Legal
Privacy Policy
This policy explains what personal information Bella Perfection collects when you visit our site or place an order, why we collect it, who we share it with, and the choices you have. We have tried to write it in plain language rather than legal shorthand.
1. Who we are
Bella Perfection (“we”, “us”, “our”) sells lipstick, lip gloss, skin care and hand-poured candles through bellaperfection.com. For the purposes of data protection law we are the controller of the personal information described in this policy.
Registered business name: GBASTAR Enterprises LLC
Registered address: Miami, Florida 33150, United States
Contact: [email protected]
2. Information we collect
We collect three kinds of information: what you give us, what we record automatically, and what we receive from the services we use to run the shop.
Information you give us
- Name, email address, phone number, and shipping and billing addresses when you place an order
- Your email address if you subscribe to our list, and your preferences if you set any
- Anything you send us in a message, review, or support request
- Order history and any returns or exchanges you request
Information collected automatically
- IP address, browser type, device type, operating system and language
- Pages viewed, links clicked, referring site, and the time and date of each visit
- Cookie identifiers and similar technologies, as described in section 5
What we do not collect
We never see or store your full card number. Payments are handled by our payment processor, which receives your card details directly. We receive only a confirmation, the last four digits, and the card type.
3. How we use it
- To fulfil your order — taking payment, packing, shipping, and sending confirmations and tracking
- To provide support — answering questions, handling returns, resolving problems with an order
- To run the shop — preventing fraud, keeping accounts, meeting tax and record-keeping obligations
- To improve the site — understanding which pages and products people actually use
- To market to you — sending offers and new-product emails, but only where you have subscribed or where we are otherwise permitted to, and always with an unsubscribe link
We do not sell your personal information, and we do not share it with third parties for their own independent marketing.
4. Our legal basis
Where data protection law requires us to identify a legal basis for using your information, we rely on the following:
| Purpose | Legal basis |
|---|---|
| Fulfilling and delivering your order | Performance of a contract with you |
| Customer support and returns | Performance of a contract; legitimate interests |
| Fraud prevention and site security | Legitimate interests |
| Accounting and tax records | Legal obligation |
| Marketing emails | Consent, or legitimate interests where permitted |
| Non-essential cookies and analytics | Consent |
Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect anything we did before you withdrew it.
7. How long we keep it
- Order and transaction records — kept for 1 year, and for longer where tax, accounting or consumer-protection law requires it
- Marketing subscribers — kept until you unsubscribe, then removed within 15 days
- Support messages — kept for 6 months after the matter is resolved
- Analytics data — retained according to the provider's default retention period
When we no longer need information, we delete it or anonymise it so it can no longer identify you.
8. Your rights
Depending on where you live, you may have the right to:
- Ask what personal information we hold about you, and get a copy of it
- Correct information that is wrong or incomplete
- Ask us to delete your information, where we are not required to keep it
- Object to or restrict how we use it
- Receive your information in a portable, machine-readable format
- Withdraw consent at any time, including unsubscribing from marketing
- Complain to your local data protection authority
To exercise any of these, email [email protected]. We aim to respond within 24 to 48 hours, and in any case within the period the law allows, and we may ask you to confirm your identity first so we do not give your information to someone else.
9. California residents
If you live in California, you have the right to know what categories of personal information we collect and why, to request deletion, to correct inaccurate information, and to not be discriminated against for exercising those rights.
We do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we do not knowingly collect information from anyone under 16. To make a request, use the contact details in section 14.
10. Children
Our products and our site are intended for adults. We do not knowingly collect personal information from children under 13, and we do not knowingly sell or share the personal information of anyone under 16. If you believe a child has given us their information, contact us and we will delete it.
11. Security
The site runs over an encrypted connection, payment details go directly to our processor rather than through us, and access to customer information is limited to the people who need it to do their work.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach ever affects your information and poses a risk to you, we will notify you and the relevant authority as the law requires.
12. International transfers
We operate from the United States, and the services we use store data in the United States. If you order from outside the United States, your information will be transferred to and processed there. Where information leaves your country, we rely on appropriate safeguards — such as standard contractual clauses or an adequacy decision — to protect it to the same standard.
13. Changes to this policy
We update this policy when our practices change or the law requires it. The date at the top always reflects the current version. If a change materially affects how we use your information, we will tell you by email or with a notice on the site before it takes effect.
14. How to reach us
Questions about this policy, or a request about your information:
GBASTAR Enterprises LLC
Miami, Florida 33150, United States
[email protected]
You can also use the form on our contact page.
Still have a question?
We would rather you asked.
If anything here is unclear, or you want to know exactly what we hold about you, send us a message and a person will answer.
Contact us