We collect with purpose
Order, account, device, and support information helps us provide the Services.
Privacy Policy
This Privacy Policy explains what personal information Shelux collects, why we use it, when we share it, and the choices available to you.
Privacy at a glance
We collect the information needed to operate our online beauty-supply store, complete your purchases, communicate with you, and keep Shelux secure.
Order, account, device, and support information helps us provide the Services.
We use safeguards and work with providers that support our store and orders.
You can manage marketing, cookies, and eligible privacy requests.
This Privacy Policy describes how Shelux (“Shelux,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise processes personal information when you visit or use shelux.com, place an order, create or use an account, join a rewards program, subscribe to marketing, communicate with us, or otherwise interact with our services (collectively, the “Services”).
Our store is hosted by Shopify. Shopify processes personal information to provide and improve the commerce platform, checkout, fraud-prevention, and related services used by Shelux. Depending on how you interact with Shopify features such as Shop or Shop Pay, Shopify may also process information for its own purposes. You can learn more in the Shopify Consumer Privacy Policy.
If you follow a link to another website, app, social platform, or third-party service, that service’s privacy policy applies to its own processing. This Policy does not control services that Shelux does not own or operate.
The information we collect depends on how you use the Services. It may include the following categories:
Name, email address, telephone number, billing address, shipping address, and account identifiers.
Products viewed or purchased, cart activity, order history, returns, refunds, delivery details, discounts, and rewards activity.
Payment method, transaction status, and limited card details supplied by payment providers. Full payment credentials are generally handled by those providers.
Login information, saved preferences, reviews, survey responses, messages, support requests, and other content you submit.
IP address, browser, device type, operating system, cookie identifiers, pages viewed, searches, referring pages, and interactions with our website or messages.
Marketing choices, product interests, approximate location, and likely preferences derived from purchases or browsing activity.
We may collect personal information directly from you, automatically through cookies and similar technologies, from Shopify and our other service providers, and from marketing, advertising, social-media, fraud-prevention, or business partners where permitted by law.
Please do not send highly sensitive information that we do not request. If you provide another person’s information—for example, when shipping a gift—you confirm that you have permission to provide it for that purpose.
We use personal information to:
Where applicable law requires a legal basis, we process information as needed to perform a contract with you, comply with legal obligations, pursue legitimate business interests that do not override your rights, protect vital interests, or act with your consent. You may withdraw consent at any time, but withdrawal does not affect processing that was already lawful.
We may disclose personal information when reasonably necessary to operate Shelux, including to:
We do not sell personal information for monetary payment. Certain advertising, analytics, or cross-site personalization activities may be considered a “sale,” “sharing,” or “targeted advertising” under some U.S. state privacy laws even when no money changes hands. Where those laws apply, eligible customers can opt out as described below.
Shelux, Shopify, and our service providers may use cookies, pixels, tags, local storage, and similar technologies. These technologies can help the website function, remember your choices, understand traffic and performance, prevent fraud, personalize content, and measure or deliver marketing.
Because browser “Do Not Track” signals are not standardized, the Services might not respond to all such signals. This does not affect our treatment of recognized opt-out preference signals where legally required.
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy. The period depends on factors such as your account or customer relationship, order and warranty needs, legal and tax obligations, dispute-resolution periods, fraud and security requirements, consent, and legitimate business needs. When information is no longer needed, we may delete, de-identify, or aggregate it, subject to permitted backups and legal requirements.
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. However, no website, transmission, or storage system is completely secure. Please use a unique password, protect your account credentials, and contact us promptly if you suspect unauthorized account activity.
Shelux, Shopify, and other providers may process information in the United States, Canada, or other countries where they operate. Privacy laws in those locations may differ from the laws where you live. Where required, we rely on lawful transfer mechanisms and contractual or other safeguards designed to protect transferred information.
Depending on where you live and subject to legal exceptions, you may have the right to request access to or a copy of your personal information; learn how it is collected, used, or disclosed; correct inaccurate information; delete information; obtain portable information; restrict or object to processing; withdraw consent; or opt out of sale, sharing, targeted advertising, or certain profiling. You may also have the right to appeal a decision about a privacy request.
To submit a request, use our Contact Us page and clearly state that your message is a privacy request. Describe the right you want to exercise and provide enough information for us to locate your records. We may need to verify your identity before completing certain requests. An authorized agent may submit a request where permitted, but we may ask for proof of authorization and direct verification from you.
We will not discriminate against you for exercising an applicable privacy right. If we cannot fulfill all or part of a request, we will explain the reason when required and provide appeal instructions where applicable.
During the preceding 12 months, Shelux may have collected and disclosed the following categories for the business and commercial purposes described in this Policy:
Contact, account, billing, shipping, and customer-service information disclosed to platform, payment, fulfillment, support, security, and professional-service providers.
Orders, returns, cart activity, preferences, and rewards information disclosed to commerce, fulfillment, analytics, marketing, and customer-service providers.
Device, cookie, browsing, search, and interaction information disclosed to Shopify, security, analytics, advertising, and technology providers.
Approximate location, shopping interests, and likely preferences disclosed to platform, analytics, personalization, and advertising providers where enabled.
Payment credentials, account login information, and precise delivery details are used to provide requested services and are primarily handled by payment, platform, fraud, and fulfillment providers.
Reviews, photos, support messages, survey responses, and other content disclosed to review, support, moderation, technology, or professional-service providers.
Shelux may offer optional rewards, discounts, or member benefits that involve collecting contact, account, purchase, and rewards activity. The material program terms will be provided when you enroll and on our Member Benefits page. You may leave an eligible program by contacting us or using available account controls. Where required, any benefit is reasonably related to the value Shelux receives from the customer relationship and associated information.
We do not use or disclose sensitive personal information to infer characteristics about you beyond what is permitted by law, and we do not knowingly sell or share the personal information of anyone under 16.
The Services are intended for a general audience and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe a child has provided personal information to us, please contact us so we can review and take appropriate action.
We may update this Privacy Policy to reflect changes to our Services, technology, providers, legal obligations, or privacy practices. We will post the revised Policy with a new “Last updated” date and provide additional notice when required by law. Your use of the Services is also subject to our Terms of Service.
For questions, concerns, complaints, or privacy-right requests, please use our Contact Us page. Please write “Privacy Request” in your message and explain how we can help. Protecting your trust is part of serving you well, and every request will be handled with care and respect.
Ask about your information, request access or deletion, or get help with your privacy choices.