​

1. Data Controller

For the purposes of applicable data protection laws, including the General Data Protection Regulation (GDPR), Rare2Supply is the controller of your personal data.

Business Name: Rare2Supply

Email: info@rare2supply.com

If you have any questions regarding this Privacy Policy or your personal data, you may contact us using the email address above.

 

2. Personal Data We Collect

We collect personal data that you voluntarily provide as well as certain information collected automatically when you use our website.

 

Information You Provide

When you place an order, create an account, subscribe to our newsletter, contact customer support, or communicate with us, we may collect:

• Full name

• Email address

• Telephone number

• Billing address

• Shipping address

• Order details and purchase history

• Communications with customer support

• Marketing preferences

 

Payment Information

Payments are processed securely by our third-party payment providers, including PayPal and debit/credit card processors.

Rare2Supply does not store or have access to your complete payment card information. Payment information is collected and processed directly by our payment processors in accordance with their own privacy and security standards.

 

Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address

• Browser type and version

• Device type

• Operating system

• Date and time of access

• Pages viewed

• Products viewed

• Referring website

• Website usage data

• Cookie identifiers

 

3. Lawful Bases for Processing Personal Data

Where the GDPR applies, we process your personal data on one or more of the following legal bases:

• Performance of a contract to process and deliver your order.

• Compliance with legal obligations, including tax, accounting, and fraud prevention requirements.

• Legitimate interests, such as improving our website, customer service, business operations, and protecting against fraud.

• Your consent, where required, including for marketing communications and non-essential cookies.

You may withdraw your consent at any time where processing is based on consent.

 

4. How We Use Your Personal Data

We use your personal data to:

• Process and fulfill orders.

• Arrange shipment of products through our dropshipping suppliers.

• Process payments securely.

• Communicate regarding orders and deliveries.

• Respond to customer inquiries.

• Manage customer accounts.

• Improve our website and services.

• Detect and prevent fraud.

• Comply with applicable legal obligations.

• Send promotional communications where you have provided consent or where otherwise permitted by law.

 

5. Cookies and Similar Technologies

Our website uses cookies and similar tracking technologies to improve functionality, enhance user experience, analyze website performance, and support our marketing efforts.

Cookies may include:

• Essential cookies necessary for website operation.

• Functional cookies that remember your preferences.

• Analytics cookies that help us understand website usage.

• Marketing cookies used to measure advertising effectiveness and personalize content, where applicable.

Where required by law, we will obtain your consent before placing non-essential cookies on your device. You may manage or withdraw your cookie preferences at any time through your browser settings or our cookie consent tool.

 

6. Third-Party Service Providers

We work with trusted third-party service providers who process personal data on our behalf or independently to provide their services.

These may include:

• Dropshipping suppliers responsible for order fulfillment.

• Shipping and logistics providers.

• PayPal.

• Debit and credit card payment processors.

• Website hosting providers.

• Website analytics providers.

• Email marketing platforms.

• Customer service providers.

These providers receive only the information necessary to perform their services and are contractually or legally obligated to protect your personal data.

 

7. Sharing Your Personal Data

We do not sell, rent, or trade your personal information.

We may disclose your personal data only:

• To trusted service providers assisting in operating our business.

• To suppliers fulfilling customer orders.

• To payment processors handling secure transactions.

• To shipping companies delivering purchases.

• To legal authorities when required by applicable law.

• To protect our legal rights, customers, or business.

 

8. International Data Transfers

Because Rare2Supply operates online and uses international service providers, your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection.

Where personal data is transferred internationally, we implement appropriate safeguards as required under applicable law, including the GDPR where applicable. These safeguards may include the use of Standard Contractual Clauses (SCCs), adequacy decisions, or other legally recognized transfer mechanisms.

 

9. Data Retention

We retain personal data only for as long as necessary to:

• Fulfill customer orders.

• Provide customer support.

• Maintain business records.

• Meet accounting and tax obligations.

• Prevent fraud.

• Resolve disputes.

• Enforce our legal agreements.

• Comply with applicable laws and regulations.

When personal data is no longer required, it will be securely deleted, anonymized, or otherwise disposed of in accordance with applicable legal requirements.

 

10. Data Security

We implement appropriate technical, administrative, and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, misuse, or destruction.

While we strive to protect your information, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

 

11. Your Rights Under the GDPR

Where the GDPR applies, you may have the following rights regarding your personal data:

• The right to access your personal data.

• The right to correct inaccurate or incomplete information.

• The right to request deletion of your personal data ("Right to Erasure").

• The right to restrict processing.

• The right to object to certain processing activities.

• The right to data portability.

• The right to withdraw consent at any time where processing is based on consent.

• The right not to be subject to decisions based solely on automated processing where applicable.

To exercise any of these rights, please contact us at:

Email: info@rare2supply.com

We may request information to verify your identity before responding to your request.

 

12. Marketing Communications

If you subscribe to our mailing list, we may send promotional emails regarding:

• New products

• Special offers

• Discounts

• Beauty and hair care information

• Company updates

You may unsubscribe at any time by clicking the unsubscribe link in any marketing email or by contacting us at info@rare2supply.com.

 

13. Children's Privacy

Rare2Supply does not knowingly collect personal data from children under the age of 13 or any higher minimum age required by applicable law. If we become aware that such information has been collected without appropriate authorization, we will promptly delete it.

 

14. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those external websites. We encourage users to review the privacy policies of every website they visit.

 

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, technology, legal obligations, or regulatory requirements.

When we make material changes, we will update the "Last Updated" date at the top of this Privacy Policy. Continued use of our website after changes become effective constitutes acceptance of the revised Privacy Policy.

 

16. Right to Lodge a Complaint

If you believe that Rare2Supply has not handled your personal data in accordance with applicable data protection laws, you have the right to lodge a complaint with the data protection or supervisory authority in your country of residence, your place of work, or the location where the alleged infringement occurred.

We encourage you to contact us first at info@rare2supply.com so that we may have the opportunity to address your concerns directly.

 

17. Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise your privacy rights, please contact us:

Rare2Supply

Email: info@rare2supply.com

We are committed to responding to privacy-related inquiries within the timeframes required by applicable law.