Privacy policy

Last updated: 14 October 2026

This policy explains what personal data we process when you visit www.amerin.eu or www.amerin.ro, buy amerin products, subscribe to our newsletter or contact us. It also explains why we use your data, how long we keep it, who we share it with and what your rights are. We apply it in line with Regulation (EU) 2016/679 (the “GDPR”), Romanian Law no. 190/2018 and Romanian Law no. 506/2004.

1. Who is responsible for your data

The data controller is BEAUTY & WELLNESS COUNTER S.R.L., registered office at Str. Ioan Budai-Deleanu nr. 5, Cugir, Alba County, 515600, Romania, Trade Register no. J2026049511004 (EUID ROONRC.J2026049511004), tax identification number (CUI) 55415560 (“amerin”, “we”, “us”).

For any question about your data, or to exercise your rights, write to hello@amerin.eu or to our registered office. Phone and WhatsApp: +40 775 059 364. We are not legally required to appoint a data protection officer (DPO); your requests are handled directly by the amerin team.

2. What data we process

• Identity and contact data: first and last name, email address, phone number, delivery and billing address.
• Order data: the products ordered, order value, delivery method, payment method and status, order history, returns and complaints.
• Payment data: card details are entered directly with the payment processor. We only see limited information such as the card type, the last digits and the result of the payment. For bank transfers, we see the payer's name and the account the payment came from. For refunds, we use the bank account (IBAN) you give us, for example through the return form.
• Account data: the email address used to sign in, saved addresses and order history.
• Marketing data: subscription to our newsletter or WhatsApp messages, the date of your consent, interaction with our emails (opens, clicks) and, if you choose to share it, your date of birth.
• Reviews: the display name, rating, text and photos you publish.
• Messages: the content of messages sent through the contact form, by email, phone or WhatsApp.
• Technical and browsing data: IP address, device and browser type, language, pages visited, products viewed, cart and checkout actions, and the source of your visit. Part of this is collected through cookies and similar technologies, described in our Cookie Policy.

We do not ask for health data. If you write to us about a skin concern or a reaction after using a product, we use that information only to reply and to handle your report. The legal basis is your explicit consent, which we ask for when needed (Article 9(2)(a) GDPR), or, for undesirable effects we must report, the cosmetovigilance obligations under Regulation (EC) No 1223/2009 on cosmetic products (Article 9(2)(i) GDPR).

3. Why we use your data and on what legal basis

Providing the data needed for an order is a condition for entering into the contract: without a name, address and contact details we cannot deliver. Marketing data is optional.

4. Advertising and ad measurement

Only if you accept marketing cookies, we use tools from Meta (Facebook, Instagram), Google (Google Ads, Google Merchant Center) and Microsoft (Microsoft Advertising) to show you relevant amerin ads and to learn which ads lead to visits and orders.

In that case, the store sends these providers events such as viewing a product, adding to cart or completing an order, together with the order value and the products ordered. To match an order with an ad you saw, it may also send your email address, phone number or address in pseudonymised (hashed) form. The platforms may use this data to build audience segments. This is a form of profiling whose only effect is on the ads you see.

Meta and Google are joint controllers with us for collecting data through their pixels, and independent controllers for their further processing. You can withdraw your consent at any time in the cookie settings.

5. Who we share your data with

We do not sell your personal data. We share it only as far as necessary, with:

• Shopify (Shopify International Limited, Ireland, and its affiliates): the platform that runs our store, including checkout, customer accounts, order and newsletter emails, WhatsApp marketing messages, forms and store analytics. If you pay with Shop Pay or use the Shop app, Shopify also processes your Shop account data on its own behalf.
• Payments: Shopify Payments, which processes card and digital wallet payments (for example Apple Pay, Google Pay, Shop Pay); our bank, for bank transfers and refunds; the courier company, for collecting cash on delivery. For payment checks and fraud prevention, the payment processor also acts as an independent controller.
• Courier companies that deliver your order or collect your return: name, address, phone number and, for cash on delivery, the amount to collect. The courier's name appears in the shipping email.
• Judge.me: our review system, which sends the review request email and publishes reviews.
• Google (Google Ireland Limited): Google Analytics, Google Ads and Google Merchant Center, only with your cookie consent. The website's accessibility app also loads the Google Translate service.
• Meta (Meta Platforms Ireland Limited): the Meta Pixel and the Conversions API, only with your consent. If you message us on WhatsApp or subscribe to our WhatsApp messages, messages pass through WhatsApp Ireland Limited.
• Microsoft (Microsoft Ireland Operations Limited): Microsoft Clarity, for statistics and recordings of browsing sessions, and Microsoft Advertising.
• Providers of apps installed in our store: the quantity discount app (Sales Surge Labs), which receives browsing data for statistics and uses the Sentry service to detect errors, and the accessibility app (Easy Apps Ecom).
• Our “Digital Growth Intelligence” analytics system, hosted on the bwcounter.com domain of the Beauty & Wellness Counter group, which receives browsing data only with your consent.
• Our own service providers: accounting, IT services and legal advice. They are bound by confidentiality.
• Public authorities: the Romanian tax authority (ANAF), including through the RO e-Factura system, the consumer protection authority (ANPC), courts or investigating bodies, when the law requires it.

Providers that process data on our behalf must do so under a contract concluded in line with Article 28 GDPR, only on our instructions and with appropriate security measures.

6. Transfers outside the European Economic Area

Some of the providers above (for example Shopify, Google, Meta, Microsoft and app providers) may also process data outside the EEA, in particular in Canada and the United States. Such transfers are only allowed with the safeguards set out in Chapter V of the GDPR:

• a European Commission adequacy decision, for example for Canada or for US companies certified under the EU-US Data Privacy Framework;
• or the standard contractual clauses approved by the European Commission.

For Shopify, Google, Meta and Microsoft, these safeguards are described in each provider's public data processing terms.

You can request a copy of the applicable safeguards at hello@amerin.eu.

7. How long we keep your data

At the end of the period, data is deleted or anonymised. If a dispute or an inspection is ongoing, we keep it until it is concluded.

8. Your rights

In relation to your data, you have the right:

• of access: to know what data we process and receive a copy;
• to rectification: to correct inaccurate data or complete incomplete data;
• to erasure, when the data is no longer needed, when you withdraw consent or when processing is unlawful, except for data we must keep by law;
• to restriction of processing, for example while we review an objection;
• to data portability: to receive the data you provided in a structured format, or ask us to send it to another controller;
• to object to processing based on legitimate interest; you can always object to direct marketing, without giving a reason;
• to withdraw consent at any time, without affecting processing carried out before;
• not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. The payment processor may automatically decline a transaction based on its own fraud prevention systems, as an independent controller, and automated risk signals may lead to an additional check of an order, as set out in our Payment Policy. If a decision based solely on automated processing affects you in this way, you have the right to obtain human intervention from us, to express your point of view and to contest the decision (Article 22 GDPR).

Write to us at hello@amerin.eu. We reply within one month. For complex requests, this can be extended by two further months, and we will tell you if so. If we cannot identify you from the data we hold, we may ask for additional information, strictly for verification.

You can unsubscribe from the newsletter through the link in every email, and from WhatsApp messages using the unsubscribe option in the message or by writing to us. You can change your cookie preferences at any time from our Cookie Policy.

You also have the right to lodge a complaint with the Romanian data protection authority, Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28-30, sector 1, Bucharest, 010336, www.dataprotection.ro, anspdcp@dataprotection.ro, or with the authority of the EU country where you live. Please contact us first, so we can try to resolve the matter directly.

9. Data security

We use encrypted connections (HTTPS), access limited to the people who need the data, secure authentication for administrator accounts and providers that meet recognised security standards, including PCI DSS for card payments. We do not store full card details.

10. Children

Our website and products are intended for people aged 18 and over. We do not knowingly collect data from children under 16. If you learn that a child has sent us data, contact us and we will delete it.

11. External websites and services

The skin assessment at myskin.bwcounter.com, social networks and other websites linked from ours have their own privacy policies. Please read them before using those services.

12. Changes

We may update this policy when the services we use or the law change. The date of the last update appears at the top of the page. If the changes are significant, we will also let you know by email or with a visible notice on the website.