Whole Beauty Care
Back to policies

Privacy Policy And Personal Data Protection

Last Updated: 28/01/2026

The company eenovee S.à r.l.-S. (hereinafter "We") places major importance on the protection of your privacy. As a company based in Luxembourg and operating in Europe, we are committed to strictly adhering to the General Data Protection Regulation (GDPR) No. 2016/679 applicable throughout the European Union.

This policy explains how we collect, use, and protect your data when you use our website wholebeauty.care.

1. Who is the Data Controller?

The data controller for your data (the entity that decides why and how it is used) is:

  • Company: eenovee S.à r.l.-S.

  • Address: 8 Rue des Mérovingiens, L-8070 Bertrange, Luxembourg

  • RCS Luxembourg: B299158

  • GDPR Email: contact@wholebeauty.care

2. What data do we collect?

We only collect data strictly necessary for the proper functioning of our e-commerce activity:

  • Identity Data: Surname, first name.

  • Contact Data: Email address, phone number, delivery and billing address.

  • Transaction Data: Order number, purchase history, products viewed.

  • Payment Data: We never have access to your credit card numbers in plain text. Transactions are processed securely by our payment providers (e.g., Stripe, Paypal, Apple Pay).

  • Technical Data: IP address, browser type (via cookies).

3. Why do we use your data? (Purposes)

We process your data for the following reasons:

  1. Contract Execution (Order): To process your order, deliver your cosmetic products, and send you your invoice. Without this data, we cannot sell you products.

  2. Legal Obligation: To comply with our accounting and tax obligations (retention of invoices).

  3. Legitimate Interest: To improve our site, prevent fraud, and answer your questions via customer support.

  4. Consent (Marketing): Only if you have accepted it (checkbox), to send you our newsletter or promotional offers. You can withdraw this consent at any time.

4. Who has access to your data?

Your data is never sold to third parties. It is transmitted only to service providers essential for the execution of our services:

  • E-commerce Platform & Hosting: Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you. Your data is stored through Shopify’s data storage, databases, and the general Shopify application.

  • Logistics: Carriers (e.g., Post Luxembourg, DHL, Colissimo) to deliver your parcel.

  • Payment: Banks and secure payment organizations.

  • Technical: Emailing providers or analytics tools.

  • State: Tax administration (in case of an accounting audit).

5. Data Transfer outside the EU

To the extent possible, we process your data within the European Union.

However, by using the Shopify platform, some of your data (necessary for the operation of the store) may be processed outside the European Union, particularly in Canada or the United States.

  • For Canada: This country benefits from an "adequacy decision" from the European Commission, guaranteeing a level of protection equivalent to the GDPR.

  • For other transfers: We ensure they are framed by compliant legal guarantees (Standard Contractual Clauses).

6. How long do we keep your data?

We apply the following retention periods:

  • Order Data and Invoices: 10 years (Legal accounting obligation).

  • Inactive Customer Account: 3 years after your last activity (order or login). After this period, your data is anonymized or deleted.

  • Cookies: 13 months maximum.

7. Your Rights (GDPR)

In accordance with European regulations, you have the following rights regarding your data, whether you are a resident of Luxembourg, France, or Belgium:

  • Right of Access: To know what data we hold about you.

  • Right of Rectification: To correct an incorrect address or name.

  • Right to Erasure ("Right to be Forgotten"): To request the deletion of your data (unless we have a legal obligation to keep it, such as an invoice).

  • Right to Object: To unsubscribe from the newsletter.

  • Right to Portability: To retrieve your data in a readable format.

To exercise these rights, simply send us an email at contact@wholebeauty.care with proof of identity if necessary. We commit to responding to you within 1 month.

8. Security

We implement all technical measures (HTTPS protocol, encryption, complex passwords) to protect your data against theft or unauthorized access.

9. Complaints and Supervisory Authorities

If you believe, after contacting us, that your rights are not being respected, you have the right to lodge a complaint with a supervisory authority.

  • Lead Authority (Luxembourg): As our main establishment is located in Luxembourg, our reference authority is the CNPD: 15, Boulevard du Jazz, L-4370 Belvaux - www.cnpd.lu

  • Other European Authorities: If you reside in another European Union country, you may also contact your local data protection authority, for example:

10. Cookies

During your browsing, cookies may be deposited on your computer for the functioning of the shopping cart and for anonymous statistics. You can manage your cookie preferences via the banner that appears during your first visit to the site.