GDPR Privacy Notice

The data controller responsible for your personal data is Simon Wilby Labs, 840 S Rancho Drive, Suite 4-755, Las Vegas, NV 89106, United States. For any privacy request or question, contact our privacy team at elite@beauty.ml.

We only collect the data we need to operate our store and your account:

• Account data — your name, email address, and a securely hashed password when you create an account.
• Order and payment data — items purchased, billing details, and transaction identifiers. Card payments are processed by Stripe; we never store your full card number.
• Communications — messages you send us by email, such as customer service or partnership inquiries.
• Technical data — limited session and security information (for example, login session tokens) needed to keep your account secure.

Under Article 6 GDPR, we rely on the following legal bases:

• Contract — to create your account, process orders, and provide our products and services.
• Legitimate interests — to secure our website, prevent fraud, and improve our offering, balanced against your rights.
• Consent — for optional marketing emails, which you may withdraw at any time.
• Legal obligation — to comply with tax, accounting, and other applicable laws.

If you are in the EEA or UK, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, the right to data portability, and the right to withdraw consent. You also have the right to lodge a complaint with your local supervisory authority. We will respond to verified requests within one month.

You can exercise most of these rights directly: sign in to your account to review or update your details, or email elite@beauty.ml to request a copy or deletion of your data.

Our infrastructure and service providers (including our hosting, database, and payment partners) may process data in the United States. Where data is transferred outside the EEA or UK, we rely on appropriate safeguards such as the EU Standard Contractual Clauses to protect your information.

We keep your account and order data for as long as your account is active or as needed to provide our services and meet legal obligations. When you delete your account, your personal data is removed from our active systems, subject to limited records we are required to retain by law.

We apply technical and organizational measures to protect your data, including encrypted connections, hashed passwords, scoped access controls, and processing through trusted providers such as Stripe for payments.

To exercise your rights or ask a privacy question, email elite@beauty.ml. See also our CCPA Notice and PIPL Notice.