Shopping Cart

0

Your shopping bag is empty

Go to the shop

Privacy Policy + GDPR

Privacy Policy + GDPR

Effective Date: 5/11/25


At Ashamiel.com (“we,” “our,” or “us”), your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit our website, place an order, or interact with us. This policy also explains your rights under the General Data Protection Regulation (GDPR), if you are located in the European Economic Area (EEA).


1. Who We Are

Ashamiel.com is an online store offering hair and body care products. For the purpose of GDPR, we act as the “data controller” for the personal data we collect from you.


2. What Information We Collect

We collect and process the following types of data:

a. Personal Information

When you make a purchase, create an account, sign up for our newsletter, or contact us, we may collect:

  • Name
  • Email address
  • Phone number (optional)
  • Shipping and billing address
  • Payment information (processed securely by third parties)

 

b. Technical and Usage Data

We collect data about your device and how you use the site, including:

  • IP address
  • Browser type and version
  • Time zone and location
  • Operating system and platform
  • Pages visited and time spent on our site

 

3. Legal Bases for Processing (GDPR)

Under GDPR, we process your personal data based on one or more of the following legal bases:

  • Consent: When you sign up for our newsletter or marketing emails
  • Contract: To fulfill your purchase or provide customer support
  • Legal Obligation: To comply with tax, accounting, or regulatory requirements
  • Legitimate Interest: To improve our services, prevent fraud, and protect our business


4. How We Use Your Information

We use your data to:

  • Process and ship orders
  • Send transactional or marketing emails (with your consent)
  • Respond to your inquiries
  • Analyze website performance
  • Prevent fraud and ensure site security
  • Comply with legal obligations

 

5. Your Data Protection Rights (GDPR)

If you are located in the EEA, you have the following rights under GDPR:

  • Right to Access: You can request a copy of your personal data.
  • Right to Rectification: You can correct inaccurate or incomplete data.
  • Right to Erasure: You may request deletion of your data in certain situations.
  • Right to Restrict Processing: You may request limited use of your data.
  • Right to Data Portability: You can ask us to provide your data in a machine-readable format.
  • Right to Object: You can object to processing based on legitimate interest or direct marketing.
  • Right to Withdraw Consent: You can withdraw your consent at any time.


To exercise any of these rights, email us at: ashamielbeauty@gmail.com

You also have the right to lodge a complaint with your local data protection authority.


6. Data Transfers Outside the EEA

Our website is operated in the United States. If you are located outside the U.S., your data will be transferred and processed here. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

 

7. Data Retention

We retain your personal data only as long as necessary to:

  • Provide our services
  • Comply with legal obligations
  • Resolve disputes
  • Enforce our policies


When we no longer need your data, we securely delete or anonymize it.

 

8. Cookies & Tracking Technologies

We use cookies to:

  • Enable site functionality (e.g., shopping cart)
  • Analyze website traffic and performance
  • Personalize your experience
  • Deliver targeted advertising (with your consent)

 

You may manage or disable cookies in your browser settings. EU visitors will see a cookie consent banner when they first visit our site.


9. Third-Party Services

We only share your data with trusted service providers who support our business. These may include:

  • Payment processors (Stripe, PayPal)
  • Email marketing tools (Mailchimp, Klaviyo)
  • Analytics providers (Google Analytics)

 

These partners are contractually obligated to process your data securely and only as instructed by us.


10. Children’s Privacy

Ashamiel.com does not knowingly collect data from children under 13. If you believe we’ve collected such data, contact us immediately so we can delete it.


11. Changes to This Privacy Policy

We may update this Privacy Policy occasionally. If we make significant changes, we will notify you via email or through a notice on our website. Please review this page regularly for the latest information.


12. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or your data, please contact us:


Email: ashamielbeauty@gmail.com

Mailing Address: PO Box 142, Beaverdam, VA 23015

Data Controller: Melissa Crespo, Owner of Asha + Miel