Privacy and cookie policy

Last updated: 12 ottobre 2026

This policy, issued pursuant to Regulation (EU) 2016/679 ("GDPR"), describes how we process the personal data of users of the Medicube Europe website (the "Site").

1. Data controller

BEAUTY & BEAUTY S.R.L., VAT and tax code 01026380459, Via Marina Vecchia 4/29, 54100 Massa (MS), Italia. Email: info@medicube-europe.com.

2. What data we process

• Order and shipping data: name, email, telephone, address, order contents.
• Account data (if you create one): name, email and password (stored in encrypted form).
• Support requests: the data you send us through the Contact form (name, email, telephone, message).
• Technical browsing data strictly necessary for the operation of the Site (e.g. session identifier).

Complete payment card data is not collected or stored by us: it is processed directly by the payment provider Viva.com on its secure pages.

3. Purposes and legal bases

• Managing orders, payments, shipping and support — performance of the contract (art. 6.1.b).
• Complying with tax and accounting obligations — legal obligation (art. 6.1.c).
• Managing your account and responding to requests — performance of the contract / legitimate interest (art. 6.1.b/f).
• Preventing fraud and ensuring the security of the Site — legitimate interest (art. 6.1.f).

4. Who we share data with

The data may be processed, solely for the purposes indicated above, by parties that provide services to the Controller, including: the payment provider (Viva.com), couriers and logistics partners, and the Site's hosting provider. These parties act as data processors or independent controllers according to their respective roles. We do not sell personal data to third parties.

5. Transfers outside the EU

Since logistics may also take place from Hong Kong, some shipping data (e.g. recipient and address) may be processed outside the European Economic Area, with the appropriate safeguards provided for by Articles 44 et seq. of the GDPR.

6. Retention

We retain order data for as long as necessary to manage the purchase and for the tax and accounting obligations required by law (generally 10 years). Account data is retained for as long as the account remains active or until you request its deletion.

7. Your rights

You may exercise at any time the rights of access, rectification, erasure, restriction, portability and objection, as well as withdraw any consent given, by writing to info@medicube-europe.com. You also have the right to lodge a complaint with the Garante per la protezione dei dati personali (garanteprivacy.it).

8. Cookies and similar technologies

The Site uses exclusively cookies and storage technologies that are technical and necessary, which do not require consent. We do not use profiling or marketing cookies.

You can manage or delete cookies and site data from your browser settings; disabling technical cookies may impair the operation of the Site.

9. Amendments

We may update this policy. The version published on the Site is the one in force; we invite you to review it periodically.

10. Contacts

For any request relating to personal data: info@medicube-europe.com or the Contacts page.