Privacy Policy

Last updated: June 2026

SoulMoi (“we”, “us”, “our”) is committed to protecting your personal data. This policy explains what data we collect, why we collect it, and how we use it, in compliance with the EU General Data Protection Regulation (GDPR — Regulation 2016/679).

1. Data Controller

The data controller for your personal information is SoulMoi, reachable at inbox@soulmoi.com. As we are not yet a formally registered legal entity, all data enquiries should be directed to the above email address.

2. Data We Collect

Data you provide directly: name, email address, shipping and billing address, phone number (if provided), and payment information (processed by Stripe — we do not store card details).

Data collected automatically: IP address, browser type, device type, pages visited, time spent on site, referral source, and cookie identifiers.

Data from third-party platforms: if you interact with our social media advertisements (Meta/Instagram, TikTok, Google), those platforms may share engagement data with us via their respective advertising pixels.

3. How We Use Your Data

To process and fulfil your orders and subscriptions
To send order confirmations, shipping updates, and customer service communications
To send marketing emails and SMS (only with your explicit consent)
To serve targeted advertising on Meta (Facebook/Instagram), Google, and TikTok
To analyse website usage and improve our service
To comply with legal and tax obligations

4. Legal Basis (GDPR Article 6)

Contract performance — processing orders and managing subscriptions
Legitimate interests — fraud prevention, website security, service improvement
Consent — marketing emails, advertising cookies, analytics cookies
Legal obligation — tax records, accounting, mandatory disclosures

5. Third-Party Data Processors

We share your data only with trusted processors necessary to run our business:

Shopify Inc. — e-commerce platform and order management (USA, EU-US Data Privacy Framework)
Stripe Inc. — payment processing (USA, EU-US Data Privacy Framework)
Klaviyo Inc. — email marketing and customer communications (USA, Standard Contractual Clauses)
Meta Platforms Inc. — advertising via Facebook and Instagram pixels (USA)
Google LLC — analytics (Google Analytics 4) and advertising (Google Ads) (USA)
TikTok Technology Limited — advertising via TikTok pixel (USA/Singapore)

All processors are bound by data processing agreements and applicable data protection law. We never sell your personal data.

6. International Data Transfers

Some of our processors are based outside the European Economic Area (EEA). Where this is the case, transfers are carried out under the EU-US Data Privacy Framework, Standard Contractual Clauses (SCCs), or other appropriate safeguards as required by GDPR Chapter V.

7. Your Rights Under GDPR

As an EU resident you have the right to:

Access — request a copy of your personal data
Rectification — correct inaccurate data
Erasure — request deletion of your data (“right to be forgotten”)
Restriction — limit how we process your data
Portability — receive your data in a machine-readable format
Objection — object to processing based on legitimate interests or for direct marketing
Withdraw consent — at any time, where processing is based on consent

To exercise any of these rights, email inbox@soulmoi.com. We will respond within 30 days. You also have the right to lodge a complaint with the Italian data protection authority: Garante per la protezione dei dati personali — www.garanteprivacy.it.

8. Data Retention

We retain order and customer data for up to 10 years where required by Italian tax and accounting law (D.P.R. 600/1973). Marketing data is retained until you unsubscribe or request deletion. Analytics data is retained for up to 26 months.

9. Cookies

We use cookies and similar tracking technologies. See our Cookie Policy for full details.

10. Contact

For any privacy-related questions or to exercise your rights: inbox@soulmoi.com