Datenschutzerklärung
Privacy Policy
Last updated: August 31, 2026
COSMEHUB operates this online store and website, including all related information, content, features, tools, products and services (collectively, the "Services"). The Services are hosted and powered by Shopify.
This Privacy Policy explains how COSMEHUB collects, uses, stores and discloses personal information when you visit our website, use our Services, place an order, make a purchase, contact us or otherwise interact with COSMEHUB.
For the purposes of applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 ("GDPR"), COSMEHUB is the data controller of your personal data.
By using our website or purchasing our products, you acknowledge that you have read this Privacy Policy. Where applicable, we will obtain your consent before processing your personal data for purposes for which consent is required by law.
1. Personal Information We Collect
Depending on how you interact with COSMEHUB, we may collect the following categories of personal information:
Contact and identification information
This may include:
-
first and last name;
-
billing address;
-
shipping address;
-
email address;
-
telephone number, if provided;
-
other information necessary to process and fulfil your order.
Order and transaction information
This may include:
-
products purchased or considered;
-
order number;
-
order date;
-
payment method;
-
transaction details;
-
delivery and return information;
-
information relating to refunds, cancellations or complaints.
Payment information
Payments may be processed by third-party payment providers. Depending on the payment method selected, COSMEHUB may receive information such as payment confirmation, transaction identification and payment status.
COSMEHUB does not generally receive or store your complete payment card number where payment is processed directly by a third-party payment provider.
Communications
When you contact us, we may collect the information you provide, including your name, email address, order information and the contents of your communication.
Technical and usage information
When you visit our website, certain information may be collected automatically, including:
-
IP address;
-
browser type;
-
device type;
-
operating system;
-
language preferences;
-
approximate location derived from technical information;
-
pages visited;
-
information about how you interact with our website;
-
information relating to cookies and similar technologies.
The information collected depends on the Shopify settings, cookies, applications and other technologies enabled on our store.
2. How We Collect Personal Information
We may collect personal information:
-
directly from you when you place an order or contact us;
-
automatically when you browse or interact with our website;
-
through cookies and similar technologies;
-
from Shopify and service providers involved in operating our store;
-
from payment providers, shipping providers and other service providers where necessary to provide our Services;
-
from other third parties where permitted by applicable law.
3. How We Use Your Personal Information
We process personal information only where we have a lawful basis to do so.
Processing and fulfilling orders
We use your personal information to:
-
process and fulfil your orders;
-
process payments;
-
arrange delivery;
-
communicate with you regarding your order;
-
process returns, refunds and complaints;
-
provide customer support.
Legal basis: performance of the contract with you and, where applicable, compliance with legal obligations.
Customer service and communication
We use your information to respond to enquiries, provide customer support and communicate with you about our Services.
Legal basis: performance of the contract, taking steps at your request before entering into a contract, our legitimate interests in providing customer service, and, where applicable, your consent.
Legal and accounting obligations
We may process your personal information where necessary to comply with applicable laws, including tax, accounting, consumer protection and other legal obligations.
Legal basis: compliance with a legal obligation.
Fraud prevention and security
We may use personal information to detect, prevent and investigate fraud, abuse, security incidents and other unlawful activity and to protect our customers, business and website.
Legal basis: our legitimate interests in protecting COSMEHUB, our customers and our Services, and where applicable, compliance with a legal obligation.
Website operation and improvement
We may use technical and usage information to operate, maintain, secure and improve our website and Services.
Legal basis: our legitimate interests, where permitted by applicable law.
Marketing and advertising
Where permitted by law, we may use your personal information to send marketing communications or provide advertising and promotional content.
Where consent is required by law, we will request your consent before using your information for such purposes.
You may withdraw your consent or unsubscribe from marketing communications at any time by using the unsubscribe option in the relevant communication or by contacting us.
Legal basis: your consent where required, or our legitimate interests where permitted by applicable law.
4. Cookies and Similar Technologies
COSMEHUB and Shopify may use cookies and similar technologies to operate the website, remember preferences, maintain security, analyse website usage and, where applicable, support marketing and advertising.
Some cookies are necessary for the website and checkout to function correctly. Other cookies may be used for analytics, personalisation or advertising.
Where required by applicable law, non-essential cookies will only be used after you have provided the necessary consent.
You can manage your cookie preferences through the cookie banner or privacy settings available on our website.
You may also be able to control cookies through your browser settings.
Please note that disabling certain cookies may affect the functionality of the website.
5. Sharing Personal Information
We may share personal information with third parties where necessary to operate COSMEHUB and provide our Services.
These recipients may include:
-
Shopify, which provides the ecommerce platform hosting and operating our store;
-
payment service providers;
-
shipping and delivery companies;
-
technology and IT service providers;
-
website and analytics providers;
-
customer support providers;
-
accounting and professional service providers;
-
marketing and advertising service providers, where applicable;
-
fraud prevention and security providers;
-
government authorities or other recipients where required by law.
We only share information where there is an appropriate legal basis for doing so and only to the extent reasonably necessary for the relevant purpose.
6. Shopify
Our online store is hosted and powered by Shopify.
Shopify may process personal information relating to your use of our store in order to provide its ecommerce platform and related services.
Depending on the Shopify services and features enabled on our store, Shopify may process information as our processor or, in certain circumstances, as an independent controller.
Shopify provides information about how it processes personal information and provides privacy controls for individuals through its own privacy resources.
You can learn more about Shopify's privacy practices here:
Shopify Privacy Policy:
https://www.shopify.com/legal/privacy
Shopify Privacy Controls:
https://privacy.shopify.com/
COSMEHUB is responsible for determining how customer information is processed for the purposes of our own business operations.
7. Payment Providers
COSMEHUB may offer various payment methods, which may include payment cards and services such as Visa, Mastercard, American Express, Apple Pay, Google Pay, PayPal and Klarna, depending on availability and the payment methods enabled at checkout.
When you choose a payment method, your payment information may be processed directly by the relevant payment provider.
The payment provider may process your personal information in accordance with its own privacy policy and applicable laws.
COSMEHUB does not generally store complete payment card details.
8. Data Retention
We retain personal information only for as long as necessary for the purposes described in this Privacy Policy, including to:
-
provide our Services;
-
fulfil orders;
-
maintain business and transaction records;
-
comply with legal, tax and accounting obligations;
-
resolve disputes;
-
handle complaints and returns;
-
prevent fraud and abuse;
-
enforce our agreements.
The specific retention period depends on the type of information and the purpose for which it is processed.
Where personal information is no longer required, it will be deleted or anonymised, unless applicable law requires us to retain it for a longer period.
9. Your Rights Under the GDPR
If the GDPR applies to you, you may have the following rights in relation to your personal data:
Right of access
You may request access to the personal data we hold about you.
Right to rectification
You may request correction of inaccurate or incomplete personal information.
Right to erasure
You may request deletion of your personal data where the legal requirements for exercising this right are met.
Right to restriction
You may request restriction of processing in certain circumstances.
Right to data portability
Where applicable, you may request to receive personal data you have provided to us in a structured, commonly used and machine-readable format and request that it be transmitted to another controller.
Right to object
You may object to certain processing of your personal data, including processing based on our legitimate interests.
You have an absolute right to object to the processing of your personal data for direct marketing purposes.
Right to withdraw consent
Where we process your personal data based on consent, you may withdraw that consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
10. How to Exercise Your Rights
To exercise your rights or ask questions about the processing of your personal data, please contact us at:
COSMEHUB
Pistacjowa 16
Dyminy, Poland
Email: cosmehub.contact@gmail.com
We may need to verify your identity before processing certain requests in order to protect your personal information.
We will respond to valid requests within the timeframe required by applicable law.
11. Right to Lodge a Complaint
If you believe that COSMEHUB is processing your personal data unlawfully, you have the right to lodge a complaint with the competent data protection supervisory authority.
For customers in Poland, the competent supervisory authority is:
President of the Personal Data Protection Office (UODO)
You may find further information about data protection and your rights on the website of the Polish supervisory authority.
You may also contact the supervisory authority in the EU Member State of your habitual residence, place of work or place of the alleged infringement, where applicable.
12. International Data Transfers
Because COSMEHUB uses Shopify and other service providers, personal information may be processed or transferred outside the European Economic Area ("EEA").
Where personal data is transferred outside the EEA, we will rely on appropriate safeguards required by applicable data protection law, such as an adequacy decision, Standard Contractual Clauses or another legally recognised transfer mechanism, where applicable.
Shopify states that personal data relating to European merchants and customers may be transferred internationally as part of providing its services and that appropriate mechanisms are used for such transfers.
13. Data Security
We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
However, no method of transmitting or storing information can be guaranteed to be completely secure.
You should also take appropriate steps to protect your account credentials and other information used to access our Services.
14. Third-Party Websites
Our website may contain links to websites, applications or services operated by third parties.
If you follow a link to a third-party website, that website will have its own privacy policy and terms.
COSMEHUB is not responsible for the privacy practices, security or content of third-party websites or services that are not controlled by us.
15. Children's Privacy
Our Services are intended for adults and are not directed at children.
We do not knowingly collect personal information from children where prohibited by applicable law.
If you believe that a child has provided us with personal information, please contact us at:
We will take appropriate steps to address the matter in accordance with applicable law.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, Services, technology, legal requirements or data processing practices.
When we make changes, we will update the "Last updated" date at the beginning of this Privacy Policy.
Where required by law, we will provide additional notice or obtain consent for material changes.
17. Contact Us
If you have any questions about this Privacy Policy, our privacy practices or the processing of your personal information, please contact us:
COSMEHUB
Pistacjowa 16
Dyminy, Poland
Email: cosmehub.contact@gmail.com
For the purposes of applicable data protection laws, COSMEHUB is the data controller of your personal information.