null Skip to main content

Privacy Policy

Privacy Policy

1. Who we are

Muse Allure is operated by:
Georgios Emmanouilidis Muse Allure
VAT No: PL7712940192
Email for privacy matters: [email protected]

We are the data controller for personal data processed through https://www.museallure.com

We do not have a designated Data Protection Officer. Please contact us at the email above for any privacy requests.

2. How the shop works

The website is hosted on the BigCommerce platform. BigCommerce, Inc. provides the e-commerce infrastructure, including hosting and security. Guest checkout is allowed, account creation is optional.

3. Personal data we collect

Data you provide to us:

  • Checkout: name, email address, shipping address, billing address, phone number
  • Payment: we do not store full card details. Payments are processed by Stripe, PayPal and Przelewy24. Those providers receive the data needed to process payment and fraud checks.
  • Newsletter/marketing: email address collected via Klaviyo pop-up, with consent timestamp
  • Contact forms, pre-order waitlists and customer service: name, phone number, email address, and the content of your message

Data collected automatically:

  • Technical data: IP address, browser type and version, device type, operating system, referral URL
  • Usage data: pages viewed, products viewed, cart additions, date/time of visit
  • Transaction data: order ID, products purchased, order value, shipping method

We do not intentionally collect sensitive personal data.

4. How we use your data and legal bases

We process personal data under the EU GDPR and UK GDPR. Depending on context, the legal basis is:

  • Contract performance: to process and fulfill orders, arrange shipping, handle returns and provide customer support
  • Legal obligation: to keep accounting records, tax invoices and comply with consumer law. In Poland this is typically 5 years
  • Consent: to send marketing emails/SMS via Klaviyo, and to store marketing preferences. You can withdraw consent at any time
  • Legitimate interests: to secure the site, prevent fraud, improve our products and services, and respond to enquiries you initiate

We use your data only for the purposes described here.

5. Marketing

We send newsletters and product updates via Klaviyo only if you opt in through the pop-up or checkout.

You can unsubscribe at any time by clicking the unsubscribe link in any email, or by emailing [email protected]

We keep a suppression record for up to 2 years after unsubscribe to prove we respected your choice.

6. Sharing with third parties

We do not sell your personal data. We share it only with trusted processors needed to run the store:

  • E-commerce and hosting: BigCommerce, Inc.
  • Payments: Stripe, PayPal, Przelewy24
  • Email/SMS marketing: Klaviyo
  • Shipping: DHL Express and DPD

All processors are contractually bound to process data only on our instructions and with appropriate security.

7. International transfers

We target customers worldwide. Your data may be transferred outside the European Economic Area, for example to the United States where BigCommerce, Klaviyo, Stripe and PayPal operate.

Where we transfer data internationally, we rely on adequacy decisions or appropriate safeguards such as EU Standard Contractual Clauses.

8. Cookies and similar technologies

We do not use analytics or advertising pixels.

The following categories are used:

Strictly necessary cookies
Required for the site to function: session management, cart, checkout, security, load balancing. Set by BigCommerce.

Functional cookies
Remember your preferences, such as newsletter pop-up dismissal and language/currency settings. Set by BigCommerce and Klaviyo.

You can block or delete cookies in your browser settings, but parts of the shop may not work correctly without necessary cookies.

9. Data retention

  • Order, invoice and payment records: 5 years from end of the tax year, for accounting and tax compliance
  • Customer account data: kept while your account is active, then deleted or anonymised within 12 months of closure unless we must keep it longer by law
  • Marketing contacts: until you unsubscribe, plus up to 2 years suppression record
  • Support correspondence: up to 3 years after last contact
  • Technical logs: up to 12 months

When retention ends, data is deleted or anonymised securely.

10. Your rights

Depending on where you live, you have rights over your personal data:

  • Access, correction and deletion
  • Restriction and objection to processing
  • Data portability
  • Withdraw consent at any time for marketing
  • Lodge a complaint with your local supervisory authority. In Poland this is the Urząd Ochrony Danych Osobowych (UODO)

To exercise rights, email [email protected]. We may need to verify your identity before responding. We respond within one month.

For California residents: we do not sell or share personal information as defined by the CCPA/CPRA. You have the right to know, delete and correct your data, and to non-discrimination.

11. Security

We use reasonable technical and organisational measures to protect your data, including encryption in transit via HTTPS, access controls, and PCI-DSS compliant payment processors. No method is 100% secure.

12. Children

Our products are intended for adults. We set a minimum age of 18+. We do not knowingly collect data from children under 18. If you believe a minor has provided data, contact us for deletion.

13. Third-party links

Our site may link to external sites. We are not responsible for their privacy practices. Please review their policies.

14. Changes to this policy

We may update this Privacy Policy to reflect legal, technical or business changes. The effective date at the top will be updated. For material changes we will provide additional notice, e.g., via email or site banner.

15. Contact

For privacy questions or requests:
Georgios Emmanouilidis Muse Allure
Email: [email protected]

Effective date: 26 May 2026
Last updated: 26 May 2026

!