PRIVACY POLICY - Clothing Store

1. INTRODUCTION
Welcome to Mystique Beautique. We operate the website mystiquebeautique.com (the "Site"), an e-commerce beauty boutique offering skincare, cosmetics, and personal care products. This Privacy Policy explains who we are, what personal information we collect, how we use it, and your rights with respect to that information.
This policy applies to all visitors, customers, and users who interact with our Site, whether you are browsing, making a purchase, signing up for our email list, creating an account, or contacting us through a form.
Mystique Beautique is committed to protecting your privacy and handling your personal information with transparency, care, and respect. We collect only the data necessary to provide you with a safe, seamless, and personalized shopping experience — and we will never sell your personal information to third parties.
By using our Site, you acknowledge that you have read and understood this Privacy Policy. If you have any questions or concerns, please contact us using the information provided in Section 16.

2. INFORMATION WE COLLECT
We collect information in three primary ways: directly from you when you provide it, automatically as you interact with our Site, and from trusted third parties who assist us in operating our business.
(a) Personal Information You Provide
We collect personal information that you voluntarily provide to us through various interactions on the Site:
● Account Registration: When you create an account, we collect your name, email address, and a password (stored in encrypted form).
● Purchase Information: When you place an order, we collect your billing name, shipping address, phone number, and email address in order to process and fulfill your order.
● Payment Information: Payment transactions are processed exclusively by third-party payment processors (such as Stripe or PayPal). We do not collect, store, or have access to your full credit card number, CVV, or other sensitive financial data. These processors are PCI-DSS compliant and maintain their own privacy and security policies.
● Contact Form Submissions: When you contact us through our website contact form, we collect your name, email address, and the contents of your message in order to respond to your inquiry.
● Email Marketing Sign-Up: If you voluntarily subscribe to our email list, we collect your name and email address. Subscription is always optional and based on your explicit consent.
● Reviews and User-Generated Content: If you submit a product review or other user-generated content on our Site, we collect the information included in that submission, such as your display name, rating, and written review.
(b) Information Collected Automatically
When you visit our Site, certain information is collected automatically through standard web technologies and analytics tools. This may include:
● Your IP address, browser type and version, device type, and operating system.
● The pages you visit on our Site, time spent on each page, links clicked, and referring URLs (the page you came from before arriving at our Site).
● Cookie and tracking data, including session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a set period). See Section 5 for full details on our use of cookies.
(c) Information from Third Parties
We may receive limited information about you from trusted third-party services connected to our Site:
● Google OAuth / Google Sign-In: If you choose to sign in to your account using Google Sign-In, we receive your Google account email address, display name, and profile picture from Google. This information is used solely for the purpose of creating and authenticating your account on mystiquebeautique.com. It is not used for advertising or profiling, and it is not shared with any third parties beyond what is strictly necessary for authentication. Please see Section 7 for our full Google API Services disclosure.
● Payment Processors: Payment processors such as Stripe or PayPal may share limited transaction confirmation data with us (such as a transaction ID or payment status) to facilitate order fulfillment. We do not receive your full card details from these processors.
● Analytics Providers: We may receive aggregated or anonymized reporting data from analytics platforms such as Google Analytics to help us understand how visitors use our Site.

3. HOW WE USE YOUR INFORMATION
We use the personal information we collect for the following purposes:
● Order Processing and Fulfillment: To process your purchases, arrange shipping, and confirm delivery of your orders.
● Order Communications: To send you order confirmations, shipping notifications, tracking updates, and receipts via email.
● Customer Support: To respond to your inquiries, resolve disputes, and provide assistance when you contact us through our contact form or by email.
● Email Marketing: To send promotional emails, product announcements, and special offers — but only when you have given us explicit consent to do so. You may opt out at any time. See Section 8 for details.
● Personalization: To personalize your shopping experience by tailoring product recommendations, offers, and site content based on your preferences and browsing history.
● Site Improvement: To analyze how visitors use our Site so that we can improve its functionality, design, and performance.
● Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, unauthorized access, and other illegal activity that may harm you or our business.
● Legal Compliance: To comply with applicable laws, regulations, tax obligations, and court orders.
● Account Authentication via Google OAuth: To verify your identity and enable secure login when you choose to use Google Sign-In. The email address, name, and profile picture received from Google are used only for this authentication purpose.

4. LEGAL BASIS FOR PROCESSING
Where applicable law requires us to identify a legal basis for processing your personal information (including under the General Data Protection Regulation, or GDPR, and similar laws), we rely on the following legal bases:
● Performance of a Contract: Processing your personal information is necessary to fulfill the purchase contract between you and Mystique Beautique — including processing your order, arranging shipping, and sending transactional communications.
● Legitimate Interests: We process certain data based on our legitimate business interests, including fraud prevention, maintaining the security of our Site, and improving our products and services. We conduct these activities in a manner that does not override your fundamental rights and interests.
● Consent: Where we rely on your consent — such as for sending marketing emails or placing optional cookies on your device — you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of any processing carried out prior to your withdrawal.
● Legal Obligation: We may process and retain certain personal information as required by applicable law, including tax laws and financial record-keeping regulations.

5. COOKIES AND TRACKING TECHNOLOGIES
Cookies are small text files placed on your browser or device when you visit a website. They help websites remember your preferences, maintain your session, and gather information about how the site is used.
We use the following types of cookies and tracking technologies on our Site:
● Strictly Necessary Cookies: These cookies are essential for the Site to function. They enable core features such as navigating pages and accessing secure areas. Without these cookies, the Site cannot operate properly.
● Functional Cookies: These cookies remember your preferences (such as your login state and language settings) and allow us to provide a more personalized experience. WooCommerce uses functional cookies to maintain your shopping cart contents, checkout session, and logged-in status.
● Analytics and Performance Cookies: These cookies collect information about how visitors use our Site, such as which pages are visited most often and whether users encounter error messages. This data is used in aggregate to improve the Site's performance. We may use Google Analytics or similar tools for this purpose. Google Analytics sets its own cookies to track usage data.