Privacy policy
Last updated: October 8, 2025
1) Who We Are (Data Controller)
FRÉA Beauty (“we”, “us”, “our”) operates this website and online store (the “Services”).
Controller: FRÉA Beauty
Contact: info@freabeauty.com
Our store is hosted by Shopify. Shopify provides the e-commerce platform and processes certain personal data to operate and improve its services. See Relationship with Shopify.
2) Scope
This Policy explains how we collect, use, share, and protect personal data when you browse, create an account, make a purchase, contact support, or interact with our marketing. If this Policy conflicts with our Terms of Service, this Policy governs for privacy matters.
3) Personal Data We Collect
- Identity & contact: name, email, phone, billing/shipping address.
- Account data: login, preferences.
- Orders & transactions: items viewed/added/purchased, returns, payment status (we do not store full card numbers).
- Payment data: processed securely by our payment providers.
- Device & usage: IP address, device/browser, pages viewed, session/analytics data, cookies.
- Communications: emails, support messages, reviews.
- Marketing preferences: consents, unsubscribes.
Sources: directly from you; automatically via cookies/SDKs; from service providers (payments, analytics, fulfillment); and advertising/affiliate partners where lawful.
4) Why We Use Your Data & Legal Bases (GDPR Art. 6)
| Purpose | Examples | Legal basis |
|---|---|---|
| Provide the Services | Account, checkout, shipping, returns, support | Contract (Art. 6(1)(b)) |
| Payments & fraud prevention | Secure payments, risk checks | Contract & Legitimate interests (Art. 6(1)(b),(f)) |
| Customer support | Respond to messages, manage requests | Contract & Legitimate interests |
| Service improvement & analytics | Site performance, debugging, insights | Legitimate interests (user experience & security) |
| Personalised marketing | Email/SMS marketing, on-site or retargeting ads | Consent for email/SMS & cookies (Art. 6(1)(a)); Legitimate interests where allowed |
| Legal & compliance | Tax, accounting, regulatory requests | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests, we balance those interests against your rights and expectations. You can object at any time (see Rights).
5) Cookies & Tracking
We use cookies and similar technologies for essentials (cart/checkout), analytics, and (with consent) personalisation/ads. Manage your choices via our Cookie Banner or browser settings. We honor valid Global Privacy Control (GPC) signals where legally required.
6) How We Share Data
- Shopify (hosting, platform, security, analytics features)
- Payment processors (e.g., card providers, Klarna/PayPal if enabled)
- Logistics & fulfillment partners (warehouses, carriers)
- Analytics & marketing tools (with consent where required)
- Professional services (IT/security, legal, accounting)
We may disclose data to authorities when legally required or in connection with a business transfer. We do not sell your personal data.
7) International Transfers
Your data may be processed outside the EEA/UK. Where we transfer data internationally, we use approved safeguards (e.g., EU Standard Contractual Clauses and UK equivalents) and additional measures where needed.
8) Retention
- Orders & invoices: up to 7–10 years (tax/accounting laws)
- Account data: while your account is active; deleted on request or after inactivity per policy
- Support & communications: typically 24 months
- Marketing data: until you withdraw consent or opt out (suppression data retained to honor your opt-out)
- Logs/analytics: per our Cookie Policy and provider settings
9) Your Rights (EEA/UK)
You may have the right to access, rectify, erase, restrict, port, and object to certain processing, and to withdraw consent at any time (does not affect prior processing). To exercise rights, email info@freabeauty.com. We may verify your identity.
You also have the right to lodge a complaint with a supervisory authority. In Sweden: Integritetsskyddsmyndigheten (IMY) – imy.se.
10) Marketing Choices
- Emails/SMS: unsubscribe via the link in our messages or contact us.
- Ads & cookies: use the Cookie Banner; adjust browser/mobile ad settings; use GPC where available.
Some platform-level opt-outs may still show non-personalised ads.
11) Security
We use technical and organisational measures appropriate to the risks (encryption in transit, access controls, least-privilege, backups). No method is 100% secure.
12) Children
Our Services are not intended for children under the age of majority. We do not knowingly collect children’s data. Parents/guardians may contact us to request deletion.
13) Relationship with Shopify
Our store runs on Shopify. Shopify processes certain personal data to operate, secure, and improve its services (including aggregated features across merchants). Learn more or exercise rights for Shopify-controlled processing here:
14) Changes to this Policy
We may update this Policy from time to time. We’ll post changes here and update the “Last updated” date. Material changes will be communicated as required by law.
15) Contact
Questions or requests: info@freabeauty.com