Privacy policy

Last updated: August 11, 2026

LushScalp operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the “Services”).

LushScalp is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use, process, and disclose your personal information when you visit or use our website, make a purchase or other transaction, communicate with us, or otherwise interact with the Services.

If there is a conflict between our Terms of Service and this Privacy Policy regarding the collection, processing, or disclosure of personal information, this Privacy Policy will apply.

Please read this Privacy Policy carefully. By using or accessing the Services, you acknowledge that you have read and understood this Privacy Policy.

Personal Information We Collect or Process

When we use the term “personal information,” we mean information that identifies you or can reasonably be linked to you.

Personal information does not include information that has been anonymized or de-identified so that it can no longer reasonably be linked to an individual.

Depending on how you interact with the Services, where you live, and what features you use, we may collect or process the following categories of personal information:

  • Contact information, including your name, email address, telephone number, billing address, and shipping address.
  • Payment and financial information, including billing information, payment method details, payment confirmations, and transaction information. Payment information may also be processed directly by Shopify and our payment service providers.
  • Account information, including usernames, passwords, preferences, and account settings where applicable.
  • Transaction information, including products you view, add to your cart, purchase, return, exchange, or cancel, as well as your previous transactions.
  • Communications with us, including information you provide when contacting our customer support team.
  • Device information, including your browser, device type, network connection, IP address, and other technical identifiers.
  • Usage information, including information about how you browse, access, and interact with our website and Services.
  • Marketing and advertising information, including your preferences and interactions with marketing communications or advertisements where applicable.

Sources of Personal Information

We may collect personal information from the following sources:

  • Directly from you when you place an order, create an account, contact us, subscribe to communications, or otherwise provide information to us.
  • Automatically through your use of the Services, including through cookies, pixels, and similar technologies.
  • From Shopify and other service providers that help us operate our store.
  • From payment processors, fulfillment partners, shipping providers, analytics providers, advertising partners, and other third parties where applicable.
  • From business or marketing partners where permitted by applicable law.

How We Use Your Personal Information

Depending on how you interact with us, we may use your personal information for the following purposes:

Providing and Improving the Services

We may process your personal information to:

  • Process and fulfill your orders.
  • Process payments.
  • Arrange delivery and shipping.
  • Process returns, exchanges, refunds, and cancellations.
  • Maintain and manage customer accounts.
  • Provide customer support.
  • Remember your preferences.
  • Recommend relevant products or content.
  • Improve our website, products, and customer experience.
  • Enable customer reviews or other store features.

Marketing and Advertising

Where permitted by applicable law, we may use your information to:

  • Send promotional emails or other marketing communications.
  • Measure the effectiveness of our marketing.
  • Personalize advertising and content.
  • Show advertisements based on your interactions with our store, products, or website.

Where consent is required, we will request your consent before using your information for these purposes.

You may withdraw your marketing consent or unsubscribe from marketing communications at any time.

Security and Fraud Prevention

We may process personal information to:

  • Protect our customers and business.
  • Detect, investigate, and prevent fraudulent transactions.
  • Identify suspicious, illegal, malicious, or unauthorized activity.
  • Maintain the security and integrity of our website and Services.

Communicating With You

We may use your contact information to:

  • Respond to questions.
  • Provide customer support.
  • Send information relating to your order.
  • Provide delivery or return information.
  • Resolve complaints or disputes.
  • Maintain our customer relationship with you.

Legal and Regulatory Purposes

We may process personal information where necessary to:

  • Comply with applicable laws and regulations.
  • Fulfill accounting or tax obligations.
  • Respond to valid legal requests.
  • Establish, exercise, or defend legal claims.
  • Cooperate with courts, regulators, law enforcement agencies, or other competent authorities where legally required.

Legal Bases for Processing

Where the General Data Protection Regulation (“GDPR”) or other applicable data protection laws apply, we process your personal information only where we have an appropriate legal basis.

Depending on the circumstances, these legal bases may include:

Performance of a Contract

We process personal information when necessary to enter into or perform our contract with you, including:

  • Processing your order.
  • Processing payment.
  • Delivering your products.
  • Managing returns and refunds.
  • Providing customer support relating to your purchase.

Legal Obligations

We may process or retain personal information where necessary to comply with legal obligations, including accounting, taxation, consumer protection, fraud prevention, and lawful requests from authorities.

Legitimate Interests

We may process personal information where necessary for our legitimate business interests, including:

  • Operating and improving our store.
  • Protecting our business and customers.
  • Preventing fraud.
  • Maintaining website security.
  • Understanding how customers interact with our Services.
  • Providing effective customer service.

Where we rely on legitimate interests, we consider whether those interests are overridden by your rights and freedoms.

Consent

Where required by applicable law, we rely on your consent for certain activities, including certain:

  • Marketing communications.
  • Advertising technologies.
  • Analytics technologies.
  • Cookies and similar tracking technologies.

Where processing is based on your consent, you may withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing that occurred before consent was withdrawn.

Cookies and Similar Technologies

We and our service providers may use cookies, pixels, tags, local storage, and similar technologies to operate our website and provide the Services.

These technologies may be used for purposes including:

  • Essential website functionality.
  • Remembering your preferences.
  • Shopping cart functionality.
  • Security and fraud prevention.
  • Analytics and performance measurement.
  • Personalization.
  • Marketing and advertising.

Where required by applicable law, non-essential cookies and similar technologies will only be used after you provide consent.

You may manage or change your privacy and cookie preferences through the cookie banner or privacy preference tools available on our website.

Disabling certain cookies may affect the functionality or performance of some parts of the Services.

How We Disclose Personal Information

We may disclose personal information to third parties where necessary for legitimate business purposes and in accordance with applicable law.

This may include:

  • Shopify, which provides the ecommerce platform used to operate our store.
  • Payment processors that process transactions.
  • Shipping and fulfillment providers that deliver orders.
  • IT and cloud service providers.
  • Analytics providers.
  • Customer service providers.
  • Marketing and advertising partners, where permitted.
  • Other service providers that perform services on our behalf.

We may also disclose information:

  • When you request or authorize us to do so.
  • When necessary to complete a transaction or provide a service you requested.
  • To comply with applicable legal obligations.
  • In response to valid requests from government authorities, regulators, courts, or law enforcement.
  • To establish, exercise, or defend our legal rights.
  • To protect the rights, safety, or property of LushScalp, our customers, or others.

If you wish to ask questions about personalized or targeted advertising, you may contact us at:

thelushscalp.team@gmail.com

Relationship With Shopify

Our store is hosted by Shopify.

Shopify collects and processes certain personal information relating to your access to and use of our Services in order to provide and improve Shopify's services and the ecommerce functionality used by our store.

Information you provide through our Services may be transmitted to or processed by Shopify and other service providers, including providers located outside the country where you reside.

Shopify may also process certain information obtained through interactions with our store and other Shopify merchants in connection with Shopify features and services.

For more information about Shopify's processing of personal information, you can review the Shopify Consumer Privacy Policy:


https://www.shopify.com/legal/privacy

You can also access the Shopify Privacy Portal to learn more about your privacy choices and rights in relation to Shopify:


https://privacy.shopify.com/consumer

Third-Party Websites and Links

Our Services may contain links to websites, applications, or platforms operated by third parties.

If you follow a link to a website or service that is not operated or controlled by LushScalp, that third party's privacy practices and terms will apply.

We are not responsible for the privacy, security, accuracy, or practices of third-party websites or services.

We recommend reviewing the privacy policies of third parties before providing them with personal information.

Children’s Data

Our Services are not intended for children.

We do not knowingly collect personal information from children who are below the age at which they may independently consent to the processing of their personal information under applicable law.

If you are a parent or legal guardian and believe that a child has provided personal information to us, please contact us so that we can review and, where appropriate, delete the information.

Security of Your Personal Information

We take reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

However, no method of transmission over the internet or electronic storage system can guarantee complete security.

We therefore cannot guarantee that personal information will always be completely secure.

Please avoid sending sensitive or confidential information through unsecured communication channels.

Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or where retention is required or permitted by applicable law.

The length of time we retain information depends on factors including:

  • Whether the information is required to fulfill or manage your order.
  • Whether you maintain an account with us.
  • Whether we need the information to provide customer service.
  • Applicable accounting, tax, legal, or regulatory requirements.
  • Fraud prevention and security requirements.
  • The establishment, exercise, or defense of legal claims.
  • The resolution of complaints or disputes.

When personal information is no longer required, we will delete, anonymize, or otherwise securely dispose of it where appropriate.

Your Privacy Rights and Choices

Depending on where you live and subject to applicable law, you may have certain rights regarding your personal information.

These may include the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate or incomplete personal information.
  • Request deletion of your personal information in applicable circumstances.
  • Restrict processing of your personal information in applicable circumstances.
  • Request data portability, including receiving certain personal information in a structured, commonly used, and machine-readable format.
  • Object to processing based on legitimate interests in applicable circumstances.
  • Object to direct marketing at any time.
  • Withdraw consent at any time where processing is based on your consent.
  • Lodge a complaint with an applicable data protection supervisory authority.

These rights are not absolute and may be subject to limitations or exceptions under applicable law.

We may need to verify your identity before completing certain privacy requests.

We will not discriminate against you for exercising your applicable privacy rights.

Marketing Communications

If you receive marketing emails from us, you may unsubscribe at any time using the unsubscribe option included in the communication.

You may also contact us directly at:

thelushscalp.team@gmail.com

Unsubscribing from marketing messages does not prevent us from sending non-marketing communications that are necessary to manage your orders, transactions, account, or customer service requests.

Complaints

If you have concerns or complaints regarding how we process your personal information, please contact us first using the contact information below.

If you are located in the European Economic Area, you may also have the right to lodge a complaint with the competent data protection supervisory authority, including the authority in the country where you live, work, or believe an infringement has occurred.

Customers in Sweden may contact the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY). IMY confirms that individuals who believe their personal data is being processed contrary to the GDPR can lodge a complaint with the authority.

International Transfers of Personal Information

Because we use Shopify and other international service providers, your personal information may be transferred to, stored in, or processed in countries other than the country where you live.

Where personal information is transferred outside the European Economic Area (“EEA”) and applicable law requires additional safeguards, we will rely on an appropriate lawful transfer mechanism.

This may include:

  • An adequacy decision issued by the European Commission.
  • Standard Contractual Clauses approved by the European Commission.
  • Other legally recognized safeguards or transfer mechanisms.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

  • Our Services.
  • Our business practices.
  • Technologies we use.
  • Legal or regulatory requirements.
  • Our service providers.

When we update this Privacy Policy, we will publish the revised version on our website and update the “Last updated” date at the top of this page.

We encourage you to review this Privacy Policy periodically.

Contact

If you have questions about this Privacy Policy, our privacy practices, or would like to exercise any applicable privacy rights, please contact us:

LushScalp

Email:
thelushscalp.team@gmail.com

Mailing address:
al. Jana Pawla II 56
00-828 Warszawa
Poland

For purposes of applicable data protection law, LushScalp is responsible for the processing of personal information described in this Privacy Policy, unless otherwise stated.