Privacy Policy

Last updated: 25 September 2026

1. Who is the controller?

The controller is Pure’ssense Cosmetics SRL, trading under the name Alezia Bloom Lab.

Registered office: Str. Susenii Noi nr.17, Reghin, jud. Mures, Romania. Privacy contact: privacy@aleziabloomlab.com.

2. What data we may collect

We may process: name and contact details; billing and delivery details; order and transaction information; payment status and payment references; account data if you create an account; customer-service communications; returns and complaints information; newsletter/marketing preferences; review content if you choose to publish a review; website, device, security and log data; cookie identifiers and analytics/advertising data where you have given consent.

3. Why we use data and our legal bases

To process orders, payments, delivery, returns and order-related requests — performance of a contract or steps at your request before entering into a contract.

To issue invoices, keep mandatory records and comply with tax, accounting, consumer-protection and other legal obligations — legal obligation.

To secure the website, prevent abuse or fraud, defend legal claims and maintain service integrity — legitimate interests and, where applicable, legal obligation.

To answer general enquiries and manage customer service — contract, pre-contractual steps or legitimate interests depending on the enquiry.

To send newsletters and electronic promotional communications — consent where required. You may withdraw consent at any time.

To use non-essential analytics or advertising technologies — consent where required. You may change your choice in Cookie Settings.

4. Payment data

Card payments are handled through WooPayments. Where WooPayments collects card details directly, Alezia Bloom Lab does not intend to receive or store the full card number or security code. We may receive transaction status, references, fraud/risk signals and information needed for reconciliation and refunds.

5. Who we may share data with

Data may be shared, only where necessary, with the Zooku/cPanel hosting provider; WordPress/WooCommerce and technical service providers; WooPayments; fulfilment providers and couriers; email/customer-support providers; accountants and professional advisers; IT and security providers; Complianz CMP for consent management; analytics/advertising providers where you have consented; and public authorities where required by law.

We do not sell personal data.

6. International transfers

Some providers may process data outside the European Economic Area. Where this happens, we will use a lawful transfer mechanism such as an adequacy decision or appropriate safeguards, including Standard Contractual Clauses, where required.

7. How long we keep data

We keep data only for as long as necessary for the purpose for which it was collected and to comply with applicable legal, accounting, tax, consumer-protection, warranty and limitation-period requirements.

Order and billing records are kept for the legally required periods applicable to the company. Customer-service and dispute data may be kept as long as needed to resolve the matter and establish, exercise or defend legal claims. Marketing data is kept until you withdraw consent or it is no longer needed. Cookie durations are shown in Cookie Settings.

8. Your rights

Subject to the conditions of the GDPR, you may have the right to access, rectification, erasure, restriction, portability, objection to certain processing and withdrawal of consent at any time where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

9. Complaints

You may contact us first at privacy@aleziabloomlab.com. You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) or, where permitted, the supervisory authority in the EU country of your habitual residence, place of work or place of the alleged infringement.

10. Cookies

Cookies and similar technologies are described in the Cookie Policy. Non-essential cookies are used only after consent where legally required, and consent can be withdrawn through Cookie Settings, managed through Complianz CMP.

11. Children

The online store is intended for persons who have legal capacity to enter into a purchase contract. If you do not have that capacity, the order must be placed by a parent or legal representative, or with the authorisation required by law.

12. Security

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure or destruction. No internet transmission or storage method can be guaranteed to be completely secure.

13. Changes

We may update this Policy to reflect changes to our services, providers or legal obligations. The current version and the date of update will be published on this page.