GENELUVIÉ ("we", "us") respects your privacy. This policy explains what personal data we collect, why, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data We Collect
- Identification & contact: name, institution, billing/shipping address, email, phone.
- Order data: products purchased, invoices, payment status (we do not store full card numbers).
- Technical data: IP address, browser type, pages visited, basic analytics events.
- Communications: messages sent through the contact form or by email.
2. How We Use Your Data
- To process and ship your orders and provide customer support.
- To comply with legal, tax, customs and export-control obligations.
- To prevent fraud and verify legitimate research use.
- To improve our website and, with your consent, send service updates.
3. Legal Bases
We process personal data on the bases of contract performance, our legitimate interests in operating a secure business, compliance with legal obligations, and — where required — your consent.
4. Sharing
We share data only with vetted processors needed to deliver the Services: payment providers, shipping carriers, tax and accounting partners, and IT/hosting providers. We do not sell your personal data.
5. International Transfers
Where data leaves Switzerland or the EEA, we rely on Standard Contractual Clauses or equivalent safeguards.
6. Retention
Order and invoice records are retained for 10 years to meet UK accounting obligations. Marketing data is kept until you withdraw consent. Contact-form messages are deleted within 24 months.
7. Your Rights
You may request access, rectification, erasure, restriction, portability, or object to processing of your personal data, and lodge a complaint with the UK Information Commissioner's Office (ICO) or your local supervisory authority. Contact us via the contact page to exercise these rights.
8. Cookies
We use strictly necessary cookies for cart and language preferences and limited first-party analytics. No advertising or cross-site tracking cookies are set.