Privacy policy

CENARA Skincare – beauty-cosmetics.shop

Last updated: 11 Jul 2026

1. Introduction

This Privacy Policy explains how CENARA Skincare, operating through www.beauty-cosmetics.shop and related redirected domains, including www.cenaraskincare.com, collects, uses, stores, shares and protects personal data.

CENARA Skincare is an online retail store based in Romania, offering original Romanian skincare, cosmetics, personal care, hair care, oral care, body care, soaps, ointments and beauty products to customers in the European Union and selected international destinations.

We respect your privacy and are committed to protecting your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation — Regulation (EU) 2016/679, also known as the GDPR, where applicable.

This Privacy Policy applies when you visit our Website, create an account, place an order, contact us, subscribe to marketing communications, interact with our social media pages or use any services provided through our Website.

2. Who We Are

For the purposes of data protection law, the data controller is:

CENARA Skincare
Operated by: IOSIF CREATIVE DIVISION SRL
Formerly / previously trading as: Perspective SkinCare
Website: www.beauty-cosmetics.shop
Redirected brand domain: www.cenaraskincare.com
Correspondence address: Oficiul Poștal 86, CP 42, București, 012396, Romania
Email: office@beauty-cosmetics.shop

References to “we”, “us”, “our” or “CENARA Skincare” mean the business operating the Website.

References to “you” or “your” mean any visitor, customer, account holder, newsletter subscriber or person interacting with our Website or services.

3. Personal Data We Collect

We may collect and process different categories of personal data depending on how you interact with us.

Account and Identity Data

This may include:

  • full name;

  • email address;

  • phone number;

  • billing address;

  • shipping address;

  • country and region;

  • customer account login details;

  • customer ID or account reference;

  • order history.

Order and Transaction Data

When you place an order, we may process:

  • products ordered;

  • order number;

  • order date;

  • billing and shipping details;

  • payment status;

  • refund status;

  • discount codes used;

  • delivery method;

  • tracking number;

  • customs or import-related information where applicable;

  • customer service notes related to the order.

Payment Data

Payments are processed by secure third-party payment providers such as Shopify Payments, Stripe, PayPal, card processors, bank transfer providers or other payment methods displayed at checkout.

CENARA Skincare does not store your full card number, card security code or complete payment credentials.

We may receive limited payment-related information such as:

  • payment confirmation;

  • payment method type;

  • transaction reference;

  • billing name and address;

  • fraud screening result or payment status;

  • refund confirmation.

Delivery and Customs Data

To deliver your order, we may share relevant data with courier and logistics partners such as DHL Express, FedEx, Packeta, local delivery partners, locker networks, postal services or customs-related service providers.

This may include:

  • recipient name;

  • delivery address;

  • phone number;

  • email address;

  • order value;

  • product description for customs purposes;

  • parcel weight;

  • tracking number;

  • delivery instructions;

  • customs declaration data where required.

Communication and Customer Support Data

When you contact us, we may process:

  • your name;

  • email address;

  • phone number;

  • order number;

  • messages, complaints or support requests;

  • photos or documents you send us;

  • return, refund or product safety information;

  • communication history.

Marketing Data

If you subscribe to our newsletter, participate in a campaign or agree to receive marketing communications, we may process:

  • email address;

  • name, where provided;

  • country or language preference;

  • marketing consent status;

  • unsubscribe status;

  • email engagement information, such as opens, clicks and preferences, where provided by our email platform;

  • purchase interests or product preferences, where permitted by law.

Technical and Usage Data

When you visit our Website, certain technical data may be collected automatically, including:

  • IP address;

  • browser type and version;

  • device type;

  • operating system;

  • time zone;

  • pages visited;

  • referral source;

  • session data;

  • cart activity;

  • cookie identifiers;

  • analytics and advertising identifiers, where applicable;

  • approximate location based on IP address.

Reviews and User-Generated Content

If you submit a product review, comment, image, testimonial or other content, we may process:

  • name or display name;

  • email address;

  • product reviewed;

  • review text;

  • rating;

  • photos or videos submitted;

  • date of submission;

  • verification status.

You should not include sensitive personal information in public reviews.

Social Media Data

If you interact with CENARA Skincare on social media platforms, we may process information made available through that platform, such as your profile name, comments, messages, tags, reactions or public interactions.

Social media platforms process your personal data according to their own privacy policies.

4. How We Collect Personal Data

We collect personal data in the following ways:

  • directly from you when you place an order, create an account, subscribe to our newsletter, contact us or complete a form;

  • automatically through cookies, pixels, tags and similar technologies when you use the Website;

  • from payment providers, delivery partners and fraud prevention tools;

  • from Shopify and other ecommerce service providers used to operate the store;

  • from social media platforms when you interact with our pages;

  • from customer service, review or marketing platforms, where applicable.

5. Why We Use Your Personal Data

We use personal data only where we have a lawful basis to do so.

Under GDPR, the main lawful bases we may rely on are:

  • performance of a contract;

  • compliance with a legal obligation;

  • consent;

  • legitimate interests;

  • protection of vital interests, in rare cases;

  • establishment, exercise or defence of legal claims.

6. Purposes and Legal Bases for Processing

Purpose Personal data used Legal basis
To process and fulfil your order Name, address, email, phone, order details, payment status Performance of a contract
To arrange delivery and tracking Name, address, phone, email, tracking data, parcel details Performance of a contract
To process payments and refunds Payment status, transaction reference, billing details Performance of a contract; legal obligation
To provide customer support Contact details, order details, messages, photos, complaints Performance of a contract; legitimate interests
To manage returns, refunds and complaints Order data, return details, payment data, support messages Performance of a contract; legal obligation
To comply with tax, accounting and legal obligations Invoices, order records, payment data, identity and transaction data Legal obligation
To prevent fraud and protect the Website Technical data, payment risk data, order behaviour, IP address Legitimate interests; legal obligation
To send order-related emails Email address, order data, delivery status Performance of a contract
To send marketing emails Email address, consent status, preferences Consent or legitimate interests where permitted by law
To personalise your shopping experience Browsing data, cart data, preferences, order history Consent or legitimate interests, depending on context
To analyse Website performance Technical data, usage data, analytics identifiers Consent where required; legitimate interests where permitted
To run advertising and remarketing campaigns Cookie IDs, pixel data, browsing behaviour, campaign data Consent where required
To manage reviews and user content Review data, name/display name, rating, product purchased Legitimate interests; consent where applicable
To respond to legal claims or authority requests Relevant account, order, communication and transaction data Legal obligation; legitimate interests

Where we rely on legitimate interests, we do so only where our interests are not overridden by your rights and freedoms.

7. Marketing Communications

We may send you marketing emails only where permitted by law.

This may happen when:

  • you have subscribed to our newsletter;

  • you have given consent to receive marketing communications;

  • you are an existing customer and the communication relates to similar products or services, where allowed by applicable law;

  • you have not opted out of receiving such communications.

You can unsubscribe from marketing emails at any time by using the unsubscribe link in our emails or by contacting us at:

office@beauty-cosmetics.shop

Unsubscribing from marketing emails does not stop transactional emails, such as order confirmations, shipping updates, payment confirmations, product safety notices or customer service communications.

8. Cookies and Similar Technologies

Our Website uses cookies and similar technologies to operate correctly, improve the shopping experience, understand Website performance and, where applicable, support advertising and remarketing.

Cookies are small files stored on your device when you visit a website.

We may use:

  • essential cookies, required for checkout, cart, account login, security and basic Website functionality;

  • preference cookies, used to remember settings such as language, region or shopping preferences;

  • analytics cookies, used to understand how visitors use the Website;

  • advertising and remarketing cookies, used to measure campaigns and show relevant ads where permitted.

Non-essential cookies, such as analytics or advertising cookies, are used only where allowed by applicable law. In the European Union, European Economic Area, United Kingdom and other regions requiring consent, we aim to request your consent before placing non-essential cookies.

You can manage cookie preferences through the cookie banner or privacy settings available on the Website, where provided. You can also control cookies through your browser settings.

Disabling some cookies may affect Website functionality, including cart, checkout or account features.

9. Analytics and Advertising Tools

Where enabled, we may use analytics and advertising tools such as:

  • Google Analytics;

  • Google Ads;

  • Meta Pixel / Facebook Pixel;

  • Meta Ads;

  • Shopify analytics;

  • email marketing analytics;

  • other advertising or measurement tools connected to Shopify.

These tools may collect information about your device, browsing behaviour, pages visited, products viewed, cart activity, ad interactions or purchase events.

We use this information to understand Website performance, measure marketing campaigns and improve our services.

Where required by law, these tools are activated only after consent.

You can also manage advertising preferences through the relevant platforms, such as Google, Meta or your browser/device settings.

10. Shopify and Ecommerce Platform Processing

Our Website is hosted and operated using Shopify.

Shopify provides ecommerce platform services, including hosting, checkout, order management, analytics, security, customer account functionality, payment integrations and related technical services.

When Shopify acts as a processor or service provider, it processes customer personal data on our behalf and in accordance with applicable data protection terms. In some situations, Shopify or connected services may also act as an independent controller for certain processing activities, as described in Shopify’s own privacy documentation.

11. Payment Providers

Payment information is processed by third-party payment providers.

Depending on the payment method selected at checkout, your data may be processed by providers such as:

  • Shopify Payments;

  • Stripe;

  • PayPal;

  • card payment processors;

  • bank transfer providers;

  • Apple Pay;

  • Google Pay;

  • other payment providers displayed at checkout.

These providers process payment data according to their own privacy and security standards.

CENARA Skincare does not store your full card details.

12. Delivery Partners and Logistics Providers

To fulfil your order, we may share the necessary delivery information with courier, logistics and customs partners.

These may include, depending on destination and delivery method:

  • DHL Express;

  • FedEx;

  • Packeta;

  • local courier partners;

  • locker and parcel shop networks;

  • postal operators;

  • customs brokers or clearance service providers where required.

Delivery partners use your data to transport, track and deliver your order and, where necessary, manage customs or import procedures.

13. When We Share Personal Data

We do not sell your personal data.

We may share personal data only where necessary and lawful, including with:

  • Shopify and ecommerce platform providers;

  • payment processors;

  • courier and logistics partners;

  • warehouse and fulfilment providers;

  • customer support platforms;

  • email marketing providers;

  • analytics and advertising platforms, where permitted;

  • fraud prevention and security providers;

  • accounting, tax and legal advisers;

  • IT, hosting and maintenance providers;

  • public authorities, courts, customs authorities, tax authorities or regulators where legally required;

  • business successors in case of restructuring, merger, sale or transfer of business assets.

All such sharing is limited to what is reasonably necessary for the relevant purpose.

14. International Transfers of Personal Data

Because we use international ecommerce, payment, delivery, analytics and technology providers, personal data may be transferred outside Romania, the European Union or the European Economic Area.

Where personal data is transferred outside the EU/EEA, we aim to ensure that appropriate safeguards are in place, such as:

  • adequacy decisions recognised by the European Commission;

  • Standard Contractual Clauses;

  • data processing agreements;

  • security and confidentiality measures;

  • other lawful transfer mechanisms permitted by applicable data protection law.

Some international providers may process data in countries that have different data protection rules from your country of residence.

15. How Long We Keep Personal Data

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention periods may depend on:

  • order fulfilment needs;

  • customer account activity;

  • legal, accounting and tax obligations;

  • warranty, return, refund or complaint periods;

  • fraud prevention;

  • product safety or recall obligations;

  • legal claims;

  • marketing consent status.

Examples:

  • order, invoice and transaction records are kept for the period required by tax and accounting laws;

  • customer service messages are kept for as long as necessary to resolve the issue and protect our legal interests;

  • marketing data is kept until you unsubscribe or withdraw consent, unless we need to retain limited records to respect your opt-out;

  • cookie data is kept according to the cookie settings and retention periods of the relevant tools;

  • account data is kept while your account remains active or as needed for legal/business purposes.

When personal data is no longer needed, we delete, anonymise or securely retain it only where legally required.

16. Your Rights Under GDPR

If GDPR applies to you, you may have the following rights:

  • the right to access your personal data;

  • the right to correct inaccurate or incomplete data;

  • the right to request deletion of your data;

  • the right to restrict processing;

  • the right to object to processing based on legitimate interests;

  • the right to object to direct marketing;

  • the right to data portability;

  • the right to withdraw consent at any time, where processing is based on consent;

  • the right to lodge a complaint with a data protection authority.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

To exercise your rights, contact us at:

office@beauty-cosmetics.shop

We may need to verify your identity before responding to your request.

17. Complaints to a Supervisory Authority

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with a data protection supervisory authority.

As our business is based in Romania, the relevant authority is the Romanian National Supervisory Authority for Personal Data Processing, known as ANSPDCP.

You may also contact the supervisory authority in your country of residence, workplace or the place where you believe a data protection issue occurred, where applicable.

18. Non-EU Customers and International Privacy Rights

If you are located outside the European Union, you may have privacy rights under local laws in your country or region.

Depending on applicable law, these may include rights to access, correct, delete, restrict or object to certain uses of your personal data.

We will review privacy requests in accordance with applicable laws and the nature of our relationship with you.

19. United States Privacy Notice

For customers in the United States, we do not sell personal data in the traditional sense of selling customer lists for money.

However, some privacy laws may define “sale”, “sharing” or “targeted advertising” broadly to include certain advertising or analytics activities involving cookies, pixels or similar technologies.

Where required by applicable law, you may have the right to opt out of certain targeted advertising or sharing activities. You can manage cookie and advertising preferences through the Website cookie settings, browser controls or platform settings where available.

20. Children’s Privacy

Our Website is not directed to children.

We do not knowingly collect personal data from children under the age required by applicable law. If you believe that a child has provided us with personal data, please contact us and we will take appropriate steps to review and delete the information where required.

21. Security of Personal Data

We use reasonable technical and organisational measures to help protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include:

  • HTTPS / SSL-TLS encrypted connection;

  • secure checkout through trusted payment providers;

  • restricted administrative access;

  • platform-level security provided by Shopify;

  • fraud prevention tools;

  • access controls;

  • secure service providers;

  • internal confidentiality practices.

No online system can be guaranteed to be completely secure. However, we work to maintain a safe shopping environment and reduce risks through responsible data handling and trusted service providers.

22. Automated Decision-Making and Fraud Checks

We may use fraud detection tools and payment verification systems to help identify suspicious transactions, unauthorised payment attempts, abuse of promotions or other security risks.

These tools may automatically flag certain orders for manual review.

We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects on you, unless such processing is permitted by law and appropriate safeguards are in place.

23. Third-Party Links

Our Website may contain links to third-party websites, including payment providers, courier tracking pages, social media platforms, review platforms, manufacturer websites or external resources.

These third-party websites have their own privacy policies and terms.

CENARA Skincare is not responsible for the privacy practices, security, content or policies of third-party websites.

24. Social Media

We may maintain pages or profiles on social media platforms such as Facebook, Instagram, TikTok, Pinterest, LinkedIn or other platforms.

When you interact with our social media pages, the platform may process your personal data according to its own privacy policy. We may see public interactions such as likes, comments, messages, tags or shares.

Please avoid sending sensitive personal information through social media messages.

25. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, legal requirements, technology, Shopify settings, service providers or data processing practices.

The updated version will be published on this page with a revised “Last updated” date.

If changes are significant, we may notify customers by email, Website notice or other appropriate method where required by law.

26. Contact Us

For questions about this Privacy Policy, personal data, privacy rights, marketing preferences or data protection concerns, please contact us:

CENARA Skincare
Website: www.beauty-cosmetics.shop
Email: office@beauty-cosmetics.shop
Working Hours: Monday–Friday, 9:00 AM – 6:00 PM, Eastern European Time

CENARA Skincare – Original Romanian beauty, delivered with care and responsibility.