Privacy policy
PRIVACY POLICY
This website is operated by HDH ECOM INC, doing business as Quia Beauty. Quia Beauty operates this store and website, including all related information, content, features, tools, products and services, in order to provide you with a curated shopping experience (the "Services"). Quia Beauty is powered by Shopify, which enables us to provide the Services to you.
This Privacy Policy describes how Quia Beauty ("we," "us," or "our") collects, uses, shares, and retains your personal information when you visit quiabeauty.com, use our services, make a purchase, or otherwise interact with us. "You" and "your" refer to you as a user of the Services, whether as a customer, a website visitor, or another individual whose information we collect under this Privacy Policy.
Please read this Privacy Policy carefully. By using or accessing any of the Services, you acknowledge that you have read and understood this Privacy Policy.
PERSONAL INFORMATION WE COLLECT
"Personal information" means information that identifies you or can reasonably be linked to you. It does not include information that has been anonymized or de-identified. Depending on how you interact with us, we may collect the following categories of personal information:
Contact details, including your name, billing address, shipping address, phone number, and email address.
Financial information, including payment card details, financial account information, transaction details, and payment confirmation.
Account information, including your username, password, security questions, and account preferences.
Transaction information, including items you view, add to your cart, purchase, return, exchange, or cancel, and your order history.
Communications with us, including information you provide when contacting our customer support team or otherwise communicating with us.
Device and technical information, including your IP address, browser type, device identifiers, and network connection details.
Usage information, including how you navigate and interact with our website, which pages you visit, and how long you spend on them.
Inferences drawn from the above, including inferences about your preferences or likely interests based on your activity.
Sensitive personal information: We do not intentionally collect sensitive personal information such as government-issued ID numbers, financial account login credentials, precise geolocation, racial or ethnic origin, or health data. If you voluntarily provide any such information in a communication with us, we will use it only to respond to your request and will not use it for any other purpose.
HOW WE COLLECT PERSONAL INFORMATION
We collect personal information from the following sources:
Directly from you, when you create an account, make a purchase, contact us, or otherwise provide your information to us.
Automatically through the Services, from your device when you visit our website, through cookies, pixels, and similar tracking technologies.
From our service providers, when they collect or process your personal information on our behalf.
From our advertising and marketing partners, including data they provide about your online activity across different websites and platforms.
From Shopify, in connection with operating our store on their platform.
HOW WE USE YOUR PERSONAL INFORMATION
We use your personal information for the following purposes:
To fulfill your orders and provide the Services, including processing payments, arranging shipping, managing returns and exchanges, maintaining your account, and sending order-related notifications.
To personalize your experience, including recommending products based on your purchase history and activity on our website.
To send marketing communications, including promotional emails, text messages, and postal mail about our products and offers. We may also show you targeted advertisements on our website and on third-party platforms, including based on your past purchases and browsing activity.
To share data with advertising partners for targeted advertising purposes. We share certain personal information, including identifiers and browsing behavior, with advertising partners such as Meta (Facebook and Instagram) and Google. This sharing may constitute a "sale" or "sharing" of personal information under applicable U.S. privacy laws, including the California Consumer Privacy Act. You have the right to opt out of this use of your information. See the "Your Privacy Rights" section below for details.
For security and fraud prevention, including authenticating your account, detecting and investigating suspicious or fraudulent activity, and securing our platform.
To communicate with you, including responding to your questions, providing customer support, and maintaining our relationship with you.
To comply with legal obligations, including responding to valid legal process, cooperating with regulatory authorities, and enforcing our terms and policies.
HOW WE DISCLOSE YOUR PERSONAL INFORMATION
We may share your personal information in the following circumstances:
With Shopify and other service providers who help us operate our business, including for payment processing, order fulfillment, cloud storage, IT management, customer support, and data analytics.
With advertising and marketing partners to deliver targeted advertising and measure the performance of our ads. For example, we share identifiers, browsing activity, and purchase data with platforms such as Meta and Google. This sharing may be considered a "sale" or "sharing" of personal information under California law, and "targeted advertising" under other U.S. state privacy laws. You may opt out of this sharing at any time. See the "Your Privacy Rights" section below.
When you direct or consent to disclosure, such as when you use social media integrations or request that we share your information with a third party.
With our affiliates and within our corporate group, for internal business purposes.
In connection with a business transaction, such as a merger, acquisition, or bankruptcy, where your personal information may be transferred as part of the transaction.
To comply with legal obligations, including in response to lawful requests from government authorities, court orders, subpoenas, or other legal process.
To protect rights and safety, including to enforce our terms of service, prevent harm, or protect the rights of our users or others.
We do not sell your personal information to data brokers or third parties for their own independent marketing purposes.
DATA RETENTION
We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. In general:
Account information is retained for as long as your account remains active and for a reasonable period afterward in case you choose to reactivate it.
Order and transaction records are retained for up to seven years to comply with tax, accounting, and legal obligations.
Marketing-related data is retained until you opt out of marketing communications or request deletion, or for as long as permitted under applicable law.
Technical and usage data collected through cookies and similar technologies is retained in accordance with our cookie settings, typically between 30 days and two years depending on the type of data and the purpose.
When personal information is no longer needed, we delete it or anonymize it in accordance with our data retention practices.
RELATIONSHIP WITH SHOPIFY
The Services are hosted by Shopify, which collects and processes personal information in connection with the operation of our store. Information you submit through the Services is transmitted to and stored by Shopify, and may be shared with third parties located in countries other than where you reside. Shopify may also use personal information collected about your interactions with our store, along with other Shopify merchants, to provide and improve its services. In these circumstances, Shopify acts as an independent data controller responsible for its own processing. To learn more about Shopify's data practices and your rights, visit the Shopify Consumer Privacy Policy at https://www.shopify.com/legal/privacy and the Shopify Privacy Portal at https://privacy.shopify.com/en.
THIRD-PARTY WEBSITES AND LINKS
Our website may contain links to third-party websites or platforms. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit. Our inclusion of a link does not imply endorsement of that site or its operators.
CHILDREN'S DATA
The Services are not directed to children, and we do not knowingly collect personal information from anyone under the age of majority in their jurisdiction. If you believe a child has provided us with their personal information, please contact us at support@quiabeauty.com and we will delete it.
SECURITY
We implement reasonable administrative, technical, and physical safeguards to protect your personal information. However, no security measure is completely foolproof, and we cannot guarantee the security of information transmitted to or from us. We recommend that you protect your account credentials and avoid communicating sensitive information through unsecured channels.
YOUR PRIVACY RIGHTS
Depending on where you live, you may have the rights described below. We will not discriminate against you for exercising any of these rights. We may need to verify your identity before processing your request. You may designate an authorized agent to submit requests on your behalf, provided that the agent can demonstrate authorization and we are able to verify your identity.
To exercise any of the rights described below, contact us at support@quiabeauty.com or use the mechanisms described in this section.
Right to Know or Access: You may request information about the personal information we hold about you, including the categories we collect, how we use it, and with whom we share it.
Right to Delete: You may request that we delete the personal information we hold about you, subject to certain exceptions.
Right to Correct: You may request that we correct inaccurate personal information we hold about you.
Right to Data Portability: You may request a copy of the personal information you have provided to us in a portable format.
Right to Opt Out of Sale or Sharing for Targeted Advertising: We share certain personal information with advertising partners in ways that may constitute a "sale" or "sharing" under the California Consumer Privacy Act (CCPA/CPRA), or "targeted advertising" under other state privacy laws. You may opt out of this sharing at any time by clicking the "Do Not Sell or Share My Personal Information" link on our website, or by contacting us at support@quiabeauty.com with the subject line "Opt-Out Request."
If you visit our website with the Global Privacy Control signal enabled, we will treat this as an opt-out request for the browser and device you are using. To learn more, visit https://globalprivacycontrol.org/. We do not respond to other browser-level "Do Not Track" signals.
Managing Communication Preferences: You may unsubscribe from our promotional emails at any time by clicking the unsubscribe link in any marketing email. We may still send you transactional emails related to your account or orders.
CALIFORNIA RESIDENTS — ADDITIONAL RIGHTS (CCPA/CPRA)
If you are a California resident, you have the following additional rights under the California Consumer Privacy Act and the California Privacy Rights Act.
Categories of personal information we collect: We collect identifiers (name, email, IP address), commercial information (purchase and transaction history), financial information (payment details), internet and network activity (browsing behavior), and inferences drawn from the above.
Categories of personal information we sell or share: We share identifiers, commercial information, and internet and network activity with advertising partners such as Meta and Google for targeted advertising purposes. This sharing may be considered a "sale" or "sharing" under the CCPA/CPRA.
Categories of personal information we disclose for a business purpose: We disclose all categories listed above to our service providers and Shopify for business operations.
We do not knowingly sell or share the personal information of California residents under 16 years of age.
Sensitive personal information: We do not use sensitive personal information for purposes beyond those permitted under the CCPA/CPRA without your consent.
To exercise your California rights, contact us at support@quiabeauty.com. We will respond within 45 days as required by law.
EEA AND UK RESIDENTS — ADDITIONAL RIGHTS (GDPR / UK GDPR)
If you are located in the European Economic Area (EEA) or the United Kingdom (UK), the following additional information applies to you.
Data Controller: For the purposes of applicable data protection law, HDH ECOM INC (Quia Beauty) is the data controller of your personal information collected through the Services.
Lawful Basis for Processing: We process your personal information on the following legal grounds:
Performance of a contract, when processing is necessary to fulfill your order, manage your account, or provide the Services you have requested.
Legitimate interests, including for fraud prevention, improving the Services, and marketing to existing customers where such interests are not overridden by your rights.
Consent, for certain marketing communications and the use of non-essential cookies or tracking technologies. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
Legal obligation, when processing is necessary to comply with applicable law.
Your rights under GDPR / UK GDPR: In addition to the rights described above, you have the right to object to processing based on legitimate interests or for direct marketing purposes, and the right to request restriction of processing in certain circumstances.
To exercise these rights, contact us at support@quiabeauty.com.
Complaints: If you have a complaint about how we handle your personal information, you may lodge a complaint with your local data protection authority. A list of EEA supervisory authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members. UK residents may contact the Information Commissioner's Office at https://ico.org.uk/.
International Data Transfers: We may transfer your personal information to countries outside the EEA or UK. When we do, we rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses, or equivalent mechanisms approved by the UK authorities, unless the transfer is to a country recognized as providing an adequate level of data protection.
CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal and regulatory reasons. We will post the updated policy on this website and update the "Last updated" date at the top. Where required by applicable law, we will provide additional notice of material changes.
CONTACT US
If you have questions about this Privacy Policy or how we handle your personal information, please contact us:
Email: support@quiabeauty.com
Text Messaging
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except for vendors and aggregators that assist us in delivering text messages to you. Message frequency varies. Message and data rates may apply. You can opt out at any time by replying STOP to any message, and you can reply HELP for assistance.