Privacy policy
This Privacy Policy explains how we collect, use and protect your personal data when you visit www.meusperfumery.com (the "Website"), place an order or contact us. We process personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR") and Romanian Law no. 190/2018.
1. Who we are
The controller of your personal data is NICHESCENT S.R.L., with its registered office at Str. Tiberiu Brediceanu nr. 7B, Arad, Romania, Trade Register no. J2017002031022, VAT number RO38530802, operating the Meus Art Perfumery brand ("we" or "us").
For any question about your personal data or to exercise your rights, contact us at contact@meusartperfumery.com or +40 722 262 814, Monday to Sunday, from 10:00 to 22:00 (Romanian time).
2. Personal data we collect
We collect the following categories of personal data:
- Identification and contact data: name, email address, phone number, delivery and billing address.
- Order data: products purchased, order value, order history, invoices, returns and complaints.
- Payment data: payment status and transaction reference. Card details are entered directly with our payment processors; we do not see or store your full card number.
- Account data: email address, password (stored in encrypted form) and saved addresses, if you create an account.
- Communication data: the content of emails, messages and calls you exchange with us.
- Technical and usage data: IP address, device and browser type, pages visited and interactions with the Website, collected through cookies and similar technologies, as described in Section 8.
- Marketing preferences: whether you have subscribed to our newsletter.
We collect this data directly from you, when you place an order, create an account, subscribe or contact us, and automatically, when you use the Website.
3. Why we use your data and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Processing and delivering orders, handling returns, withdrawals and complaints | Performance of a contract, Art. 6(1)(b) |
| Issuing invoices and keeping accounting records | Legal obligation, Art. 6(1)(c) |
| Answering your questions and requests | Performance of a contract or our legitimate interest in providing customer service, Art. 6(1)(b) and (f) |
| Managing your customer account | Performance of a contract, Art. 6(1)(b) |
| Sending our newsletter and marketing emails | Your consent, Art. 6(1)(a) |
| Analytics and advertising cookies | Your consent, Art. 6(1)(a) |
| Essential cookies needed for the Website to work (cart, checkout, security) | Our legitimate interest in operating the Website, Art. 6(1)(f) |
| Preventing fraud and securing the Website and payments | Our legitimate interest, Art. 6(1)(f) |
| Defending our rights in legal disputes | Our legitimate interest, Art. 6(1)(f) |
We do not use your personal data for automated decision-making, including profiling, that produces legal or similarly significant effects for you.
4. Newsletter and marketing communications
4.1. We send marketing emails only if you have expressly subscribed. Creating an account or placing an order does not, by itself, subscribe you to our newsletter.
4.2. You can unsubscribe at any time, free of charge, using the link included in every marketing email or by contacting us. Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.
5. Who we share your data with
We share personal data only to the extent necessary for the purposes above, with:
- Shopify, the e-commerce platform that hosts the Website, our customer accounts and order management;
- payment processors, Shopify Payments and NETOPIA Payments, which process card payments;
- courier companies, FanCourier for deliveries in Romania and DPD for international deliveries, which receive your name, delivery address and phone number;
- accounting and invoicing service providers;
- email marketing, analytics and advertising service providers, such as Google Analytics, Meta (Facebook and Instagram) or TikTok, only if we use them and only where you have given your consent through the cookie banner;
- IT, hosting and security service providers;
- public authorities, such as tax authorities or courts, when required by law.
Our service providers process personal data on our behalf and according to our instructions, under data processing agreements, or as independent controllers where they provide a service directly to you (for example, payment processors). We do not sell your personal data.
6. International transfers
Some of our service providers, including Shopify, may process data outside the European Economic Area, for example in Canada or the United States. In these cases, transfers are made on the basis of an adequacy decision of the European Commission (such as the EU-U.S. Data Privacy Framework, for certified companies) or the Standard Contractual Clauses approved by the European Commission.
7. How long we keep your data
- Order and invoicing data: for the period required by Romanian financial and accounting legislation.
- Customer account data: for as long as the account is active. You can ask us to delete your account at any time.
- Customer service communications: up to 3 years from the last interaction, the general limitation period for possible claims.
- Newsletter data: until you unsubscribe.
- Cookies: for the periods shown in our cookie banner, depending on the type of cookie.
When the retention period ends, we delete or anonymise the data.
8. Cookies
8.1. The Website uses cookies and similar technologies. Essential cookies are needed for the Website to work, for example to keep products in your cart and to complete checkout, and do not require consent.
8.2. Analytics and marketing cookies are used only with your consent, which you give or refuse through the cookie banner shown on your first visit. You can change your choice at any time from the cookie settings on the Website or from your browser settings.
8.3. We currently use only the analytics provided by Shopify. If we add other analytics or advertising tools in the future, they will be activated only after you give your consent, and this Privacy Policy will be updated accordingly.
9. Security
We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or alteration. The Website uses an encrypted connection (HTTPS), and payments are processed by PCI DSS compliant providers.
10. Your rights
Under the GDPR, you have the right to:
- access the personal data we hold about you and receive a copy;
- rectification of inaccurate or incomplete data;
- erasure of your data, where there is no longer a legal reason for us to keep it;
- restriction of processing in certain circumstances;
- data portability, receiving the data you provided to us in a structured, commonly used format;
- object to processing based on our legitimate interest, and at any time to processing for direct marketing;
- withdraw your consent at any time, where processing is based on consent.
To exercise any of these rights, email us at contact@meusartperfumery.com. We will respond within one month of receiving your request. This period may be extended by two further months for complex requests, in which case we will inform you. We may ask you to confirm your identity before responding.
11. Complaints
If you believe that we have processed your personal data unlawfully, you can lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, Bucharest, Romania, www.dataprotection.ro, or with the data protection authority in your EU country of residence. We would appreciate the chance to address your concern first, so please contact us before filing a complaint.
12. Children
The Website is not intended for children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will delete it.
13. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes in our activity or in the law. The current version is always available on the Website, with the date of the last update shown at the top. For significant changes, we will inform customers by email or through a notice on the Website.