Privacy Policy

This policy explains how AdviseMyStyle d.o.o. (“Chicatella”, “we”, “us”), Godnje 23, 6221 Dutovlje, Slovenia, handles personal information when you use www.chicatella.com, our store at shop.chicatella.com, your customer account, our emails, or when you contact us. We decide why and how your personal information is used (in US terms, we are the “business”; in EU terms, the “controller”).

Questions or requests: info@chicatella.com, phone +386 30 384 245.

We don’t collect sensitive personal information to infer characteristics about you. You can opt out of “sharing” at any time: see Do Not Sell or Share My Personal Information.

Information you give us

• Waiting list and newsletter: your email address (and, if you give it, your first name).
• Orders: name, email, phone, shipping and billing address, the products you buy, and payment details. Payments are handled by Shopify and the payment providers; we never see your full card number.
• Customer account: your login email and the details saved in your account.
• Messages: what you write to us by email, phone or the contact form, and any photos you send (for example of a damaged package). Please don’t send us health details you don’t need to; if you do, we use them only to answer you.
• Reviews: your review text, name as shown and any photo you choose to send.

Information collected automatically

• Always (needed to run the site): technical data such as IP address, browser type and the pages you request, processed by our hosting and video providers to deliver the site and keep it secure; your cookie choice and cart contents.
• Unless you opt out: visit statistics from Vercel and analytics and advertising cookies and similar technologies from Google, Microsoft and OpenAI that record how you use our site, which ad brought you here, and actions such as adding to cart or starting checkout. Details are in our Cookie Policy.

The skin care quiz

Our care-finder quiz runs entirely in your browser. Your answers are used only to show you a product suggestion on the page; they are not sent to us or to anyone else, and we don’t store them. If you then add a product to the cart, that is recorded like any other cart action.

Information from others

Shopify and payment providers tell us whether a payment went through, and may flag suspected fraud. DHL tells us about delivery status. Ad platforms give us aggregated reports about how our ads perform.

• To take, process, ship and support your orders, including payment, delivery, refunds and our satisfaction guarantee.
• To run your customer account.
• To send you the newsletter and tell you when US ordering opens, if you signed up (you can unsubscribe in every email).
• To answer your questions and complaints.
• To keep the website and store secure and to prevent fraud.
• To understand how the website is used and improve it (unless you opt out).
• To show you our ads on other websites and measure whether our ads work (unless you opt out).
• To meet our legal obligations (for example tax and accounting records) and to protect our legal rights.

We don’t use your information for purposes that aren’t reasonably compatible with these, unless we tell you first.

We only give your information to companies that help us run our business, under contracts that limit how they may use it, or where the law requires:

• Shopify (Shopify International Ltd., Ireland, and Shopify Inc., Canada): store, cart, checkout and customer accounts.
• Payment providers available at checkout (for example Shopify Payments/Stripe, PayPal): processing your payment.
• DHL: delivering your order (name, address, phone, email for tracking).
• Shopify Email (part of Shopify): sending our newsletter.
• Cloudflare, Inc. (USA): Turnstile, an invisible check that protects our sign-up forms from bots (it processes technical data such as your IP address and browser details).
• Vercel Inc. (USA): hosting the website and visit statistics (unless you opt out).
• BunnyWay d.o.o. (Slovenia): delivering the videos on our website.
• Google (Google Ireland Ltd.): Tag Manager, Analytics and Google Ads, unless you opt out.
• Microsoft (Microsoft Ireland Operations Ltd.): Microsoft Advertising and Clarity, unless you opt out.
• OpenAI: measuring visits that come from ads, unless you opt out.
• Our accountant and advisers, and authorities where the law requires it.
• A buyer or successor if our business is ever sold or merged, under this policy.

We don’t sell your personal information for money, and we never will.

However, advertising cookies from Google, Microsoft and OpenAI collect information about your visit (such as pages viewed, ad clicks, cart actions and cookie IDs) so we can show you our ads on other websites and measure them. Under the California Consumer Privacy Act (CCPA, as amended by the CPRA) this may count as “sharing” for cross-context behavioral advertising, and under the laws of other states (such as Virginia, Colorado, Connecticut, Texas, Oregon and others) it may count as a “sale” or as “targeted advertising”. These cookies are on by default on our US site until you opt out. We don’t knowingly sell or share the personal information of anyone under 16.

How to opt out, whenever you like:

1. Click “No thanks” at the top of our Cookie Policy page (the “Do Not Sell or Share My Personal Information” link at the bottom of every page brings you here). We then stop loading analytics and advertising cookies on that browser and delete the ones already stored.
2. Turn on Global Privacy Control (GPC) in your browser or a browser extension. We automatically treat a GPC signal as an opt-out for that browser, even if you clicked “Yes, cookies” before.
3. Email us at info@chicatella.com with the subject “Do Not Sell or Share”. We’ll record your opt-out for any information we hold about you, such as your email address and orders, and confirm it in writing. Cookies are stored in your browser, so to switch off ad cookies as well, please also use step 1 or 2.

Because cookies are stored per browser and device, please repeat step 1 on each browser and device you use (GPC works automatically wherever it’s turned on). You don’t need an account to opt out.

We don’t ask for health information, and we don’t collect or use sensitive personal information to infer characteristics about you. Reading our articles about skin conditions is not linked to your name or email. The quiz answers stay in your browser (see section 3). Some products may of course suggest an interest in skin care; we don’t use your purchases to build profiles about health conditions. Because we don’t use sensitive personal information for any purpose that requires it, the right to “limit the use of sensitive personal information” doesn’t apply to us.

If you choose to tell us about your skin in an email, we use it only to reply to you and delete it when it’s no longer needed.

• Orders and invoices: as long as tax and accounting law requires (up to 10 years after the end of the year of the order).
• Customer account: until you close it, then as above for order records.
• Newsletter and waiting list: until you unsubscribe; then we keep only a record that you unsubscribed, so we don’t email you again.
• Emails and support requests: up to 3 years after the matter is closed, unless we need them longer for a legal claim.
• Cookies: the durations listed in our Cookie Policy; your cookie choice is kept for 12 months.

Depending on the state you live in (for example California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and other states with privacy laws), you have some or all of these rights. We are happy to honor them for every US customer, whatever your state:

• Right to know and access: what personal information we have about you, where it comes from, why we use it and who we disclose it to, and a copy of it in a portable format.
• Right to delete personal information we collected from you, except what we must keep by law (for example invoices).
• Right to correct inaccurate information.
• Right to opt out of the “sale” or “sharing” of personal information, of targeted advertising and of profiling with legal or similarly significant effects (we don’t do the latter). See Do Not Sell or Share.
• Right to limit the use of sensitive personal information: not applicable, because we don’t use it (section 6).
• Right to non-discrimination: we won’t charge you a different price, give you a worse service or deny you anything because you used your rights.
• Right to appeal: if we decline your request, you can appeal (see section 10).

We don’t offer financial incentives in exchange for your personal information. Newsletter offers are open to every subscriber and you can unsubscribe at any time.

Email info@chicatella.com or call +386 30 384 245, and tell us which right you want to use. To protect you, we confirm your identity by asking you to reply from, or confirm a code sent to, the email address we have on file; for some requests we may ask for an order number. We only use this information to verify you.

We confirm receipt within 10 business days and answer within 45 days. If we need more time (up to another 45 days), we’ll tell you why. Requests are free; we may decline requests that are clearly unfounded or excessive, and we will explain why.

Authorized agents: someone else can make a request on your behalf if you give them signed, written permission. We may ask the agent for proof and ask you to confirm your identity directly with us, unless the agent has a valid power of attorney.

If we decline your request, in whole or in part, you can appeal by replying to our answer or emailing info@chicatella.com with the subject “Privacy appeal”. We will answer your appeal in writing within 60 days (or the shorter period your state law requires) and explain our decision. If you’re not satisfied, you can contact your state attorney general; California residents can also contact the California Privacy Protection Agency.

Our website is meant for adults. Many of our customers are parents who buy skin care for their children, but the website is not directed at children under 13, and we don’t knowingly collect personal information from children under 13, in line with the Children’s Online Privacy Protection Act (COPPA). If you believe a child has given us personal information, please email us and we will delete it. We don’t knowingly sell or share personal information of anyone under 16.

We are based in Slovenia, in the European Union. That means your information is handled under the EU General Data Protection Regulation (GDPR), one of the strictest privacy laws in the world, in addition to the US laws described here. Your information may be processed in the EU, the United States and Canada by the service providers listed above. Where data moves from the EU to other countries, we rely on safeguards required by EU law, such as the EU–US Data Privacy Framework or the EU Standard Contractual Clauses.

We use reputable providers, encrypted connections (HTTPS), access limited to people who need it, and strong passwords with two-step verification where available. Payment details are handled by certified payment providers and never reach us. No system is completely secure, but if a data breach ever affects you, we will notify you as the law requires.

Under California Civil Code Section 1798.83, California residents may ask once a year whether we disclosed personal information to third parties for their own direct marketing purposes in the previous calendar year. We don’t disclose personal information to third parties for their own direct marketing. You can still send a request to info@chicatella.com.

We don’t sell “covered information” as defined by Nevada law (NRS 603A) for monetary consideration. Nevada residents may still submit an opt-out request to info@chicatella.com, and we will record it.

There is no common industry standard for the older “Do Not Track” browser setting, so we don’t respond to it. We do honor the Global Privacy Control signal as described above, and you can always decline cookies on our cookie page.

We review this policy at least once a year and update it when our practices or the law change. The date at the top shows the latest version. If we make significant changes, we’ll make them clear on the website or let you know by email before they take effect.

AdviseMyStyle d.o.o.
Godnje 23, 6221 Dutovlje, Slovenia
Email: info@chicatella.com
Phone: +386 30 384 245

See also our Cookie Policy and our Terms of Sale and Use.