Privacy policy

Privacy Policy

Last updated: 6 October 2026

This Privacy Policy explains how Anna Renata S.L., trading as The Salon Life, collects and uses personal information when you visit thesalonlifeshop.eu, place an order, contact us, subscribe to our newsletter or purchase a personalised nail assessment.

1. Who is responsible for your information?

The controller responsible for the personal information described in this policy is:

Anna Renata S.L.
NIF: B75804104
Business and correspondence address: C/ Riu de la Plata, 26, Local 4, 17310 Lloret de Mar, Girona, Spain
Email: thesalonlifeshop@gmail.com

You can contact us using these details about your personal information or to exercise your privacy rights.

2. Information we collect

Depending on how you interact with us, we process:

  • Contact information: your name, email address, billing and delivery addresses, and telephone number where provided.

  • Order information: products and services purchased, order history, payment status, transaction references, delivery information, returns and refunds.

  • Customer communications: emails, chat messages, enquiries and information you provide when requesting assistance.

  • Marketing preferences: newsletter subscriptions, consent records and unsubscribe preferences.

  • Reviews: ratings, review text, the display name you provide and any images you submit for publication.

  • Assessment information: photographs, nail-care history, concerns, questions, correspondence and the personalised video prepared for you.

  • Technical and usage information: IP address, browser and device information, approximate location, cookie identifiers and interactions with our website, where collected through the services and technologies described below.

Payment details are handled by the payment providers available at checkout. We receive the transaction information needed to manage your order.

We obtain information directly from you, through your use of our website, and from service providers involved in payments, delivery and operating the store.

3. Why we use information and our legal grounds

We use personal information for the following purposes:

Processing orders and providing services
To accept payment, deliver goods and digital products, provide assessments, communicate about orders and handle returns. The legal basis is performance of our contract with you or taking steps at your request before entering into a contract.

Customer enquiries and follow-up support
To answer questions and provide assistance. We rely on performance of a contract where the enquiry relates to a purchase, or our legitimate interest in responding to enquiries and supporting customers.

Accounting and legal obligations
To maintain required business records, meet tax obligations and respond to lawful requests from authorities. The legal basis is compliance with legal obligations.

Security, fraud prevention and disputes
To protect our customers and business, investigate suspicious transactions and establish or defend legal claims. We rely on our legitimate interests and, where applicable, legal obligations.

Newsletters and optional notifications
To send newsletters when you subscribe and stock-availability alerts you request. We rely on your consent. You may unsubscribe from newsletters at any time using the link in the email or by contacting us.

Customer reviews
To receive, verify, moderate and display reviews that customers submit for publication. We rely on our legitimate interest in providing authentic customer feedback. Optional uses requiring consent are subject to that consent.

Optional analytics and personalisation
Where consent is required for cookies, tracking or related processing, we rely on your consent. You can manage your choices through the website’s cookie preferences.

When we rely on legitimate interests, we consider the effect on your rights and freedoms. You may object to processing based on those interests.

Providing information needed to process an order or assessment is necessary for us to fulfil it. Newsletter subscriptions and optional tracking are not required to make a purchase.

4. Personalised nail assessments

When you purchase an assessment, we use your photographs, nail-care history and questions to prepare personalised cosmetic-care guidance and respond to related follow-up enquiries.

Assessment correspondence and submitted photographs are held in our Gmail account. Videos are hosted on Vimeo using privacy settings rather than being published as public videos.

We delete the Vimeo video after you confirm that you have watched or downloaded it. If we do not hear from you, we delete it one month after sending you access.

We retain assessment emails and photographs for 12 months after delivering the assessment, to support follow-up questions. If a follow-up remains unresolved, we retain the relevant information until it is resolved and then review it for deletion. Limited records may need to be retained longer for legal obligations or legal claims.

Please provide only information relevant to your cosmetic nail-care assessment. Our service does not provide medical diagnosis or treatment.

If information reveals health conditions, additional data-protection requirements may apply. Where we rely on explicit consent to process that information, we will request it separately. Simply accepting this Privacy Policy does not provide that consent.

Providing assessment material does not give us permission to publish it. Any use of identifiable assessment material for public educational content or marketing requires separate permission.

5. Service providers and sharing

We use service providers to operate our business. Information is shared where needed for the relevant service, including with:

  • Shopify: store hosting, checkout, customer accounts, communications, forms, store automation and related platform functions.

  • Payment providers: processing payments, refunds and payment-security checks.

  • Shipping providers and carriers: arranging delivery, tracking parcels and resolving delivery problems, including Sendcloud where used.

  • Judge.me: collecting, managing and displaying customer reviews.

  • Google: Gmail communications and connected Google and YouTube commerce services.

  • Vimeo: hosting and delivering personalised assessment videos.

  • Other store-support providers: delivering digital purchases, sending requested stock alerts, directing visitors to the relevant regional store, synchronising store operations and preparing business reports.

  • Professional advisers: accountants, legal advisers and others who need relevant information to provide their services.

  • Public authorities: where disclosure is legally required.

Authorised business-support integrations may also access relevant store information to assist us with administration and customer support.

Some providers act on our instructions; others act as independent controllers for particular activities, such as certain payment, security or platform services.

6. Shopify and Shopify Network Intelligence

Our store uses Shopify, and Shopify Network Intelligence is enabled.

This allows Shopify to process information about interactions with our store alongside information from interactions with other merchants and Shopify to provide enhanced services, including personalisation, service improvements and advertising-related features.

For these enhanced services, Shopify may act as a separate controller of your personal information. Processing is subject to applicable law and relevant consent or privacy choices.

You can read more about Shopify’s processing and exercise applicable rights through:

Shopify Consumer Privacy Policy

7. Cookies and connected services

Our website uses cookies and similar technologies.

Some are necessary to operate the website, maintain a shopping cart, support checkout, protect security and remember privacy choices. Other technologies can support measurement, personalisation and connected services.

Our store has connected Google & YouTube and Judge.me integrations. Google services support our product listings and YouTube store. Connected technologies may process identifiers and information about website interactions according to their configuration and your applicable privacy choices.

Where legally required, optional cookies and tracking require your consent. You can accept or reject optional categories and change your choices through Cookie preferences on our website.

Rejecting optional tracking does not prevent you from purchasing products. Browser settings can also control cookies, although blocking necessary cookies may affect website functionality.

8. International processing

Some service providers operate internationally, so personal information may be processed outside the European Economic Area.

Where required, transfers must be covered by an appropriate legal mechanism, such as a European Commission adequacy decision or approved Standard Contractual Clauses, with additional safeguards where necessary.

You may contact us for information about the safeguards applicable to a particular provider or transfer and how to obtain a copy.

An EU hosting location for one service does not necessarily mean that all providers process information exclusively within the EU.

9. How long we keep information

We retain personal information only for as long as needed for its stated purpose and applicable legal requirements.

  • Orders and accounting records: for the periods required by applicable tax and commercial law, and where necessary for legal claims.

  • Customer-service correspondence: for as long as needed to resolve the enquiry and deal with relevant follow-up or disputes.

  • Assessment material: according to the periods described in Section 4.

  • Newsletter information: while you remain subscribed. After unsubscribing, we may retain limited information to respect your unsubscribe request and document compliance.

  • Reviews: while relevant to the product and the purpose for which they were submitted, subject to applicable rights and periodic review.

  • Technical information: according to the purpose and retention settings of the relevant service or technology.

Where longer retention is required for a specific legal obligation or dispute, we limit the information retained and its use accordingly.

10. Your rights

Subject to the conditions and exceptions provided by law, you may request:

  • Access to your personal information.

  • Correction of inaccurate or incomplete information.

  • Deletion of information.

  • Restriction of processing.

  • Portability of information where applicable.

  • An objection to processing based on legitimate interests.

You may object to direct marketing at any time.

Where processing relies on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Contact thesalonlifeshop@gmail.com to make a request. We may need proportionate information to verify your identity. We normally respond within one month; where a lawful extension is necessary, we will explain it.

You may also complain to the Spanish Data Protection Agency (AEPD) at www.aepd.es, or to the competent supervisory authority in your country of habitual residence, workplace or the place of the alleged infringement.

11. Security

We use appropriate technical and organisational measures to protect personal information and limit access to authorised people and providers who need it for their work.

No online service can guarantee absolute security. Please avoid sending payment-card details or unnecessary sensitive information by email or chat.

12. Changes to this policy

We may update this policy to reflect changes to our services, processing practices or legal requirements.

The date above identifies the latest version. Where required, we will provide additional notice or request consent before introducing a new use of information.