1. Who is responsible
biuteeful is the brand behind this collection. The seller’s registered legal name, business address and jurisdiction will be published here before paid orders open. No payment can be accepted while those details are missing.
Email us at hello@biuteeful.com for product enquiries, order support, refunds or privacy requests.
This notice applies to information collected through the biuteeful store, its forms, support email and the Circle. It describes current preview activity and identifies payment-related processing that starts only when checkout opens. It does not replace the privacy terms for your ChatGPT account or for an external service you choose to visit.
3. Who receives information
Authorised store operators can access records needed for their work. Hosting providers support the site and database; Shopify manages checkout, orders and payment processing when checkout is active. Google Workspace receives and stores messages sent to our support email so we can respond. Website forms save requests in our store database and queue a notification to our support inbox through Google Workspace. Customer enquiries also receive an email receipt. We retain delivery status and retry records to help prevent missed requests. A provider acknowledgement does not guarantee inbox delivery. Marketing signups receive a confirmation email; updates begin only after confirmation. Confirmation links expire after 24 hours. Tokens are stored as hashes, with the queued delivery copy encrypted until it is sent. Fulfilment providers and carriers receive the information needed for delivery once orders are being fulfilled. Professional advisers or authorities may receive information where necessary for a legal obligation or a dispute.
We do not sell personal information or share it with advertising networks for cross-context behavioural advertising. There are no advertising pixels or third-party marketing analytics in this version. We count public page views by day, page and approved campaign label, without analytics cookies, persistent visitor IDs or raw referrer URLs. These counts are not unique-person counts. We respect Global Privacy Control and Do Not Track signals for page-view counts. When a form is submitted, approved source and campaign labels may be saved with the enquiry to help us understand which information brought you here. We do not place your message, email address or confirmation token in traffic reports.
Hosting, support or payment processing may take place outside your country. We do not promise that records stay in Vietnam or another particular country. Before accepting orders in a new market, we will publish the relevant processing locations and international-transfer safeguards. During the preview, you can ask us for information about our hosting providers and their handling of your data.
For external services, see Shopify’s privacy policy, Cloudflare’s privacy policy and OpenAI’s privacy policy. Their terms govern their separate processing; they do not relieve us of our obligations for store data.
4. Retention and security
Circle profile information is kept while the membership is active and removed from the active membership table when you use “Leave the Circle.” That action also opts the matching address out of the launch list. A limited opt-out record may be kept to avoid adding you back to marketing.
Enquiry and request records are kept for the time needed to answer, resolve follow-up issues and meet applicable record-keeping or dispute requirements. Order and payment records are kept for the legally required accounting, consumer and dispute periods in the seller’s jurisdiction. We do not keep these records merely because storage is available; the operator reviews the need for continued retention.
Form rate-limit records expire after one hour and are cleared during later form activity. Hosting and payment providers have their own security-log and backup retention periods. Deleting an active store record may not immediately remove a copy from a provider’s protected backup; it must remain restricted and expire under the provider’s applicable process.
We use HTTPS, access controls and restricted handling of payment information. Circle management links are private access keys: anyone holding yours can change its preferences or leave. Keep the link private. We store a hashed lookup value, not the original link secret, in the membership database. No online service can guarantee absolute security.
5. Your choices and requests
You can change or remove Circle preferences using your private link. You may withdraw marketing permission using the unsubscribe link in our confirmation and marketing emails, or by emailing hello@biuteeful.com. This does not affect a purchase, a requested service reply or the legality of earlier processing. If you lose the link, use the request form and tell us the email associated with the record.
Depending on the law that applies, you may request access, correction, deletion, a portable copy, restriction, or object to processing. We offer a contact route to all users and will explain any lawful limit or reason we cannot complete a request. A proportionate identity check may be needed to protect your records.
We aim to respond within one month, or the shorter period required by applicable law. If an extension is legally permitted and necessary, we will explain the reason and revised timing within the initial deadline. You may complain to the competent privacy or consumer regulator; contacting us first is helpful but not a condition of that right.
The store is intended for adults who can enter a purchase contract. We do not knowingly seek children’s information. If a child’s details have been submitted, contact us to arrange appropriate removal.
6. Cookies and local storage
The shopping bag is stored in this browser so your selections survive navigation. It is not an order. Remove its items through the bag or clear this site’s browser data to erase that local draft.
Circle access information may be held locally on the device where you manage your membership. Clearing browser data does not delete server records; use the membership removal action or make a request for that.
Platform sign-in, security and payment services may use essential cookies or similar technologies under their own notices. Website films play directly from our Cloudflare-backed video storage; they do not load a YouTube player or advertising. Video requests still share connection information needed to deliver the files. Google Workspace processes website confirmation emails and requested receipts. See Google’s privacy policy.
7. Changes to this notice
The update date appears above. We will make a revised notice available before materially different processing starts and seek fresh permission where required. A revised notice does not create permission for a purpose you did not agree to.
