Privacy Policy

About this policy

Soléna is a skincare brand. This policy explains how we handle information when you use our website, create an account, place an order or contact us.

For privacy questions or requests, email support@mysolena.com, call +961 78 760 514 or use our Contact page.

Information we collect

• Account information: your name, email address, phone number, profile details, optional date of birth, marketing preference and records of the policies you accepted.
• Order information: the products you choose, contact and delivery details, order notes, prices, discounts, payment status and order history. We do not store a complete payment-card number.
• Contact requests: your name, email address, subject, message and any file you choose to attach.
• Features you choose to use: saved Favorites, submitted reviews and newsletter requests, including confirmation and unsubscribe records. Published reviews may display your submitted name, rating and comment.
• Technical information: request and IP information used to operate and protect the website. If you accept optional analytics, we also measure page visits and product, cart and checkout activity, with information such as device type, referral source and a session identifier. Our custom activity records may be linked to your account when you are signed in.

Fields marked as required are needed for the relevant service. Without them, we may be unable to create your account, process your order or answer your message. A contact attachment, newsletter signup and marketing permission are optional.

How we use information

We use information to provide account and shopping features, manage orders and payments, arrange delivery, answer requests and send service messages such as order updates. We also use necessary technical information to secure the website and prevent misuse.

Optional analytics helps us understand how the website is used. Newsletter and marketing choices are separate from analytics permission and acceptance of purchase terms. Newsletter requests require email confirmation before the subscription becomes active. Declining optional analytics or marketing does not prevent you from shopping or receiving messages needed for your order or request.

If you separately accept Meta advertising, we use Meta Pixel to measure advertising and help show relevant ads on Facebook and Instagram. Analytics permission and newsletter or email marketing permission do not enable Meta Pixel.

Service providers and sharing

We use providers to host the website, manage account access and records, store files, send email, measure permitted site activity, process payments and arrange delivery. These include Google Firebase, Supabase, Vercel, Whish and iCarry. When enabled, Upstash processes request and IP information to help limit abuse. Providers receive information needed for the service they perform. Some may store or process information outside Lebanon.

Email providers handle order and service messages. Support notifications to our team include your contact details, subject, message and any attachment name; they do not include the attached file or its access link.

When configured, our team also receives notifications through Telegram. These may include order and delivery details, contact details and messages, confirmed newsletter signup details, and a time-limited link to a contact attachment. We store contact attachments privately, but someone with a valid access link can open the file while that link works. Link expiry does not delete the stored file.

We may also disclose information when required by law.

With your Meta advertising permission, Meta receives public page visit events, page URLs, referral information, browser and device information, IP address and advertising cookie identifiers. Meta may associate this information with your Meta account and process it outside Lebanon under its Privacy Policy. This integration sends PageView events only; it does not send your account details, contact messages, cart contents or purchase events, and automatic event collection and matching are disabled in our installation.

Browser storage and analytics

Cookies and browser storage support requested features such as your cart, guest Favorites, sign-in and checkout recovery. Your separate analytics and Meta advertising choices are remembered on this browser for up to six months. These necessary functions remain available whether you accept or reject optional analytics.

Optional analytics stays off until you accept it. It includes Vercel page analytics and our custom shopping activity records stored with Firebase. Use Privacy settings here or in the footer to accept, reject or change this choice.

Turning optional analytics off stops subsequent optional tracking and removes our optional activity session identifiers from this browser. It does not delete records already collected or change your newsletter preference. Necessary security and order processing continue.

Meta advertising stays off until you explicitly accept it. We do not load Meta Pixel, contact Meta for tracking or include a tracking image for browsers without JavaScript before this permission. PageView tracking covers eligible public pages and navigation; account, Admin, authentication, checkout, order and newsletter confirmation or unsubscribe pages are excluded. Meta may use advertising cookies such as _fbp and _fbc. Turn off Meta advertising in Privacy settings to stop subsequent Meta events and remove these first-party cookies from this browser. Requests already sent cannot be recalled, and withdrawal does not delete information already received by Meta or cookies on Meta’s own domains.

You can also manage cookies and storage through your browser. Clearing or blocking this data may remove locally saved items, sign you out or affect checkout recovery. Clearing this browser data does not delete an order or other information already stored with us.

Retention and security

How long information is kept depends on the record and its purpose, including an active account, an outstanding order or support request, legal recordkeeping requirements and unresolved disputes. There is no single retention period for every category. You can contact us to ask about a particular record or request deletion.

Expiry of a confirmation or attachment link does not itself delete the associated record or file. After a newsletter opt-out, we retain unsubscribe information to help prevent further newsletter sends.

We use access restrictions and other security controls to protect information. No website or online service can guarantee complete security.

Your choices and requests

You can review and edit the available profile details in your account after signing in. For access to your information, other corrections or deletion requests, contact us using the details above. You may also ask about or object to how information is used, where applicable. Tell us which account, order or request is concerned; do not send your password or full payment-card details.

We may need to verify your identity before acting on a request. Deletion may be limited where records must be kept for legal obligations or unresolved order matters. Contacting us requests a review; it does not automatically delete your account or records.

To stop newsletters, use the unsubscribe link in a newsletter and complete the confirmation step shown. If you cannot use that link, contact us for help with your newsletter or marketing preference. Unsubscribing does not stop necessary order and service messages or change your analytics or Meta advertising choices.

Updates

We update this policy when our data handling changes. The date above identifies this version.