Privacy policy

Last updated: September 3, 2026

1. DATA CONTROLLER

This website and online store are operated by:

Beauty Harmony Lab Ltd.
Company ID: 207401542
Registered address: Mladost 4, Block 480, Entrance 3, Floor 2, Apartment 62, 1715 Sofia, Bulgaria
Email: info@heravaldi.com

For the purposes of applicable data protection legislation, including the General Data Protection Regulation (GDPR), Beauty Harmony Lab Ltd. is the controller of your personal data.

2. PERSONAL DATA WE COLLECT

We may collect and process the following categories of personal data when you visit our website, place an order, create an account or otherwise interact with us:

Contact and identification information

Name
Email address
Telephone number
Billing and delivery address

Order and transaction information

Products purchased
Order and return history
Payment status and confirmation
Delivery and fulfilment information
Communications relating to an order

Account and loyalty programme information

Account credentials
Saved preferences
Loyalty points, rewards and membership level
Purchase activity connected to your account

Technical and usage information

IP address
Browser and device information
Cookie identifiers
Pages viewed
Referring pages
Interactions with our website

Marketing information

Newsletter subscription status
Marketing preferences
Interaction with marketing emails and advertising campaigns

We do not intentionally collect special categories of personal data.

3. HOW WE COLLECT PERSONAL DATA

We collect personal data through:

Direct interactions

You provide information directly when you:

Place an order
Create or manage an account
Join our loyalty programme
Subscribe to marketing communications
Contact customer support
Submit a review or participate in a promotion

Automated technologies

When you use our website, cookies and similar technologies may collect technical and usage information.

Third-party services

We may receive information from service providers that support our online store, payments, deliveries, analytics, advertising, email marketing and loyalty programme.

4. HOW AND WHY WE USE PERSONAL DATA

We process personal data for the following purposes:

Orders and customer accounts

To process payments, fulfil and deliver orders, manage returns, maintain customer accounts and provide requested services.

Legal basis: performance of a contract or steps taken at your request before entering into a contract.

Customer support

To respond to enquiries, resolve issues and communicate with you about orders or services.

Legal basis: performance of a contract and our legitimate interest in providing effective customer service.

Legal and regulatory compliance

To maintain accounting and transaction records, comply with consumer protection requirements and respond to lawful requests from public authorities.

Legal basis: compliance with legal obligations.

Website operation and security

To operate the website, prevent fraud, protect transactions, troubleshoot technical issues and safeguard our business and customers.

Legal basis: our legitimate interests in maintaining a secure and reliable online store and, where applicable, compliance with legal obligations.

Analytics and website improvement

To understand how visitors use the website and improve its performance, content and functionality.

Legal basis: your consent where analytics cookies or similar technologies are used.

Marketing and advertising

To send newsletters, promotional communications and product recommendations, and to measure or personalise advertising.

Legal basis: your consent.

You may withdraw your consent at any time without affecting the lawfulness of processing carried out before its withdrawal.

5. SERVICE PROVIDERS AND DATA RECIPIENTS

We share personal data only where necessary for the purposes described in this Privacy Policy.

Our service providers include:

E-commerce platform

Our online store is hosted by Shopify, which provides website hosting, checkout functionality, account services and store infrastructure.

Payment processing

Online payments are processed through Viva.com and any other payment options displayed during checkout. Payment providers process payment information securely under their own privacy policies.

We do not store complete payment card details on our own systems.

Delivery and fulfilment

Depending on the destination and selected delivery method, order information may be shared with:

Speedy
Econt
BOX NOW
DHL
euShipments

These providers receive the information required to fulfil and deliver your order, such as your name, telephone number, email address, delivery address and order details.

Analytics

We use Google Analytics to understand website traffic and how visitors interact with our online store. Google Analytics may process device information, IP address, cookie identifiers and website interaction data, subject to your cookie preferences.

Advertising

We use Meta Pixel to measure advertising performance and deliver more relevant advertising on Meta platforms. Meta Pixel may process information about your device, website activity and interactions with advertising, subject to your consent.

Email marketing

We use Klaviyo to manage newsletter subscriptions and marketing communications. Klaviyo may process contact details, purchase history and website activity associated with marketing campaigns.

You may unsubscribe at any time using the link included in every marketing email.

Loyalty programme

We use BLOY to operate the HERAVALDI Rewards programme. BLOY may process account information, purchase activity, loyalty points, rewards and membership status.

We may also disclose personal data to professional advisers, insurers, regulators, public authorities or courts where required by law or necessary to establish, exercise or defend legal claims.

6. COOKIES AND TRACKING TECHNOLOGIES

Our website uses cookies and similar technologies to:

Provide essential website functionality
Remember your preferences
Analyse website traffic and performance
Measure advertising effectiveness
Personalise marketing where permitted

Cookies may include:

Essential cookies
Preference cookies
Analytics cookies
Marketing cookies

Non-essential cookies are used only after you provide consent through our cookie banner. You may review or change your choices through the available cookie settings. You may also manage cookies through your browser, although disabling essential cookies may affect website functionality.

Further information is available in our Cookie Policy.

7. INTERNATIONAL DATA TRANSFERS

Some service providers may process personal data outside the European Economic Area.

Where personal data is transferred internationally, we rely on appropriate safeguards as required by applicable law. These may include:

An adequacy decision issued by the European Commission
Standard Contractual Clauses approved by the European Commission
Additional technical and organisational safeguards where appropriate

Information about the safeguards used by individual providers is available in their respective privacy policies. You may contact us for further information about safeguards relevant to your personal data.

8. DATA RETENTION

We retain personal data only for as long as necessary for the purposes for which it was collected:

Order, payment and accounting records are retained for the periods required under applicable tax, accounting and commercial legislation.
Account and loyalty programme information is retained while your account remains active and for a limited period afterwards where necessary to resolve disputes or comply with legal obligations.
Customer support correspondence is retained for as long as necessary to address the enquiry and protect our legitimate legal interests.
Marketing information is retained until you withdraw your consent or unsubscribe.
Cookie and analytics data is retained according to the periods shown in our cookie settings and the policies of the relevant providers.

When personal data is no longer required, it is deleted, anonymised or securely restricted from further use.

9. DATA SECURITY

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure or misuse.

No method of electronic transmission or storage is completely secure. We therefore cannot guarantee absolute security, but we regularly review the measures used to protect personal data.

10. YOUR RIGHTS

Subject to the conditions and limitations provided by applicable law, you may have the right to:

Request access to your personal data
Request correction of inaccurate or incomplete information
Request deletion of your personal data
Request restriction of processing
Object to processing based on legitimate interests
Object at any time to direct marketing
Request data portability
Withdraw your consent at any time
Submit a complaint to a competent data protection authority

To exercise your rights, contact us at:

info@heravaldi.com

We may request additional information to verify your identity before responding.

You also have the right to submit a complaint to the Bulgarian Commission for Personal Data Protection or to the data protection authority in the country where you live or work.

Information about the Bulgarian Commission for Personal Data Protection is available at www.cpdp.bg.

11. AUTOMATED DECISION-MAKING

We do not use your personal data to make decisions based solely on automated processing that produce legal or similarly significant effects for you.

Payment providers and fraud-prevention services may independently use automated systems to assess transactions in accordance with their own privacy policies.

12. CHILDREN’S PRIVACY

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children for marketing purposes.

If we become aware that personal data has been collected from a child without an appropriate legal basis, we will take reasonable steps to delete it.

13. THIRD-PARTY LINKS

Our website may contain links to websites operated by third parties. We are not responsible for their content or privacy practices. We recommend reviewing the privacy policy of each third-party website before providing personal information.

14. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect changes in our services, processing activities or legal obligations.

The current version will always be published on this page with its latest revision date.

15. CONTACT

If you have questions about this Privacy Policy, the processing of your personal data or the exercise of your rights, contact us at:

Beauty Harmony Lab Ltd.
Mladost 4, Block 480, Entrance 3, Floor 2, Apartment 62
1715 Sofia
Bulgaria
Email: info@heravaldi.com