Privacy policy

 How are my personal data handled?

LULUBEAUTY is the data controller in accordance with the applicable rules on the protection of personal data. We aim to provide you with the best possible shopping experience with us. Here you will find an overview of how we handle your personal data in accordance with the Personal Data Act, including EU Regulation 2016/679 (General Data Protection Regulation, hereinafter referred to as "GDPR").

What personal information we collect

• Personal data you register when you become a member and update your profile, including name, address, phone number, and email address, etc.
• Information about purchases and order information including name, billing address, delivery address, payment confirmation, email address, and phone number.
• Information about which emails you open and click on.
• Information you provide via our customer service.
• Information via cookies, see the separate section below.

What are my personal data used for?

By providing your personal data, you consent to us using your information to deliver the service you expect, as further specified through the purposes below.

By providing your personal data, you consent to us using your information to deliver the service you expect, as further specified through the purposes below.

We use your personal data for the following purposes:

• To create and manage your personal user account.
• To provide you with relevant content, communication, and offers, through automated profiling and assessment. Profiling means analyzing personal data and purchase history to uncover behavior, preferences, abilities, or needs as a customer.
• To provide you with the best possible assistance when you contact us.
• To have the opportunity to show you more relevant ads on digital platforms, including social media.
• To inform you about services that improve your shopping experience with us. For example, new partners, new payment solutions, or other new services that you can choose whether to use or not.

Do you share my personal data?

We share your personal data with our suppliers within customer service, communication services, advertising, and technical support. These suppliers need the information to provide services to us within the framework of the processing activities outlined in these membership terms.

To offer you the use of Klarna's payment methods, we need to share certain information about you with Klarna. This only happens if you choose Klarna as your payment method. Klarna uses the information to assess whether you qualify to use their payment methods. The information used includes name, address, email address, phone number, payment history, and order information such as payment method, shipping type, order details, and similar.

The use of such information is regulated in accordance with applicable data protection legislation and Klarna's privacy policy.

We have data processing agreements with the relevant suppliers that set clear limitations on how they can use your personal data in accordance with applicable data protection regulations.

After campaigns, we may want to measure sales against marketing activities to provide more relevant offers going forward. This is done by compiling anonymized (hashed) purchase data with marketing activity with third parties.

Where are my personal data stored?

All your personal data is stored within the EU/EEA, but some of our suppliers have technical support services located outside the EU/EEA. When using these support services, any processing of your personal data will be regulated in accordance with the EU/EEA standard contract for transfers to third countries or another approved transfer mechanism.

How can I manage my personal data?

You can choose to change your personal data at any time, and you can withdraw your consent at any time, which will result in the termination of your membership. You can do this yourself, or contact us for assistance.

• If you want to access your personal data, you have the right to request this.
• If you want to correct your personal data, you have the right to request this.
• If you want to delete your personal data, you have the right to do this as long as we are not legally required to retain them.
• If you want to restrict the processing of your personal data, you have the right to request this.
• You will receive information from us if we make corrections or delete your personal data, or if we restrict processing.
• You have the right to request that your personal data be provided in a structured, commonly used, and machine-readable format, and to transfer the data to another business. This only applies to data you have actively provided.
• You have the right to notify us if you believe we are not processing your personal data in accordance with the consent you have given.
• You have the right to withdraw your consent.
• If you do not want us to use automated decisions and profiling of your personal data, you can withdraw your consent to membership in our benefits program at any time.

Who has access to my personal data?

Your personal data is processed only by authorized personnel who have access to the information by virtue of their professional position, and who are obligated to use the data solely for the specified and legitimate purpose for which they were collected.

How long do you store data?

Your personal data will be stored as long as you have an active user account with us, and unless you choose to terminate the account.

How do you secure my personal data?

We store your personal data in our operational environments. These environments use standard security methods to prevent unauthorized access. We follow common standards to protect personal data and sensitive information.

How does the Data Protection Regulation work?

All processing of personal data, such as collection, registration, storage, and disclosure, is subject to specific rules, including the Personal Data Act. LULUBEAUTY is responsible for ensuring that processing is carried out in accordance with the law's rules, i.e., the "data controller." The Data Protection Authority supervises compliance with the regulations in Norway. You have the right to complain to the Data Protection Authority about the processing done by the data controller in connection with these membership terms.

Cookies on lulubeauty.no

When you visit our website, a cookie is placed to recognize your computer or mobile phone. It provides information about your activity on our website. It makes it easier for you, as cookies make your mobile phone or computer, for example, remember login information for your next visit. Cookies also provide us with information about your behavior on our website, and we share this with third parties for advertising purposes. You can read more about Cookies on our website.

Overview of service partners processing personal data to handle orders from you as a customer

• Posten/Bring: Carrier of packages and goods. We send packages with Posten/Bring and therefore, information related to shipping such as name, telephone number and address are shared. Read Posten's privacy policy here.
• Klarna: Payment service. If you pay with Klarna in the online store, personal information such as e-mail, name, address, social security number will be shared with Klarna for payment. Read Klarna's privacy policy here.
• Vipps: If you pay with Vipps in the online store, your phone number will be sent to Vipps for further identification. Read Vipps' privacy policy here.
• Paypal: If you pay with PayPal in the online store, personal information such as e-mail, name, address, social security number will be shared with PayPal for payment. Read Paypal's privacy policy here.
• Google: We use Google Analytics for traffic analysis. IP addresses and visiting patterns are stored. Read Google Analytics' privacy policy here.

Marketing via Email

We send newsletters by email so that you can receive various types of information and offers. It is voluntary to sign up to receive newsletters, and you will only receive them if you have given clear consent. It is easy to unsubscribe from the newsletter, either by contacting us or by clicking the unsubscribe link at the bottom of all newsletters.

We want our newsletters to be relevant and valuable to you. We use the information we have about you to customize the newsletters so that the offers and content are as interesting and relevant as possible. This can be, for example, your name and areas of interest if you have provided this, as well as order history.

Contact information

The data controller is LULUBEAUTY, 2619 Lillehammer, Norway. If you have questions about your membership or your personal data, please contact us at hello@lulubeauty.no or via the contact form.