Privacy Policy
Identity of the Controller
This Privacy Policy is issued by Huda-Beauty LLC, a company incorporated in the United States with registration number 742981563. The registered office is located at 487 Madison Avenue, Suite 1203, New York, NY 10022, United States. Huda-Beauty LLC acts as the data controller for all personal data collected through its website and related services. For all privacy-related inquiries, you may contact privacy@huda-beauty.com or legal@huda-beauty.com.
Data Collection
Huda-Beauty LLC collects personal data that you voluntarily provide, including your name, email address, billing details, and preferences when interacting with the website. We also automatically collect technical information such as IP address, browser type, device identifiers, and usage data through cookies and similar technologies. This data is collected to improve user experience, personalize content, and ensure platform security. All data collection practices comply with applicable GDPR and CCPA requirements.
Legal Basis for Processing
We process personal data based on lawful grounds including consent, contractual necessity, legal obligations, and legitimate interests. Consent is obtained where required, particularly for marketing communications and non-essential cookies. Processing is necessary to fulfill orders, manage accounts, and provide customer support services. We ensure that our legitimate interests do not override your fundamental rights and freedoms.
Use of Personal Data
Personal data is used to provide, operate, and maintain our website and services, including order processing and customer service. We may also use your data to send transactional communications and, where consent is provided, promotional content. Data is analyzed to improve product offerings, website functionality, and user experience. We do not use personal data for automated decision-making that produces legal or similarly significant effects without appropriate safeguards.
Data Sharing and Disclosure
Huda-Beauty LLC may share personal data with trusted third-party service providers, including payment processors, logistics partners, and IT service providers. These parties are contractually obligated to process data in compliance with applicable data protection laws. We may also disclose data when required by law, regulation, or legal process. Personal data is not sold without providing appropriate notice and opt-out rights as required under CCPA.
International Data Transfers
As a global business, we may transfer personal data to countries outside your jurisdiction, including the United States. Such transfers are conducted in accordance with GDPR safeguards, including Standard Contractual Clauses or equivalent mechanisms. We ensure that appropriate technical and organizational measures are in place to protect your data during such transfers. Users acknowledge and consent to such transfers where legally required.
Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments. Despite our efforts, no method of transmission over the internet is completely secure, and absolute security cannot be guaranteed. We continuously review and enhance our security practices to align with industry standards.
Data Retention
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting obligations. Retention periods vary depending on the type of data and applicable legal requirements. Once data is no longer required, it is securely deleted or anonymized. We periodically review retention policies to ensure compliance with GDPR and CCPA standards.
Your Rights
Under GDPR and CCPA, you have the right to access, correct, delete, and restrict the processing of your personal data. You may also request data portability and object to certain types of processing, including direct marketing. California residents have the right to opt out of the sale of personal information and to request disclosure of data collection practices. Requests can be submitted via privacy@huda-beauty.com and will be handled in accordance with applicable legal timelines.
Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, you may contact us at privacy@huda-beauty.com. Alternatively, written correspondence can be sent to Huda-Beauty LLC, 487 Madison Avenue, Suite 1203, New York, NY 10022, United States. We are committed to addressing all inquiries promptly and transparently. You also have the right to lodge a complaint with a relevant supervisory authority if you believe your rights have been violated.