top of page

Privacy Policy

Effective date: [07 September 2026]
Last updated: [07 September 2026]

​

1. Who we are

Miomosa is a trading name of Borbel Elena Cerasela pfa, a company registered in Romania under registration number 48114441, tax identification number 48114441, with its registered office at Zaharia Boui 17, Sibiu, Romania.

For the purposes of the General Data Protection Regulation (“GDPR”), Borbel Elena Cerasela pfa is the controller of the personal data described in this Privacy Policy.

Contact details:

  • Email: miomosaofficial@gmail.com

  • Telephone: +40 (0) 749 67 60 03

  • Postal address: Zaharia Boui 17, Sibiu, Romania

  • Data Protection Officer: Elena Borbel

  • In this policy, “Miomosa”, “we”, “us” and “our” refer to Borbel Elena Cerasela pfa.

​

2. Scope of this policy

This Privacy Policy explains how we collect, use, disclose and protect personal data when you:

  • visit www.miomosa.com;

  • create or use a customer account;

  • purchase, return or enquire about a product;

  • join our loyalty programme;

  • subscribe to marketing communications;

  • register for an event or promotion;

  • contact our customer service team;

  • interact with us through social media; or

  • communicate or do business with us as a salon, retailer, distributor, supplier or other business partner.

 

3. Personal data we collect

Depending on how you interact with Miomosa, we may collect the following information.

​

Identification and contact information

This may include your name, email address, telephone number, billing address, delivery address and account username.

​

Order and transaction information

This may include the products you order, order value, delivery method, payment status, transaction references, discounts, returns, refunds and communications concerning your order.

Payments are processed by the payment providers displayed during checkout. Miomosa does not normally receive or store your complete payment-card details.

​

Account and loyalty information

If you create an account or join our loyalty programme, we may process your account information, purchase history, points, rewards, preferences and programme activity.

​

Communications

We collect the information you provide when you contact us, including through our contact form, email, telephone, social media or customer-support channels.

Please do not send medical information or other sensitive personal data through our general contact form unless it is necessary for us to address a specific product-safety question.

​

Marketing information

This includes your newsletter subscription, marketing preferences, consent records and information about how you interact with marketing messages.

​

Website and device information

When you visit our website, we may collect your IP address, browser and device type, approximate location, website activity, cookie identifiers, referral source and technical or security information.

Non-essential analytics and advertising information will only be collected where required consent has been obtained.

​

Returns, complaints and product-safety information

If you request a return, submit a complaint or report a product concern, we may process your order details, supporting photographs, correspondence and other information needed to investigate and resolve the matter.

​

Business-to-business information

For salons, retailers, distributors, suppliers and other business partners, we may process professional contact information such as your name, position, employer, business address, professional email address, telephone number, VAT information, order history and commercial correspondence.

​

4. How we obtain personal data

We obtain personal data:

  • directly from you;

  • automatically when you use our website;

  • from payment, delivery and technology providers;

  • from business partners or referrals;

  • from social-media platforms when you interact with our pages or advertising; and

  • from publicly available professional sources for relevant B2B communications, where permitted by law.

  • ​

5. Why we use your data and our legal bases

We process personal data for the following purposes:

Purpose Principal legal basis

Processing and delivering orders, accepting payments and managing returnsPerformance of a contract or steps requested before entering a contract

Creating and managing customer accounts and loyalty membershipPerformance of a contract and, where applicable, our legitimate interest in administering customer relationships

Answering product, order and customer-service enquiriesPerformance of a contract, pre-contractual steps or our legitimate interest in responding to enquiries

Issuing invoices and complying with accounting, tax, consumer-protection and product-safety obligationsCompliance with a legal obligation

Sending newsletters and promotional communicationsConsent, or another basis permitted by applicable direct-marketing law

Operating analytics, advertising or other non-essential cookiesConsent

Protecting our website, customers and business against fraud, misuse and security threatsOur legitimate interests in maintaining security and preventing fraud

Improving our products, website and customer experienceOur legitimate interests in improving our services, using proportionate data wherever possible

Establishing, exercising or defending legal claimsOur legitimate interests and, where applicable, compliance with legal obligations

Managing relationships with salons, retailers, distributors, suppliers and other business partnersPerformance of a contract or our legitimate interests in developing and managing business relationships

Sending relevant B2B communicationsOur legitimate interests, subject to applicable electronic-marketing rules and your right to object

Where we rely on legitimate interests, we consider whether the processing is necessary, proportionate and compatible with your rights and reasonable expectations.

Where we rely on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that took place before consent was withdrawn.

​

6. Information required from you

Certain information is necessary to process an order, deliver products, issue an invoice or respond to a contractual request. If you do not provide the required information, we may be unable to complete your order or provide the requested service.

Optional fields and optional marketing consent will be identified separately.

​

7. Marketing communications

If you subscribe to our newsletter or otherwise agree to receive marketing, we may send you information about Miomosa products, launches, events, offers and collaborations.

You can unsubscribe at any time by:

We may retain a minimal suppression record after you unsubscribe so that we can respect your preference.

We will not treat consent to marketing as a condition of purchasing a product.

​

8. Cookies and similar technologies

Our website uses cookies and similar technologies for functions such as:

  • maintaining website security;

  • operating the shopping cart and checkout;

  • remembering account or language preferences;

  • measuring website use; and

  • supporting advertising and campaign measurement.

Essential cookies may be used where necessary for the website to function. Analytics, advertising and other non-essential cookies will be activated only after consent where required by law.

You can accept, reject or change your cookie choices through the website. Further information about individual cookies, providers and retention periods is available in our [Cookie Policy].

Withdrawing consent does not remove cookies already stored on your device. You can remove these through your browser settings.

​

9. Who receives your data

We disclose personal data only when necessary and may share it with:

  • Wix.com Ltd. and its affiliates, which provide our website and e-commerce platform;

  • payment-processing and fraud-prevention providers;

  • delivery, courier, logistics and fulfilment companies;

  • email, customer-relationship and customer-support providers;

  • analytics and advertising providers, where the required consent has been obtained;

  • accountants, auditors, insurers and professional advisers;

  • IT, website-security and data-storage providers;

  • salons, distributors or commercial partners where this is necessary to fulfil your request; and

  • courts, regulators, police or other public authorities where disclosure is required by law.

Our service providers are permitted to process personal data only for the agreed purposes and must apply appropriate protection measures.

We do not sell personal data.

Current principal providers:

  • Website and e-commerce platform: Wix.com Ltd.

  • Payment provider(s): Stripe

  • Delivery provider(s): Romania Post, TCE

  • Email marketing provider: Wix.com Ltd.

  • Analytics provider(s): Wix.com Ltd., Google

  • Advertising platform(s): Wix.com Ltd.

​

10. International transfers

Some service providers, including Wix and its subprocessors, may process personal data outside the European Economic Area.

When personal data is transferred to a country that has not been recognised as providing an adequate level of protection, we require an approved transfer mechanism, such as the European Commission’s Standard Contractual Clauses, together with additional safeguards where appropriate.

You may contact us for further information about the safeguards used for relevant international transfers.

​

11. How long we retain personal data

We retain personal data only for as long as necessary for the relevant purpose and to meet legal, accounting, tax, consumer-protection and dispute-resolution requirements.

Our intended retention periods are:

  • Order, invoice and accounting information: for the period required by Romanian accounting and tax law.

  • Customer-account information: while the account remains active and for 30 days following closure or inactivity.

  • Loyalty-programme information: while membership remains active and for 30 days afterwards.

  • Customer-service enquiries: up to 30 days after the matter is resolved.

  • Return, complaint and product-safety records: for the relevant statutory or legal-claims period.

  • Newsletter information: until you unsubscribe or we discontinue the newsletter, followed by retention of a minimal suppression record.

  • B2B relationship information: for the duration of the relationship and up to 1 year following the last meaningful interaction.

  • Cookie and analytics information: for the periods stated in our Cookie Policy and cookie settings tool.

  • Security logs: up to 30 days, unless a longer period is needed to investigate an incident.

We may retain information for longer where required by law or where necessary to establish, exercise or defend a legal claim. When information is no longer required, it will be deleted or anonymised.

​

12. Data security

We use proportionate technical and organisational safeguards intended to protect personal data against unauthorised access, alteration, loss, disclosure or destruction.

No online service can guarantee absolute security. If you believe your account or personal information may have been compromised, please contact us promptly at miomosaofficial@gmail.com.

​

13. Your data-protection rights

Subject to the conditions and exceptions established by law, you may have the right to:

  • request access to your personal data;

  • request correction of inaccurate or incomplete data;

  • request deletion of your data;

  • request restriction of processing;

  • receive certain data in a structured, commonly used and machine-readable format;

  • object to processing based on legitimate interests;

  • object at any time to direct marketing;

  • withdraw consent at any time; and

  • lodge a complaint with a data-protection supervisory authority.

To exercise your rights, contact miomosaofficial@gmail.com and describe your request. We may request reasonable information to confirm your identity. Exercising your rights is normally free of charge, although the law permits a reasonable fee or refusal in certain cases involving manifestly unfounded or excessive requests.

You may lodge a complaint with the Romanian supervisory authority:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
28–30 Gheorghe Magheru Boulevard
District 1, 010336 Bucharest, Romania
Email: anspdcp@dataprotection.ro
Website: www.dataprotection.ro

You may also contact the competent supervisory authority in the EU or EEA country where you live or work, or where you believe an infringement occurred.

​

14. Automated decision-making

Miomosa does not currently make decisions based solely on automated processing that produce legal or similarly significant effects for customers.

Payment and fraud-prevention providers may perform their own automated security checks under their respective privacy policies.

​

15. Children’s privacy

Our website and products are intended for adults and are not directed at children. We do not knowingly collect personal data from children without the involvement of a parent or legal guardian where this is required by law.

If you believe a child has provided personal information to us improperly, please contact us so that we can investigate and take appropriate action.

​

16. External websites and social media

Our website may contain links to external websites and social-media platforms. Those organisations determine their own processing activities, and their privacy policies apply when you use their services. We encourage you to review those policies before providing personal data.

​

17. Changes to this policy

We may update this Privacy Policy to reflect changes to our website, services, providers or legal obligations. The current version will be published on this page with a revised “Last updated” date.

If a change materially affects how we use personal data, we will provide an additional notice where required.

​

18. Contact us

Questions, requests or concerns about this Privacy Policy or our handling of personal data can be sent to:

Borbel Elena Cerasela pfa
Trading as Miomosa
Zaharia Boui 17, Sibiu, Romania
Email: miomosaofficial@gmail.com

Telephone: +40 (0) 749 67 60 03

bottom of page