Privacy Policy

Privacy Policy

Softr. · Last updated 2 October 2026

This policy explains what personal information Softr. collects when you visit or buy from softrskincare.com, why we collect it, who we share it with, and the rights you have over it.

1. Who we are

Softr. operates the online store at softrskincare.com, including all related content, features and services (the "Services"). For the purposes of the EU General Data Protection Regulation (GDPR), Softr. is the data controller of your personal information. You can reach us at any time at evenmadelabs@gmail.com.

Our store is hosted by Shopify, which processes personal information on our behalf in order to provide the Services.

2. What we collect

Depending on how you use the Services, we may collect:

  • Contact details — your name, email address, billing address, shipping address and phone number.
  • Order and payment details — what you bought, your transaction history, and payment confirmation. We never see or store your full card number; payments are handled by our payment processors.
  • Account information — your username, password and account preferences, if you create an account.
  • Communications — the content of emails and contact-form messages you send us.
  • Device and usage information — your IP address, browser and device type, and how you navigate the store, collected through cookies and similar technologies.

3. Where it comes from

  • Directly from you, when you order, create an account or contact us.
  • Automatically, from your device when you browse the store.
  • From our service providers — payment processors, shipping carriers, and analytics and advertising partners.

4. Why we use it

  • To fulfil your order — process payments, arrange shipping, handle returns and exchanges, and keep you updated on your order.
  • To run and improve the store — remember your preferences, fix problems, and understand which pages and products are useful.
  • To communicate with you — answer your questions and provide customer support.
  • For marketing — send you promotional emails if you have opted in, and show you relevant ads. You can opt out at any time.
  • For security and fraud prevention — verify orders and protect the store against fraudulent or malicious activity.
  • To meet legal obligations — keep the records tax and consumer-protection law requires.

5. Our legal bases (GDPR)

  • Performance of a contract — to process and deliver the order you placed.
  • Legitimate interests — to secure the store, prevent fraud and improve our Services.
  • Consent — for marketing emails and non-essential cookies. You can withdraw consent at any time.
  • Legal obligation — to keep records we are legally required to keep.

6. Who we share it with

We do not sell your personal information. We share it only with parties that need it to deliver the Services:

  • Shopify, which hosts the store and processes orders on our behalf.
  • Payment processors, to take payment securely.
  • Shipping and fulfilment partners, to deliver your order.
  • Analytics and advertising providers, where you have consented.
  • Authorities or advisers, where the law requires it or to defend our legal rights.

These parties may be located outside the European Economic Area. Where personal information is transferred outside the EEA or the UK, we rely on recognised safeguards such as the European Commission's Standard Contractual Clauses, unless the destination country has an adequacy decision.

7. Cookies

We use cookies and similar technologies to keep your cart working, remember your preferences, measure how the store is used and, with your consent, support advertising. You can manage non-essential cookies through the banner on the site or your browser settings. Blocking essential cookies will stop parts of the store from working.

8. How long we keep it

We keep your personal information for as long as we need it for the purposes above — to service your account, fulfil and support your order, and comply with our legal and tax obligations. Order records are typically retained for as long as accounting law requires. After that, we delete or anonymise it.

9. Security

We use appropriate technical and organisational measures to protect your personal information. No system is perfectly secure, however, so we ask you not to send sensitive or confidential information to us through unsecured channels.

10. Your rights

Depending on where you live, you have some or all of the following rights over your personal information:

  • Access — request a copy of the personal information we hold about you.
  • Correction — ask us to fix information that is inaccurate.
  • Deletion — ask us to delete personal information we hold about you.
  • Portability — receive your data in a portable format, or have it transferred to another provider.
  • Objection and restriction — object to, or ask us to limit, certain processing.
  • Withdrawal of consent — where we rely on consent, withdraw it at any time. This does not affect processing that already happened.
  • Marketing opt-out — unsubscribe from promotional emails using the link in any of them. We may still send you service emails about your orders.

To exercise any of these rights, email evenmadelabs@gmail.com. We may need to verify your identity first, and we will respond within the time limits the law sets.

11. Children

The Services are not intended for children, and we do not knowingly collect personal information from them. If you are a parent or guardian and believe your child has given us personal information, contact us and we will delete it.

12. Complaints

If you are unhappy with how we handle your personal information, please contact us first at evenmadelabs@gmail.com so we can put it right. You also have the right to lodge a complaint with your local data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens.

13. Changes to this policy

We may update this policy to reflect changes to our practices or for legal or operational reasons. The revised version is posted on this page with an updated date. Where the law requires it, we will notify you of material changes.

Questions about your data? Email evenmadelabs@gmail.com — we reply within 1 business day.