Privacy Policy

Last updated: 13 July 2026
Personal data processing information under Articles 13-14 of Regulation (EU) 2016/679 (GDPR) and the Italian Data Protection Authority's Guidelines on cookies and other tracking tools.

1. Data Controller

BeautyIQ.cloud
Registered office: Pordenone (PN), Italy
VAT No.: IT01374730933

Email: info@beautyiq.cloud

2. Data collected

2.1 Voluntarily provided data

email address provided in contact or support requests

2.2 Navigation data

IP address
access logs and technical data from the browser and device
minimal security data necessary to prevent abuse and anomalous requests

2.3 Cookies and similar technologies

technical cookies necessary for the operation of the site
equivalent tools such as localStorage for storing local user preferences

BeautyIQ is a PWA that stores on the user's device data such as personal notes, favourites, client cards and local preferences. The Controller has no access to such content, which remains stored exclusively in the user's browser unless otherwise explicitly integrated in the future.

3. Purpose of processing

Personal data is processed for:

managing access to the service
customer support and responses to commercial or operational enquiries
service communications related to the management of access
service security and abuse prevention
administrative, tax and accounting compliance where applicable

3.1 Nature of data provision

data sent for support or contact requests is necessary to be able to respond

4. Legal basis for processing

Processing is based on:

Art. 6(1)(b) GDPR — performance of a contract or pre-contractual measures requested by the data subject
Art. 6(1)(c) GDPR — compliance with legal obligations
Art. 6(1)(f) GDPR — legitimate interest of the Controller in the security and proper functioning of the service

5. Processing methods and security

Processing is carried out using IT and telematic tools, in compliance with the principles of lawfulness, fairness, transparency and data minimisation.

Appropriate technical and organisational measures are adopted, including:

HTTPS connections
CSRF protection on sensitive requests
server-side input validation and rate limiting mechanisms

6. Data retention

contractual, administrative or billing data: for the period required by applicable law and in any case up to 10 years where necessary
contact and support data: for the period necessary to manage the request and subsequent compliance
technical logs: up to 90 days, unless further retention is required for security needs or legal obligations

7. Recipients of data

Data may be disclosed to:

Aruba S.p.A. or other infrastructure providers for hosting and servers
the Controller's tax, accounting or legal consultants, to the extent necessary
affiliate networks (e.g. Awin, Amazon EU) which, when the user follows a purchase link, may set cookies on the partner's domain to attribute any purchases
authorities and public bodies when required by law

8. Data transfers

Data may be processed on infrastructure located within the European Union. Any transfers to non-EU countries by third-party providers are carried out on the basis of the safeguards provided by applicable legislation.

9. Data subject rights

The data subject may exercise the rights provided for in Articles 15-22 of the GDPR, including:

access
rectification
erasure
restriction of processing
data portability
objection
lodging a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali)

To exercise these rights: info@beautyiq.cloud

10. Affiliate links

BeautyIQ contains affiliate links. When the user clicks on certain purchase links (e.g. "View", "Buy") and makes a purchase on the partner's website, BeautyIQ may receive a small commission, at no additional cost to the user. The commission does not influence the colour comparisons, which are computed objectively using the CIEDE2000 colour-difference metric.

Affiliate links are managed through networks such as Awin and the Amazon EU Associates Programme. By clicking these links, the partner may set cookies on its own domain to attribute the purchase; the related processing is carried out in accordance with the respective partners' privacy policies. BeautyIQ does not receive payment data or purchase details, only aggregate reports on the commissions earned.

11. Pinterest API

BeautyIQ uses the Pinterest API solely to publish its own editorial content (organic Pins) to its own Pinterest business account, in order to distribute BeautyIQ's content and drive traffic to the website. BeautyIQ is not endorsed by, sponsored by, or affiliated with Pinterest.

BeautyIQ does not request, collect, or store any Pinterest account data of users, nor any Pinterest-derived data about visitors: users do not connect their Pinterest account to BeautyIQ. The API access credentials (tokens) belong solely to the operator's own business account, are stored securely, and can be revoked and deleted at any time; upon disconnection, the associated tokens are deleted.

BeautyIQ does not sell, resell, or redistribute Pinterest content or Pinterest-derived data to any third party. Use of the API complies with Pinterest's Developer Guidelines and Terms.