Privacy Policy
This Privacy Policy describes how shop.spiritbeautyexcellence.com (the “Website” or “we”) collects, uses, and shares your personal information when you visit the Website or place an order.
Collection of Personal Data
When you visit the Website, we collect certain information about your device, your interaction with the Website, and information necessary to process your orders. We may also collect additional information when you contact our customer service. In this Privacy Policy, we refer to any data that can uniquely identify an individual (including the information listed below) as “personal data.” The list below provides more information about what personal data we collect and why.
Device Information
- Examples of personal data collected: Web browser version, IP address, time zone, cookie information, which pages or products you view, search terms, and how you interact with the website.
- Purpose of collection: To load the website correctly for you and to perform analytics on website usage in order to optimize our website.
- Source of collection: Collected automatically when you access our website via cookies, log files, web beacons, tags, or pixels.
- Disclosure for business purposes: Shared with our platform provider Shopify and the sales platforms eBay, Amazon, Facebook, Pinterest, and Google.
Order Information
- Examples of personal data collected: Name, billing address, shipping address, payment information, email address, and phone number.
- Purpose of collection: to provide you with products or services to fulfill our contract, to process your payment information, to arrange shipping, and to send you invoices and/or order confirmations; to communicate with you; to review our orders for potential risks or fraud; and, if consistent with the preferences you have provided, send you information or advertising related to our products or services.
- Source of collection: collected from you.
- Disclosure for business purposes: Sharing with our processor Shopify, our sales platforms eBay, Amazon, Facebook, Pinterest, Google, our payment providers, and our shipping and fulfillment partners.
Customer Service Information
- Examples of personal data collected: Name, billing address, shipping address, payment information, email address, and phone number.
- Purpose of collection: Customer service.
- Source of collection: Collected from you.
- Disclosure for business purposes: Shared with the sales platforms eBay, Amazon, Facebook, Pinterest, and Google.
Minors
This website is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you are a parent or legal guardian and believe that your child has provided us with personal data, please contact us at the address listed below to request its deletion.
Sharing of Personal Data
We share your personal data with service providers to assist us in providing our services and fulfilling our contracts with you, as described above. For example:
- We use Shopify to operate our online store. For more information about Shopify’s use of your personal data, see here.
- We may share your personal data to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request for information we receive, or to otherwise protect our rights.
Behavioral Advertising
As described above, we use your personal data to provide you with targeted advertising or marketing communications that we believe may be of interest to you. For example:
- We use Google Analytics to understand how our customers use the website. For more information about Google’s use of your personal data, see here. You can also opt out of Google Analytics here
- We share information about your use of the website, your purchases, and your interaction with our ads on other websites with our advertising partners. We collect and share some of this information directly with our advertising partners and, in some cases, through the use of cookies or other similar technologies (which you can consent to depending on your location).
For more information on how targeted advertising works, visit the Network Advertising Initiative (“NAI”) website.
You can opt out of targeted advertising using the following links:
In addition, you can opt out of some of these services by visiting the opt-out portal of the Digital Advertising Alliance.
Use of Personal Data
We use your personal data to provide you with our services, such as: offering products for sale, processing payments, shipping and fulfilling your order, and keeping you informed about new products, services, and offers.
Legal Basis
In accordance with the General Data Protection Regulation (“GDPR”), we process your personal data based on the following legal grounds if you are located in the European Economic Area (“EEA”):
- Your consent;
- The performance of the contract between you and the website;
- Compliance with our legal obligations;
- To protect your vital interests;
- To perform a task carried out in the public interest;
- For our legitimate interests, which do not override your fundamental rights and freedoms.
Retention
When you place an order through the website, we will retain your personal data for our records unless you request that we delete this data. For more information about your right to erasure, see the “Your Rights” section below.
Automated Decision-Making
If you reside in the EEA, you have the right to object to processing that is based solely on automated decision-making (including profiling) if such decision-making has a legal effect on you or otherwise significantly affects you.
We do not engage in fully automated decision-making that has a legal or otherwise significant impact on customer data.
Our platform provider, Shopify, uses limited automated decision-making for fraud prevention, which has no legal or otherwise significant impact on you.
Services that include elements of automated decision-making include:
- Temporary blocklist of IP addresses associated with repeatedly failed transactions. This blocklist remains in effect for a few hours.
- Temporary blacklist of credit cards associated with the blocked IP addresses. This blacklist remains in effect for a few days.
GDPR
If you reside in the EEA, you have the right to access the personal data we have stored about you, to transfer it to a new service, and to request that your personal data be corrected, updated, or deleted. If you wish to exercise these rights, please contact us using the contact information below.
Your personal data is initially processed in Ireland and then transferred outside of Europe for storage and further processing, including to Canada and the United States. For more information on how data transfers comply with the GDPR, see the Shopify GDPR White Paper.
For information on how to exercise these rights regarding data processing by Shopify, please visit the Shopify Privacy Portal.
CCPA
If you are a California resident, you have the right to access the personal information we have stored about you (also known as the “right to know”), to port it to a new service, and to request that your personal information be corrected, updated, or deleted. If you wish to exercise these rights, please contact us using the contact information below.
If you wish to appoint an authorized representative to submit these requests on your behalf, please contact us at the address provided below.
Cookies
A cookie is a small amount of information that is downloaded to your computer or device when you visit our website. We use a variety of cookies, including functional, performance, advertising, and social media or content cookies. Cookies enhance your browsing experience by allowing the website to remember your actions and preferences (e.g., login and region selection). This means you don’t have to re-enter this information every time you return to the website or navigate from one page to another. Cookies also provide information about how people use the website, such as whether they are visiting the website for the first time or are a regular visitor.
We use the following cookies to optimize your experience on our website and to provide our services.
Cookies necessary for the shop to function
| Name | Function |
|---|---|
| _ab | Used in connection with accessing the admin panel. |
| _secure_session_id | Used in connection with navigating the storefront. |
| cart | Used in connection with the shopping cart. |
| cart_sig | Used in connection with checkout. |
| cart_ts | Used in connection with checkout. |
| checkout_token | Used in connection with checkout. |
| secret | Used in connection with checkout. |
| secure_customer_sig | Used in connection with customer login. |
| storefront_digest | Used in connection with customer login. |
| _shopify_u | Used to facilitate updates to customer account information. |
Reporting and analytics
| Name | Function |
|---|---|
| _tracking_consent | Tracking settings. |
| _landing_page | Tracking landing pages |
| _orig_referrer | Tracking landing pages |
| _s | Shopify Analytics. |
| _shopify_fs | Shopify Analytics. |
| _shopify_s | Shopify Analytics. |
| _shopify_sa_p | Shopify Analytics related to marketing and recommendations. |
| _shopify_sa_t | Shopify Analytics related to marketing and recommendations. |
| _shopify_y | Shopify Analytics. |
| _y | Shopify Analytics. |
The length of time a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies remain until you stop browsing, and persistent cookies remain until they expire or are deleted. Most of the cookies we use are persistent and expire between 30 minutes and two years from the time they were downloaded to your device.
You can control and manage cookies in various ways. Please note that removing or blocking cookies may negatively affect your user experience, and parts of our website may no longer be fully accessible.
Most browsers automatically accept cookies, but you can use your browser settings—which are often found in the “Tools” or “Settings” menu—to choose whether or not to accept cookies. For more information on how to change your browser settings or block, manage, or filter cookies, please refer to your browser’s help file or visit websites such as www.allaboutcookies.org.
Please also note that blocking cookies may not completely prevent the sharing of information with third parties, such as our advertising partners. To exercise your rights or opt out of certain uses of your data by these third parties, please follow the instructions in the “Behavioral Advertising” section above.
Do Not Track
Please note that there is no industry-wide consensus on how to respond to “Do Not Track” signals, and we do not change our data collection and use practices when we detect such a signal from your browser.
AI-powered customer chat
In our online store, we use Shopify Inbox, including an AI-powered shopping assistant (“Inbox Agent”), to answer questions about our products, orders, and services in real time, provide relevant product recommendations, and assist you during your shopping experience. When the Inbox Agent takes over a conversation, the chat will automatically indicate that you are communicating with an artificial intelligence. You can request to have the conversation transferred to a human representative at any time.
Since the responses are generated automatically using artificial intelligence, they may—despite careful configuration—be incomplete, inaccurate, or erroneous in individual cases. Please verify important information using the respective product description or contact our customer service if you have any questions. For medical or health-related questions, the AI-powered chat is not a substitute for professional medical or pharmaceutical advice.
When using the chat, the following data in particular is processed: the messages you enter and the information they contain, the chat history, the date and time of the communication, and necessary technical usage data. If you are logged into your customer account and ask a question about an order, your contact information, customer account details, and order information may also be processed. Logging in serves to verify your identity before personal order information is provided.
The processing is carried out to answer your inquiry, suggest suitable products to you, take pre-contractual measures, manage existing contractual relationships, and provide fast and efficient customer service. The legal basis is Article 6(1)(b) of the GDPR, insofar as the processing is necessary for the implementation of pre-contractual measures or for the performance of a contract. In all other cases, processing is carried out in accordance with Article 6(1)(f) of the GDPR based on our legitimate interest in providing customer-friendly advice, efficiently handling customer inquiries, and ensuring and improving the quality of our customer service.
The chat and Inbox Agent are provided by our platform provider, Shopify. Shopify processes chat communications in real time to generate responses and improve the quality of the Inbox Agent over time. The chat history is visible to us and to appropriately authorized employees within Shopify Inbox. According to Shopify, customer and conversation data are processed separately for our store and are not shared with other Shopify stores.
In connection with the provision of Shopify services, personal data may be processed by Shopify and its affiliated service providers outside the European Economic Area, specifically in Canada and the United States. Where necessary, such transfers are based on an adequacy decision or appropriate safeguards, such as the European Commission’s Standard Contractual Clauses. For more information, please see Shopify’s Privacy Policy.
Chat data is stored only for as long as necessary to process your inquiry, provide customer support, improve and secure the service, or to assert or defend legal claims. Thereafter, they will be deleted or anonymized, provided that no statutory retention requirements prevent this.
Inbox Agent does not make any fully automated decisions that have legal effects on you or significantly affect you in a comparable manner. Product recommendations are intended solely to assist you in selecting products. Please do not send passwords, payment details, detailed health information, diagnoses, or other particularly sensitive personal data via chat.
Newsletters and Marketing Communications
If you subscribe to our newsletter, we process your email address and, if applicable, your name, your language, the time of registration, and information regarding the consent you have provided, in order to send you news, offers, and information about our products and to be able to verify your consent.
This processing is based on your consent in accordance with Art. 6(1)(a) of the GDPR. To the extent that information is stored on or read from your device for the purpose of registration or performance measurement, this is also done only with your consent in accordance with Section 25(1) of the German Telemedia Act (TDDDG).
You can revoke your consent at any time with future effect, for example via the unsubscribe link in every marketing email or by sending a message to info@spiritbeautyexcellence.com. After you unsubscribe, we will no longer use your data to send you the newsletter. We may store your email address on a block list to the extent necessary to ensure that you do not receive any further marketing emails and that we can verify your revocation. The legal basis for this is Article 6(1)(c) and (f) of the GDPR.
Changes
We may update this Privacy Policy from time to time to reflect, for example, changes to our procedures or other operational, legal, or regulatory reasons.
Contact
For more information about our data protection measures, if you have any questions, or if you wish to file a complaint, please contact us by email at info@spiritbeautyexcellence.com or by mail using the details provided below:
SPIRIT - beauty excellence, Szillat Lina Szillat Derek GbR, Karlsplatz 3, 80335 Munich, Germany
Last updated: 04.08.2026
If you are not satisfied with our response to your complaint, you have the right to file your complaint with the competent data protection authority. You can contact your local data protection authority or our supervisory authority here.
