Privacy Policy (UE)

This Privacy Policy was last updated on 06.04.2026 and applies to citizens and lawful permanent residents of the European Economic Area and Switzerland.

In this Privacy Policy, we explain how Tuloxia handles personal data obtained through https://tuloxia.com. We recommend that you read this statement carefully. In processing personal data, we comply with applicable privacy legislation. This means, among other things, that:

– we clearly state the purposes for which we process personal data;
– we limit the collection of personal data to what is necessary for legitimate purposes;
– where required, we ask for your consent before processing your personal data;
– we implement appropriate security measures to protect your personal data and require the same from parties processing personal data on our behalf;
– we respect your right to access, correct or erase your personal data upon request.

If you have any questions, or if you would like to know exactly what personal data we hold about you, please contact us.

1. Purpose, data and retention period

We may collect or receive personal data for a number of purposes connected with our business operations and website activities, including the following.

1.1 Contact – by phone, post, email and/or web forms

For this purpose, we may process the following data:

– first name and surname;
– company name, where applicable;
– postal address, where voluntarily provided;
– email address;
– telephone number;
– any other information you choose to include in your enquiry.

Legal basis:
Consent and/or steps taken at your request prior to entering into a business relationship.

Retention period:
We retain these data for as long as necessary to handle your enquiry, manage any related follow-up, and comply with any applicable legal or administrative obligations.

1.2 Website analytics and improvement

For this purpose, we may process the following data:

– browsing behaviour on the website;
– IP address;
– device and browser information;
– approximate geolocation data;
– interaction data relating to website performance and usability.

Legal basis:
Consent, where required.

Retention period:
We retain these data only for as long as necessary for the relevant analytics purpose, subject to your cookie preferences and the retention settings of the relevant service providers.

1.3 Embedded content, website functionality, accessibility and protection against spam or abuse

For this purpose, we may process the following data:

– technical device and browser data;
– IP address;
– interaction data relating to embedded media or external content;
– data submitted through protected forms or communication tools;
– data necessary to enable accessibility tools or website functionality.

Legal basis:
Consent, where required, and legitimate interest where the relevant functionality is strictly necessary for the operation, security or accessibility of the website.

Retention period:
Retention depends on the specific tool or service involved and, where applicable, on your consent preferences.

2. Sharing with other parties

We share personal data only with processors and third parties where this is necessary for the operation of the website, communications, accessibility, embedded content, security, or related business purposes, and where required on the basis of consent.

Depending on the features used on the website, this may include services or providers connected with:

– WordPress
– Elementor
– Complianz
– UserWay
– Adobe Fonts
– Google Fonts
– Google reCAPTCHA
– YouTube
– Facebook
– LinkedIn
– WhatsApp

Where personal data are processed by third-party providers outside the European Economic Area, this will take place only where appropriate safeguards are in place in accordance with applicable data protection law.

3. Cookies

Our website uses cookies.

For more information about the cookies we use, please refer to our Cookie Policy.

4. Disclosure practices

We may disclose personal data if we are required by law or by a court order, in response to a law enforcement authority, to the extent permitted by other provisions of law, to provide information, or for an investigation relating to public safety.

If our website, business or organisation is taken over, sold, merged or otherwise reorganised, your data may be disclosed to our advisers and any prospective purchasers and may be transferred to the new owners.

Where required, we enter into appropriate data processing arrangements with third-party service providers.

5. Security

We are committed to the security of personal data. We take appropriate technical and organisational measures to limit misuse and unauthorised access to personal data. This ensures that only the necessary persons have access to your data, that access is protected, and that our security measures are reviewed regularly.

6. Third-party websites

This Privacy Policy does not apply to third-party websites linked from our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend that you read the privacy statements of these websites before making use of them.

7. Amendments to this Privacy Policy

We reserve the right to make changes to this Privacy Policy. We recommend that you consult this Privacy Policy regularly in order to remain informed of any changes. Where possible, we will also actively inform you of material changes.

8. Access to and modification of your data

If you have any questions, or if you would like to know exactly what personal data we hold about you, please contact us using the details below.

You have the following rights:

– the right to know why your personal data are needed, what happens to them, and how long they will be retained;
– the right of access to the personal data we hold about you;
– the right to rectification, completion or correction of your personal data;
– the right to request erasure or restriction of your personal data, where applicable;
– where processing is based on consent, the right to withdraw that consent at any time;
– the right to data portability, where applicable;
– the right to object to the processing of your personal data, unless there are overriding legitimate grounds for the processing.

Please always make clear who you are, so that we can be certain that we do not modify or delete the data of the wrong person.

9. Lodging a complaint

If you are not satisfied with the way we handle your personal data, you have the right to lodge a complaint with the competent supervisory authority.

10. Contact details

Luxury Beauty Solutions Srl
Via di Novoli, 79
50127 Firenze
Italy

Website: https://tuloxia.com
Email: info@tuloxia.com