Privacy Policy

This Privacy Policy governs the processing of the personal data of users and customers of the website https://keratinveganfactory.com.

ClickBeauty Labs, S.L. undertakes to process personal data lawfully, fairly, transparently and securely, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), Ley Orgánica 3/2018, de Protección de Datos Personales y garantía de los derechos digitales, and other applicable legislation.

1. Data controller

Company name: ClickBeauty Labs, S.L.

CIF: B22554497

Registered office: Calle Arquitecto Rey Pedreira 2, Bajo I, 15011 A Coruña, España.

Email: info@clickbeautylabs.com

Website: https://keratinveganfactory.com

Activity: Development, manufacture and marketing of cosmetic products.

2. Personal data we process

Depending on the relationship the user has with ClickBeauty Labs, S.L., we may process the following categories of data:

  • First name and surname.
  • Email address.
  • Telephone number.
  • Postal address and delivery details.
  • Billing details.
  • Identification and tax details where necessary.
  • Information relating to orders, purchases, returns and incidents.
  • Communications with our customer service.
  • IP address, device identifiers and browsing data.
  • Commercial preferences and consent to receive communications.
  • Any other information the user voluntarily provides through forms, email or other contact channels.

We do not intentionally request special categories of personal data, such as information about health, ethnic origin, religious beliefs, political opinions or biometric data.

3. How we obtain data

Personal data may be obtained through:

  • The purchase and payment process.
  • The creation and management of a customer account.
  • Contact forms.
  • Forms requesting information, quotes or services.
  • Subscriptions to commercial communications.
  • Email communications.
  • Enquiries, complaints, returns or after-sales requests.
  • Cookies and similar technologies.
  • Interactions with our social media.
  • Forms aimed at professional customers, distributors or private labels.

The user guarantees that the data provided is accurate, complete, up to date and truthful, and undertakes to report any changes.

4. Purposes of processing

Personal data will be processed for the following purposes:

Management of orders and purchases

Managing the shopping cart, processing orders and payments, issuing invoices, arranging shipments, handling returns and providing after-sales service.

Customer service

Responding to enquiries, information requests, complaints, incidents and communications received through the available channels.

Management of user accounts

Creating, maintaining and administering customer accounts, and providing access to order history and other available features.

Provision of professional services

Managing requests related to cosmetic manufacturing, private labels, samples, quotes, distribution and other services offered by ClickBeauty Labs, S.L.

Compliance with legal obligations

Complying with tax, accounting, administrative, consumer, fraud prevention and other legally required obligations.

Security and fraud prevention

Protecting the website, business operations and IT systems against unauthorised access, abuse, fraudulent transactions or unlawful activities.

Commercial communications

Sending information about products, services, promotions, news and offers where the user has given their consent or another valid legal basis exists.

The user may withdraw their consent to receive these communications at any time.

Analysis and improvement of the website

Analysing the operation and use of the Site, obtaining statistics, detecting errors and improving the browsing experience, always in accordance with the user's cookie preferences.

Social media management

Managing the presence of ClickBeauty Labs, S.L. on social media and responding to interactions, messages or comments made through those platforms.

5. Legal bases for processing

The legal bases for processing the data are:

  • The performance of a contract or the application of pre-contractual measures, to manage orders, purchases, quotes, returns and requested services.
  • The user's consent, for sending commercial communications and using non-essential cookies.
  • Compliance with legal obligations applicable to ClickBeauty Labs, S.L.
  • Legitimate interest, to protect the business against fraud, ensure the security of the Site, handle certain communications and improve our services, provided that the user's rights do not prevail.

Withdrawal of consent will not affect the lawfulness of processing carried out previously.

6. Retention periods

Personal data will be kept for as long as necessary to fulfil the purpose for which it was collected.

In particular:

  • Data relating to orders and billing will be kept for the periods required by tax, accounting and commercial legislation.
  • Data relating to enquiries will be kept for as long as necessary to handle them and, subsequently, for the period needed to address any possible liabilities.
  • Customer data will be kept for as long as a contractual or commercial relationship exists.
  • Data used for commercial communications will be kept until the user withdraws their consent or requests its erasure.
  • Data processed under a legal obligation will be kept for the periods established by applicable legislation.
  • Data relating to possible claims will be kept for as long as legal liabilities may arise.

Once these periods have expired, the data will be deleted or duly blocked.

7. Data recipients

Personal data may be disclosed or made available to providers necessary to deliver our services, including:

  • Hosting, technology infrastructure and security providers.
  • E-commerce platforms.
  • Payment service providers and financial institutions.
  • Transport and logistics companies.
  • Billing, accounting and advisory service providers.
  • Customer service providers.
  • Email and communications providers.
  • Analytics, advertising and marketing tools, where consent has been given.
  • Public authorities, courts, tribunals and competent authorities where there is a legal obligation.

These providers may only process the data in accordance with the instructions of ClickBeauty Labs, S.L. and under the corresponding contracts and confidentiality obligations.

8. Shopify

The Site is hosted on the Shopify e-commerce platform.

Shopify may process certain personal data when users visit the Site, create an account, make a purchase or interact with the store. This processing is necessary to provide the technology infrastructure, manage the purchase process, maintain the security of the platform and offer e-commerce functionality.

The use of Shopify does not replace the obligations of ClickBeauty Labs, S.L. as data controller.

9. Payments

Payments are processed by external payment service providers.

ClickBeauty Labs, S.L. does not directly store full bank card details. This data is processed by the relevant payment provider in accordance with its own security measures and privacy policies.

The available payment methods will be shown during checkout.

10. Transport companies

When an order needs to be delivered, the transport company will be given the data essential for delivery, such as name, address, email, telephone and shipping-related information.

11. Cookies and similar technologies

The Site uses technical cookies necessary for its operation and may use analytics, advertising or personalisation cookies where the user has given their consent.

Users can accept, reject or configure cookies through the settings panel available on the Site.

Additional information can be found in the Cookie Policy.

12. International data transfers

Some technology providers may process data from countries outside the European Economic Area.

Where international data transfers take place, ClickBeauty Labs, S.L. will require the application of appropriate safeguards, such as:

  • Adequacy decisions approved by the European Commission.
  • Standard contractual clauses.
  • Binding corporate rules.
  • Adherence to recognised international frameworks.
  • Any other safeguard permitted by applicable legislation.

Transfers to countries outside the European Economic Area must be subject to the safeguards provided for in the GDPR.

13. Commercial communications

ClickBeauty Labs, S.L. will only send electronic commercial communications where prior consent exists or where they are permitted by applicable legislation.

Users may unsubscribe at any time by:

  • The unsubscribe link included in each communication.
  • A request sent to info@clickbeautylabs.com.

Withdrawal of consent will not affect the management of orders, contracts or services already requested.

14. Reviews and testimonials

When users submit a review, comment or testimonial, they may authorise its publication on the Site or on other ClickBeauty Labs, S.L. channels.

Published information may be visible to other users. Users may request the removal of a review containing their personal data by writing to info@clickbeautylabs.com, without prejudice to legal obligations or the right of ClickBeauty Labs, S.L. to retain certain information for the defence of claims.

15. Social media

ClickBeauty Labs, S.L. may maintain profiles on social media.

When users interact with these profiles, the processing of their data will be subject both to this Policy and to the terms and privacy policies of the relevant social network.

The data will be used to manage our presence on these platforms, respond to messages and comments and provide information about our products, services and activities.

16. Users' rights

Users may exercise the following rights:

  • Access: to know what personal data we process.
  • Rectification: to correct inaccurate or incomplete data.
  • Erasure: to request the deletion of their data when it is no longer necessary.
  • Objection: to object to certain processing.
  • Restriction: to request that processing be restricted in certain circumstances.
  • Portability: to receive the data provided in a structured, commonly used and machine-readable format.
  • Withdrawal of consent: to withdraw consent given at any time.
  • Not to be subject to solely automated decisions: where they produce legal effects or significantly affect them, except in legally permitted cases.

These rights are part of the guarantees recognised by European data protection legislation.

17. How to exercise your rights

To exercise their rights, users must send a request to:

Email: info@clickbeautylabs.com

Postal address: ClickBeauty Labs, S.L., Calle Arquitecto Rey Pedreira 2, Bajo I, 15011 A Coruña, España.

The request must state:

  • First name and surname.
  • The right they wish to exercise.
  • Information needed to locate their data.
  • The means by which they wish to receive the response.

Where necessary to verify identity, identification documents may be requested. Any information not required for that verification should be concealed.

18. Complaint to the supervisory authority

Users have the right to lodge a complaint with the Agencia Española de Protección de Datos (Spanish Data Protection Agency) if they consider that the processing of their personal data does not comply with applicable legislation.

19. Minors

The Site is not specifically aimed at minors.

Minors should not provide personal data without the authorisation of their parents, guardians or legal representatives where such authorisation is required.

ClickBeauty Labs, S.L. may delete data when it becomes aware that it was provided by a minor without the corresponding authorisation.

20. Security and confidentiality

ClickBeauty Labs, S.L. adopts appropriate technical and organisational measures to protect personal data against:

  • Loss.
  • Alteration.
  • Destruction.
  • Unauthorised access.
  • Improper disclosure.
  • Unlawful processing.

The Site uses security and encryption systems during the transmission of information. However, no system connected to the Internet can guarantee absolute security.

Persons, employees, collaborators and providers with access to personal data will be subject to confidentiality obligations.

21. Accuracy of data

Users are responsible for ensuring that the data provided is true, accurate, complete and up to date.

ClickBeauty Labs, S.L. shall not be liable for any damage arising from the provision of false, incomplete or outdated information.

22. Automated decisions and profiling

ClickBeauty Labs, S.L. does not make solely automated decisions that produce legal effects on the user or significantly affect them, unless expressly informed and a valid legal basis exists.

Basic analysis of preferences or behaviour may be carried out for statistical, security, fraud prevention or commercial personalisation purposes, always respecting the user's preferences and rights.

23. Changes to the Privacy Policy

ClickBeauty Labs, S.L. may amend this Privacy Policy to adapt it to legislative, technical or operational changes or changes relating to the services offered.

Where the changes are significant, users will be informed through the Site or by other appropriate means.

Last updated: 18 July 2026.