Privacy Policy

1. Information We Collect

We collect the following types of information when you interact with our website and services:

Information you give us

• Full name and contact information (email address, phone number)
• Business name, business address, and business type
• Professional license information (license number, state of issuance, expiration date)
• Order, shipping and billing details. Card details are entered on Shopify's or Stripe's secure checkout and are never stored on our servers.
• Event and class registrations: ticket type, quantity, the refund-policy version you accepted and when
• Your text-message (SMS) consent choice and the date and time you gave it
• Messages and support requests you send us

Information collected automatically

• Browser type and version, device type and operating system
• IP address and approximate geographic location
• Pages visited, time spent on pages, and navigation patterns
• Referring website or ad, including campaign (UTM) parameters and ad click identifiers
• Cookies and similar technologies (see sections 3 and 4)

If you start an event checkout and do not finish it, we keep the contact details you entered so we can help you complete your booking (see sections 5 and 6 for how to stop these messages).

2. How We Use Your Information

• To verify your professional credentials and approve professional accounts
• To process and fulfill your orders, including shipping and delivery
• To register you for events and classes, send your tickets, confirmations and reminders, and process refunds or transfers
• To communicate with you by email and, if you agreed, by text message about orders, events, promotions, product updates, and your account
• To provide customer support and respond to inquiries
• To personalize your experience and recommend relevant products
• To measure and improve our advertising and our website (see section 4)
• To prevent fraud, handle payment disputes, and ensure the security of our platform
• To comply with legal obligations and enforce our terms
• To manage our affiliate program and track referral commissions

3. Cookies

We use cookies and similar technologies to:

• Keep you signed in to your account
• Remember your preferences, language and shopping cart contents
• Analyze website traffic and usage patterns
• Track affiliate referrals and campaign performance
• Measure our ads and show relevant ads (Meta Pixel cookies such as _fbp and _fbc; see section 4)

You can manage cookies through your browser settings. Disabling cookies may affect certain features of our website. To turn off advertising cookies and tracking on this site, use Your Privacy Choices.

4. Advertising and Tracking Technologies

We use the Meta Pixel and the Meta Conversions API (Facebook/Instagram) to measure the effectiveness of our ads and to show relevant ads to people who have visited our site. Meta may collect or receive information from this site and other sites through cookies, web beacons and similar technologies. When you sign up, register or buy, we may also send Meta your email address, phone number and name in hashed (scrambled) form, together with the event (for example, "registration" or "purchase"), so Meta can match it to ads. You can control the ads you see at https://www.facebook.com/adpreferences and learn more at https://www.facebook.com/privacy/policy.

Opting out. You can opt out of this tracking at any time on our Your Privacy Choices page. We also honor the Global Privacy Control (GPC) signal: if your browser sends it, we do not load the Meta Pixel or send Conversions API events for your visit.

Publicidad y tecnologías de seguimiento

Usamos el Píxel de Meta y la API de Conversiones de Meta (Facebook/Instagram) para medir la efectividad de nuestros anuncios y mostrar anuncios relevantes a personas que visitaron nuestro sitio. Meta puede recopilar o recibir información de este sitio y de otros sitios mediante cookies, web beacons y tecnologías similares. Puedes controlar los anuncios que ves en https://www.facebook.com/adpreferences y aprender más en https://www.facebook.com/privacy/policy. Puedes darte de baja de este seguimiento en Tus opciones de privacidad; también respetamos la señal Global Privacy Control (GPC) de tu navegador.

5. Text Messages (SMS)

We send text messages only to people who opt in (for example, by checking the text-message box at checkout or signing up for event reminders), plus messages you request, such as a reminder for a class you registered for. Message frequency varies; message and data rates may apply. Reply STOP to cancel at any time or HELP for help. Full terms are in our Terms, section 13.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent are excluded from every category of sharing described in this policy and are not shared with any third party, except the messaging provider that delivers our texts on our behalf.

En español: Solo enviamos mensajes de texto a quienes lo aceptan. Responde STOP para cancelar o HELP para ayuda. No compartimos tu número ni tu consentimiento de mensajes de texto con terceros ni afiliados para fines de mercadeo o promoción.

6. Emails

We send emails about your orders, events, account and support requests. We may also send promotional emails, such as our newsletter or a reminder to finish an event booking. Every promotional email includes an unsubscribe link; you can also unsubscribe by writing to info@eurolbeauty.com. You will still receive emails needed for your orders, tickets and account.

7. Third-Party Services

We use the following service providers to operate and improve our platform. Each provider has its own privacy practices:

• Shopify — E-commerce platform for product orders, payment handling, and product management
• Stripe — Payment processing for event and class tickets, refunds and disputes
• Supabase — Database and authentication services for account management and data storage
• GoHighLevel (GHL) — Customer relationship management and text-message (SMS) delivery
• Resend — Delivery of our emails (order, event and account messages)
• Vercel — Website hosting and deployment platform
• Meta Platforms (Pixel y Conversions API) — Ad measurement and showing relevant ads on Facebook and Instagram (see section 4)
• Shippo — Shipping rates and labels (name, shipping address and phone for delivery)
• Zoom — Online classes and webinars you register for (name and email)
• Anthropic (Claude) — AI that helps our team answer support requests and prepare responses. Your information is used only to provide this service to us.
• Google — Fonts and map embeds on some pages (your browser connects to Google to load them)

We do not sell your personal information for money. Data shared with service providers is limited to what is necessary to perform their specific functions. Sharing with Meta for advertising (section 4) may be considered a "sale" or "sharing" of personal information under some U.S. state laws; you can opt out at any time on Your Privacy Choices. Our website links to other sites (for example, social networks or partner academies) whose privacy practices we do not control.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce our agreements. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law (such as tax and financial records, which may be retained for up to 7 years). Records of your consent (such as SMS consent or an accepted refund policy) are kept as proof for as long as needed for that purpose. Anonymized and aggregated data that cannot be used to identify you may be retained indefinitely for analytical purposes.

9. Your Privacy Rights

Depending on where you live, you may have the following rights regarding your personal data:

• Right to Know / Access — Request a copy of the personal data we hold about you
• Right to Correction — Request correction of inaccurate or incomplete data
• Right to Deletion — Request deletion of your personal data (subject to legal retention requirements)
• Right to Restrict Processing — Request limitation of how we process your data
• Right to Data Portability — Receive your data in a structured, machine-readable format
• Right to Opt Out of Sale, Sharing and Targeted Advertising — Use Your Privacy Choices or send a Global Privacy Control signal
• Right to Opt Out of Marketing — Unsubscribe from emails at any time and reply STOP to texts
• Right to Non-Discrimination — Exercise your privacy rights without receiving discriminatory treatment

To make a request, email info@eurolbeauty.com. We will verify your identity and respond within 45 days. You may use an authorized agent; we may ask for proof of their authority. If we deny your request, you can appeal by replying to our decision with the subject "Privacy Appeal", and we will respond within 45 days. We do not use your personal information to make decisions that produce legal or similarly significant effects about you, and we do not knowingly collect sensitive personal information beyond your professional license details.

10. How to Request Data Deletion

To request deletion of your personal data, please email us at info@eurolbeauty.com with the subject line "Data Deletion Request." Include your full name and the email address associated with your account. We will verify your identity and process your request within 30 days. You will receive a confirmation once your data has been deleted. Please note that certain data may be retained as required by law.

11. Security Measures

We implement industry-standard security measures to protect your personal information, including SSL/TLS encryption for all data transmitted between your browser and our servers, secure payment processing through Shopify and Stripe, access controls and authentication for internal systems, regular security reviews and updates, and encrypted data storage through our service providers. While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining the highest reasonable standards. If a breach affecting your personal information occurs, we will notify you as required by law.

12. Children's Privacy

Our website and services are intended for licensed professionals and are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The revised policy will be posted on this page with an updated "Last updated" date, and we will notify you of material changes by email or on our website. We encourage you to review this page periodically.