third-party websites or services.

We recommend reviewing the applicable privacy policy before providing personal data to an external service.

15. Automated Decision-Making

We may use automated tools to help identify potentially fraudulent transactions, protect our website and improve our services.

We do not intend to make decisions based solely on automated processing that produce significant legal effects for customers unless such processing is permitted by applicable law and appropriate safeguards are provided.

16. Changes to This Privacy Policy

We may update this Privacy Policy when necessary to reflect changes to our website, services, business practices, technology or applicable legal requirements.

The latest version will always be available on this page.

Where appropriate, we may provide additional notice of material changes through the website or by email.

17. Contact Information

If you have questions about this Privacy Policy, our use of personal data or your data protection rights, please contact us:

Elarune SPA
📧 elarunespa@outlook.com
🌐 elarunespa.com