Privacy Policy
Effective Date: February 20, 2025
Last Updated: February 20, 2025

1. Introduction
Welcome to Glamour by Rimsha (“Company,” “we,” “our,” or “us”). We are committed to protecting your personal data and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website [insert website URL] (the “Website”).

By accessing or using our Website, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use our services.

2. Data We Collect
We collect and process the following types of personal data:

• Personal Information: Name, email address, phone number, billing and shipping address.
• Payment Information: Credit/debit card details, PayPal details (processed through secure third-party payment gateways).
• Account Information: Login credentials, order history, preferences.
• Technical Information: IP address, browser type, device information, cookies, and usage data.
• Communication Data: Messages sent via contact forms, emails, and customer support requests.

3. How We Use Your Data
We process your personal data for the following purposes:

• To process and fulfill orders, including payment processing and delivery.
• To provide customer support and respond to inquiries.
• To send promotional offers, newsletters, and marketing communications (with your consent).
• To improve our Website’s functionality and user experience.
• To prevent fraud and enhance security.
• To comply with legal obligations.

4. Legal Basis for Processing
We process personal data under the following legal bases under the General Data Protection Regulation (GDPR):

• Contractual Necessity: When processing is required to fulfill our obligations under a contract (e.g., processing your order).
• Legitimate Interest: For business and security reasons, provided such interests do not override your rights.
• Consent: When you provide explicit consent for marketing or non-essential cookies.
• Legal Obligation: When processing is necessary to comply with laws.

5. Data Sharing and Third-Party Services
We do not sell or rent your personal data. However, we may share your data with:

• Service Providers: Payment processors, shipping companies, IT support, and marketing service providers.
• Legal Authorities: When required by law or to protect our legal rights.
• Business Transfers: In the event of a merger, sale, or acquisition.

All third-party service providers are contractually obligated to safeguard your data.

6. Data Retention
We retain your data only for as long as necessary for the purposes set out in this policy, in compliance with applicable laws:

• Order information: Retained for 7 years for tax and accounting purposes.
• Marketing data: Retained until you withdraw consent.
• Technical logs: Retained for up to 1 year for security analysis.

7. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:

• Secure SSL encryption for data transmission.
• Secure payment processing via PCI-DSS compliant providers.
• Access control measures to limit access to personal data.

Despite these efforts, no method of transmission over the internet is 100% secure. We encourage you to take necessary precautions to protect your data.

8. Your Rights Under GDPR
Under GDPR, you have the following rights:

• Right to Access: Request a copy of your personal data.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data.
• Right to Restrict Processing: Limit how we use your data.
• Right to Data Portability: Request data transfer to another provider.
• Right to Object: Object to data processing for marketing.
• Right to Withdraw Consent: Withdraw consent at any time.

To exercise your rights, contact us at [insert email address]. We will respond within one month.

9. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your browsing experience. You can manage or disable cookies through your browser settings. For more details, see our [Cookie Policy].

10. International Data Transfers
If we transfer your personal data outside the European Economic Area (EEA), we ensure that appropriate safeguards, such as Standard Contractual Clauses (SCCs) or Privacy Shield (where applicable), are in place.

11. Changes to This Privacy Policy
We may update this policy from time to time. Any changes will be posted on this page with the “Last Updated” date. If changes are significant, we will notify you via email or Website notification.

12. Contact Us
If you have any questions or concerns regarding this Privacy Policy, please contact us at:
Glamour by Rimsha

Thank you for trusting Glamour by Rimsha with your personal data.