Privacy Policy

Last Updated: December 2025

Give Back Beauty LLC, with registered office at 8 The Green, Suite #4220, Dover, DE 19901, United States of America, e-mail privacy@givebackbeauty.com (“Give Back Beauty”, “GBB”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy describes how we collect, use, disclose and safeguard personal information through this website and our digital services that link to this Privacy Policy (“Digital Services”). It does not apply to third-party websites, including retailers where our products may be available for purchase.

For purposes of the GDPR and CCPA, GBB is the data controller (“Controller”) with respect to the processing of personal data described herein.

1. Identity and contact details of the Controller

Give Back Beauty LLC
8 The Green, Suite #4220
Dover, DE 19901 – USA
E-mail: privacy@givebackbeauty.com

Give Back Beauty LLC has appointed Give Back Beauty S.r.l., Corso Italia 13, 20122 Milano (MI), Italy, VAT 10129060967, as its representative in the EU pursuant to Article 27 GDPR.

2. Data Protection Officer

The Controller has not appointed a Data Protection Officer pursuant to Article 37 GDPR.

3. Categories of personal data we collect

We collect the following categories of personal data:

3.1. Data you provide voluntarily

When you interact with our Digital Services, you may provide:

Name
Email address
Message/content of your request (contact/support form)
Email address for newsletter subscription

We do not collect payment data, shipping information, order details, account credentials, nor any information related to e-commerce activities.

3.2. Data collected automatically (cookies and tracking technologies)

When you browse our website, we automatically collect:

IP address
Device and browser information
Usage data (pages visited, time spent, interactions)

Through cookies and similar technologies, third parties process analytics, marketing and personalization data.
For details, please refer to our Cookie Policy.

Tracking technologies currently active include:

Google Analytics 4 (_ga, _ga_xxx)
Microsoft Clarity (_clck, _clsk)
Google Ads (_gcl_au)
Meta Pixel (_fbp)
Attentive (__attentive_cco, __attentive_id, etc.)

These are installed only with your consent, except for essential cookies.

4. Purposes and legal basis for processing

We process personal data for the following purposes:

4.1. Managing newsletter subscriptions

Purpose: sending updates, brand news, marketing communications.
Legal basis: your consent (Art. 6(1)(a) GDPR).
Data required: email address.
You may unsubscribe at any time.

4.2. Responding to contact/support requests

Purpose: answering messages received through contact forms or email.
Legal basis: legitimate interest in responding (Art. 6(1)(f) GDPR).
Data required: name, email, message.

4.3. Website functioning and security (technical cookies)

Purpose: ensuring core functionalities of the website.
Legal basis: performance of a service (Art. 6(1)(b) GDPR) and legitimate interest (Art. 6(1)(f) GDPR).

4.4. Analytics (with consent)

Purpose: statistical measurement of website performance and user interactions.
Legal basis: your consent (Art. 6(1)(a) GDPR).

4.5. Marketing and advertising (with consent)

Purpose: measuring ad performance and improving marketing campaigns.
Legal basis: your consent (Art. 6(1)(a) GDPR).

4.6. Personalization/profiling (with consent)

Purpose: personalized messaging, SMS marketing (Attentive).
Legal basis: your consent (Art. 6(1)(a) GDPR).
No profiling occurs without explicit consent.

4.7. Compliance with legal obligations

Purpose: handling requests from authorities or obligations under applicable laws.
Legal basis: legal obligation (Art. 6(1)(c) GDPR).

5. Methods of processing

Personal data is processed using electronic tools, subject to organizational and technical safeguards to ensure security, integrity and confidentiality.

We do not use automated decision-making producing legal effects.
Profiling activities occur only through third-party cookies when you consent.

6. Recipients of personal data

Personal data may be shared with:

providers of website hosting and IT services
newsletter/e-mail delivery platforms
analytics providers (Google Analytics 4, Microsoft Clarity)
advertising and measurement providers (Google Ads, Meta Pixel)
SMS/personalization providers (Attentive)
legal, administrative and auditing firms
public authorities where required by law

We do not sell personal data.

7. Data transfers outside the EU

Some partners (Google, Meta, Microsoft, Attentive) are located outside the EU, particularly in the United States.

Transfers take place under:

adequacy decisions where available
Standard Contractual Clauses
supplementary safeguards ensuring a level of protection essentially equivalent to EU standards

Copies of safeguards may be requested by contacting privacy@givebackbeauty.com.

8. Data retention

Newsletter data: retained until you withdraw consent.
Contact/support messages: retained up to 12 months from receipt.
Analytics/marketing/profiling data: retention depends on cookie duration (see Cookie Policy), generally ≤ 12 months.
Technical data: retained only as necessary for website functioning.

9. Your rights

Under GDPR, you may exercise the following rights:

access your personal data
request rectification
request deletion (“right to be forgotten”)
request restriction of processing
request data portability
object to processing, including direct marketing
withdraw consent at any time
lodge a complaint with your Data Protection Authority

You may contact us at: privacy@givebackbeauty.com

10. Children’s privacy

Our website is not intended for individuals under 18. We do not knowingly collect personal data from minors.
If you believe a minor has provided data, please contact us.

11. Changes to this Privacy Policy

We may update this Privacy Policy to reflect legal, technical or operational changes.
Any updates will be published on this page with an updated “Last Updated” date.