1. Overview and Data Controller
This Privacy Policy sets out how nexboundbeauty (“we”, “us”, “our”) collects, processes, stores, and protects personal data obtained from visitors and customers (“you”, “your”) accessing or making purchases via www.nexboundbeauty.com.
For the purposes of applicable data protection legislation—including the European Union General Data Protection Regulation (EU GDPR), the UK GDPR, and relevant United States federal and state privacy regulations—the Data Controller responsible for your personal data is nexboundbeauty.
2. Personal Data We Collect
We collect and process only the personal data necessary to operate our store, fulfill orders, and maintain a functional, compliant website. Depending on your interactions with us, we may collect:
- Identity and Contact Information: Full name, billing address, shipping address, and email address.
- Order and Transaction Details: Products ordered, purchase history, order value, and order reference numbers.
- Technical and Usage Data: IP address, browser type and version, operating system, time zone setting, page interaction information, and device identifier logs collected automatically when visiting our website.
We do not collect sensitive categories of data such as health, biometric, or genetic information.
3. Legal Basis and Purposes of Processing
We process your personal data under the following lawful bases:
- Performance of Contract: To handle order placement, process transactions, deliver beauty tool products, send order confirmations, and provide customer support.
- Legal Obligation: To satisfy tax, accounting, anti-fraud, and statutory reporting requirements.
- Legitimate Interests: To maintain website performance, prevent unauthorized activity, improve user experience, and ensure system stability.
- Consent: Where required by applicable law (such as non-essential cookie deployment or optional communications), based on explicit consent provided by you.
4. Payment Processing and Third-Party Payment Services
All financial transactions conducted on www.nexboundbeauty.com are processed externally by our authorized payment service provider, Stripe.
When you place an order, your payment card details, transaction amounts, and related billing information are submitted directly to Stripe via encrypted connections. nexboundbeauty does not directly view, store, or process complete credit card numbers or financial credentials on its own servers.
Stripe processes personal data in accordance with strict international security specifications (including PCI-DSS standards) and its own privacy policies. You can review Stripe’s data handling practices by visiting Stripe’s official privacy documentation.
5. Data Retention Periods
We retain personal data only for as long as required to fulfill the operational, legal, and financial purposes for which it was gathered.
- Order and Financial Records: Retained for up to seven (7) years following completion of the transaction, in order to comply with statutory tax, audit, and accounting obligations.
- Customer Support Records: Retained for up to two (2) years after resolution of the query, to handle follow-up inquiries or verify service history.
- Technical and Analytic Logs: Retained for a maximum of twelve (12) months before being anonymized or automatically deleted.
Upon expiration of the applicable retention period, personal data is permanently deleted or rendered fully anonymous in accordance with relevant legal frameworks.
6. Sharing and Disclosure of Personal Data
We do not sell, rent, or trade your personal data to third parties for marketing purposes. Data disclosure is limited exclusively to trusted service partners strictly necessary to conduct business operations:
- Payment Processors: Stripe, for secure payment verification and fraud prevention.
- Logistics and Shipping Partners: Commercial courier services tasked with fulfilling physical deliveries to your address.
- Technical Infrastructure Providers: Website hosting, database management, and operational software platforms bound by strict confidentiality and processing agreements.
- Legal and Regulatory Authorities: Statutory bodies or law enforcement agencies when mandated by binding law, regulation, or court order.
7. International Data Transfers
As our operations involve serving international customers, personal data collected from residents in the European Economic Area (EEA), the United Kingdom, or the United States may be transferred, stored, or processed across international borders.
Where cross-border transfers occur, we implement appropriate legal safeguards—including standard contractual clauses approved by regulatory authorities—to ensure your personal data receives a level of protection equivalent to that required in your country of residence.
8. Data Security Measures
We maintain appropriate administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, loss, alteration, or disclosure. These measures include transport layer security (TLS) encryption for web traffic, restricted administrative access, and regular infrastructure reviews.
While robust security measures are employed, no method of transmission over the Internet or electronic storage is immune to all potential vulnerabilities. Consequently, absolute security cannot be guaranteed, and users acknowledge the inherent security characteristics of online digital communications.
9. Your Data Protection Rights
Depending on your jurisdiction, you possess specific legal rights regarding your personal data:
European Union & United Kingdom Residents (GDPR / UK GDPR)
- Right of Access: Request a copy of the personal data held about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure (“Right to be Forgotten”): Request deletion of data where processing is no longer required or lawful.
- Right to Restrict or Object: Limit or object to specific processing activities under legitimate grounds.
- Right to Data Portability: Request transfer of your data in a structured, machine-readable format.
United States Residents (CCPA / CPRA & State Privacy Laws)
- Right to Know: Request details regarding categories and specific pieces of personal data collected.
- Right to Delete: Request deletion of personal information maintained by us, subject to statutory exemptions.
- Right to Correct: Request correction of inaccurate personal information.
- Non-Discrimination: We do not discriminate against users for exercising any of their statutory privacy rights.
To exercise any of these rights, please contact us at support@nexboundbeauty.com. Verification of identity may be requested prior to processing requests to protect account security.
10. Cookies and Tracking Technologies
www.nexboundbeauty.com utilizes essential cookies necessary for functional operation, such as managing shopping cart contents and security sessions. Non-essential cookies, such as operational performance tracking, are deployed only where permitted by law or user consent. You may adjust your browser settings to decline or manage cookies at any time.
11. Third-Party Links
Our website may contain links to external web addresses or services operated by third parties. We are not responsible for the privacy practices, content, or compliance of third-party platforms. We encourage you to review the privacy policies of any third-party websites you visit.
12. Revisions to This Privacy Policy
We reserve the right to amend this Privacy Policy at our discretion to reflect changes in legal requirements, operational standards, or regulatory updates. Any modifications will become effective immediately upon publication of the updated policy on www.nexboundbeauty.com.
13. Contact Information
If you have questions, comments, or formal inquiries regarding this Privacy Policy or our data protection practices, please contact us via email at:
Email: support@nexboundbeauty.com
Brand: nexboundbeauty
Website: www.nexboundbeauty.com