Privacy policy

Last updated: January 16, 2026

1. Data Controller AnalíaCosmetics is the data controller of your personal information. We are located at: 345 Tourist Street, St. Paul's Bay, SPB 2500, Malta. Contact email: analiacosmetic@gmail.com

2. Legal Basis for Processing If you are located in the European Economic Area (EEA) or the UK, we process your personal information under the following legal bases:

  • Performance of a contract: To fulfill your orders and provide our services.

  • Compliance with legal obligations: To comply with tax and accounting laws in Malta.

  • Legitimate interests: To protect our store from fraud and improve our marketing.

  • Consent: When you sign up for our newsletter.

3. Personal Information We Collect We collect contact details (name, address, email), financial information (processed securely via Shopify/Payment gateways), account details, and device information (IP address, cookies).

4. How We Disclose Personal Information We use Shopify to power our online store. Your data is stored through Shopify’s data storage and databases. They store your data on a secure server behind a firewall. We also share information with shipping partners (to deliver your products) and payment processors.

5. International Transfers Since we use Shopify, your personal information may be transferred to and stored in countries outside the EEA, including Canada and the United States. We ensure these transfers are protected by the European Commission's Standard Contractual Clauses (SCCs) to guarantee your data remains safe.

6. Your Rights (GDPR) As a resident of the EEA or UK, you have the following rights:

  • Right of access: To request a copy of your data.

  • Right to rectification: To correct inaccurate data.

  • Right to erasure ("Right to be forgotten"): To ask us to delete your data.

  • Right to restrict or object to processing.

  • Right to data portability. To exercise these rights, please contact us at analiacosmetic@gmail.com.

7. Data Retention We will keep your personal information only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements (usually 5 to 10 years for tax purposes in Malta).

8. Complaints If you are not satisfied with how we process your data, you have the right to lodge a complaint with the Information and Data Protection Commissioner (IDPC) in Malta.

9. Cookies Our website uses cookies to improve your experience. You can manage your cookie preferences through your browser settings or our cookie banner.