Information on the Use of Telephone Data

Last updated: March 17, 2025

Information on the Use of SMS, WhatsApp and Telephone Data

In compliance with the General Data Protection Regulation (GDPR - EU Regulation 2016/679), in particular Articles 5, 6 and 7, GlamLuxe provides its users with clear and transparent information on the processing of the telephone number and personal data collected for communications via SMS and WhatsApp. Protecting your privacy is our priority. We are committed to processing your data in a lawful, fair and transparent manner, respecting the principle of minimization and limiting the use of your data only to the purposes indicated.

Legal Basis of Processing

The processing of telephone data is carried out in compliance with Article 6 of the GDPR, which establishes the legal bases for the processing of personal data:

  • Explicit consent of the data subject (art. 6, paragraph 1, letter a): This applies to promotional communications and sending SMS or messages via WhatsApp. Consent must be free, specific, informed and unambiguous. Users can express consent through a clear action, such as selecting an option or filling out a form.
  • Performance of a contract (art. 6, paragraph 1, letter b): This legal basis applies to sending updates relating to orders and customer service. The processing of data is necessary to fulfill the contractual obligations between GlamLuxe and the user, such as providing information on the status of orders or solving problems related to purchases.

Each processing purpose is documented and monitored to ensure full compliance with the GDPR, with particular attention to transparency and respect for the rights of data subjects.

Collection and Purpose of Telephone Data

Telephone Number: The telephone number you provide us will be collected and processed exclusively for specific and legitimate purposes:

Order Information:

  • Order confirmation, shipping and delivery notifications.
  • Communications regarding any delivery problems

Promotional communications (subject to consent):

  • Sending exclusive offers, personalized promotions and updates on new products or services.
  • The frequency of communications is limited to a maximum of 2-3 SMS per month.

Abandoned Cart Reminder:

  • Notifications to remind you to complete a purchase you have started, limited to one notification per shopping session.

Customer Support:

  • Quick and direct communication to answer specific questions or support requests.

Processing of telephone data via WhatsApp

If you choose to provide your number to receive communications via WhatsApp, the data will be processed exclusively for legitimate purposes, including:

  • Order updates, including confirmation, shipping, and delivery notifications.
  • Direct communications for support requests.
  • Exclusive promotions and offers, such as dedicated discount codes, priority access to seasonal sales and new arrivals.
  • Launch of new collections and personalized style advice.
  • Invitations to exclusive events, such as VIP previews.
  • Reminder to visit the site and discover the latest news.

Consent Management: The processing of your telephone number will always be in compliance with the GDPR and will require your explicit consent. You can withdraw this consent at any time, as described in the section "How to Withdraw Consent".

Data Security

GlamLuxe adopts appropriate technical and organizational measures to ensure the security and protection of your personal data, in accordance with Article 32 of the GDPR. Among the measures implemented we include:

  • Data encryption during both transmission and storage to prevent unauthorized access.
  • Limited access to personal data, granted only to authorized personnel and service providers who need access for the stated purposes.
  • Regular audits and continuous monitoring to identify and mitigate security vulnerabilities.
  • Secure backup systems , to prevent data loss in the event of accidents or cyber attacks.

Data Retention

The data will be retained for specific periods based on the purposes of processing.

Duration of Retention:

  • Order updates: Retained until the order is fully fulfilled and for a maximum of 12 months thereafter, unless otherwise required by administrative or legal requirements.
  • Promotional communications: Retained until consent is withdrawn or for a maximum of 24 months from the last significant contact.
  • Customer Service: Retained for the time necessary to resolve the request and for a maximum of 6 months thereafter for any checks.

At the end of the retention periods, the data will be deleted or made anonymous, unless otherwise provided by current legislation.

How to Revoke Consent

You can withdraw your consent to the use of your phone number at any time:

  • SMS:
    • By replying with "STOP" to received messages.
    • By clicking the unsubscribe link included in each message.
  • WhatsApp:
    • By deleting our contact from your address book.
    • By sending an explicit request to stop communications.

Rights of the interested party

Pursuant to Articles 15-22 of the GDPR, you have the right to:

  1. Access your personal data: You can request a complete copy of your personal data processed by GlamLuxe by sending a detailed request to the email address privacy@glamluxe.it. You will receive a response within 30 days.
  2. Rectify your data: If you believe that some information is inaccurate or incomplete, you can request its correction or integration through our contact form or by email.
  3. Revoke consent: You can cancel your consent to promotional communications at any time by clicking on the unsubscribe link in the emails or by replying with "STOP" to the SMS messages received.
  4. Object to processing: You can prevent the use of your personal data for certain purposes, such as direct marketing, by sending a specific request via email.
  5. Erasing your data (Right to be forgotten): You can request the complete removal of your data from our systems by filling out the dedicated form available on our Privacy Policy page. Your request will be assessed in accordance with the provisions of the GDPR.
  6. Data Portability: You can request a copy of your personal data in a structured, commonly used and machine-readable format, to transmit them to another data controller. To request portability, send an email specifying the preferred format.

To exercise your rights, you can contact us at the dedicated email address: privacy@glamluxe.it . We will respond within 30 days of receiving the request.

Transfer of Data to Third Parties

GlamLuxe guarantees that your data will not be shared with third parties for marketing purposes without your explicit consent. However, data may be transferred to authorized third-party service providers (e.g. messaging platforms such as Klaviyo and WhatsenderPro) exclusively for the execution of the indicated purposes. These providers are obliged to comply with the same data protection standards as required by the GDPR, ensuring advanced security measures and the use of data only for the purposes specified by GlamLuxe.

Third Party Service Providers: These providers act as data processors and ensure compliance with the GDPR through:

  • Implementation of advanced security measures, such as data encryption and continuous monitoring.
  • Contractual agreements that limit the use of data exclusively for the purposes specified by GlamLuxe.
  • Regular audits to verify compliance with current regulations.

Although GlamLuxe is the data controller, the operational management of the collected data takes place through these specialized platforms, which operate safely and in compliance with European regulations.

Changes to this Policy

We reserve the right to update this policy periodically to ensure compliance with current regulations. We encourage you to check this page regularly for any changes.

For further details, please see our Privacy Policy and our Terms and Conditions of Service .