Privacy policy

Privacy Policy

At THAT (PCOS) GIRL®, operated by BEAUTY MANIFEST S.L., we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use and protect your information when you access or use our website and services.

By using our website, you agree to the practices described in this Privacy Policy.

1. Data Controller

Company: BEAUTY MANIFEST S.L.
Brand: THAT (PCOS) GIRL®
Registered address:
Paseo de la Castellana 95, Floor 28
28046 Madrid, Spain
VAT: B13880422
Email: hello@thatpcosgirl.com

2. Personal Data We Collect

We may collect the following personal data:

  • Name and surname

  • Email address

  • Billing and shipping address

  • Phone number

  • Payment information (processed securely by third-party providers)

  • Order history

  • IP address and device information

  • Browsing behaviour on our website

  • Marketing preferences

We do not knowingly collect data from minors.

3. How We Use Your Data

Your personal data may be used to:

  • Process and deliver your orders

  • Manage your account and customer service requests

  • Send order confirmations and service communications

  • Send marketing communications if you have opted in

  • Improve our website, products and user experience

  • Comply with legal and tax obligations

  • Prevent fraud and ensure website security

4. Legal Basis for Processing

We process your data under the following legal bases:

  • Performance of a contract (order processing)

  • Legal obligations (tax, accounting, consumer law)

  • Legitimate interest (service improvement, fraud prevention)

  • Consent (marketing communications, newsletter)

You may withdraw your consent at any time.

5. Sharing Your Data

We may share your data with trusted third parties only when necessary, including:

  • Shopify (ecommerce platform)

  • Payment providers (Stripe, PayPal, etc.)

  • Shipping and logistics partners

  • Email marketing platforms (e.g. Klaviyo)

  • IT and hosting providers

  • Accounting and legal service providers

All third parties are required to comply with data protection laws.

6. International Data Transfers

Some service providers may process data outside the European Economic Area (EEA).
In such cases, appropriate safeguards are applied in accordance with GDPR.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy and to comply with legal obligations.

8. Your Rights

You have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion of your data

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent at any time

  • File a complaint with a data protection authority

To exercise your rights, contact us at hello@thatpcosgirl.com.

9. Cookies

We use cookies and similar technologies to improve your browsing experience, analyze website traffic and support marketing activities.

You can manage your cookie preferences through your browser settings or cookie banner.

10. Data Security

We apply appropriate technical and organizational measures to protect your personal data against loss, misuse, unauthorized access or disclosure.

11. Changes to This Policy

We reserve the right to update this Privacy Policy at any time.
Changes will be effective upon publication on this page.

12. Contact

If you have any questions about this Privacy Policy or how we process your data, contact us at:

📧 hello@thatpcosgirl.com