Privacy Policy

1. Overview & Data Controller Identification

This Privacy Policy outlines how MPLUS COSMETICS SRL ("MPlus Cosmetics", "we", "us", or "our") collects, processes, and protects personal and commercial data gathered through our corporate website (www.amaybeauty.com). As a premier Italian OEM and private label cosmetics manufacturer based in Milan, we adhere strictly to the European Union General Data Protection Regulation (EU GDPR 2016/679) and applicable Italian data protection statutes (Legislative Decree 196/03).

Registered Headquarters & Processing Location:
MPLUS COSMETICS SRL
Via Carlo Cattaneo, 21/23, 20065 Inzago (Milan), Italy
Telephone: +39 02 8719 6950 | Email: [email protected]

2. Scope of Data Collection

2.1 Technical & Navigation Data

During standard operational sessions, our web hosting infrastructure automatically captures routine technical telemetry required for network protocols. This includes anonymized IP addresses, browser specifications, domain routing metrics, access timestamps, and HTTP response codes. These technical parameters are analyzed solely to verify system integrity, maintain server performance, and optimize digital accessibility for our international trade clients. Server log entries are automatically purged after seven days unless mandated for cybersecurity audits.

2.2 B2B Communication & Inquiry Data

When overseas cosmetic brand owners, procurement officers, or technical managers initiate contact with MPlus Cosmetics regarding contract manufacturing, formulation R&D, or white-label solutions, we store essential professional details. This data includes corporate email addresses, representative names, company affiliation, contact numbers, and specific project parameters provided voluntarily during communication.

2.3 Cookies & Analytical Technologies

Our portal utilizes HTTP cookies to streamline user experience and evaluate global website performance. Technical session cookies enable smooth portal navigation, while analytical cookies deliver aggregated, non-identifiable usage statistics. Users retain complete control over cookie preferences through browser settings or our dedicated cookie management interface.

3. Purpose & Legal Basis of Processing

MPlus Cosmetics processes corporate and personal information strictly in accordance with lawful legal bases defined under Article 6 of the GDPR:

• Contract Performance & Pre-Contractual Engagement: Processing technical requests, preparing formulation samples, issuing OEM quotations, and managing supply agreements.
• Legitimate Commercial Interest: Enhancing manufacturing communication, ensuring IT network security, and facilitating business development with verified beauty industry buyers.
• Legal Compliance: Fulfilling tax, corporate auditing, customs regulatory, and regulatory reporting obligations mandated by Italian and EU legal frameworks.
• Consent-Based Communications: Delivering specialized technical bulletins, trade show invitations, and corporate news to clients who have expressly opted in.

4. Data Protection, Governance & Storage

All corporate data processed by MPlus Cosmetics is safeguarded using robust physical, technical, and administrative controls. Storage facilities are located within certified data centers in Italy and the European Union, ensuring compliance with strict European cybersecurity benchmarks. Access to commercial records is strictly restricted to authorized R&D, quality control, and export department personnel who are bound by non-disclosure agreements.

Data retention periods align strictly with the duration of commercial partnerships and legal statutory requirements. Upon expiration of necessary retention timelines, information is permanently destroyed via secure electronic wiping or physical shredding.

5. International Data Transfers & Third Parties

MPlus Cosmetics does not trade, rent, or monetize client data under any circumstances. Information may be shared exclusively with verified third-party technical service providers (such as hosting infrastructure partners, logistics carriers, and legal advisors) who act as contractually bound Data Processors under GDPR Article 28.

When serving international beauty brand partners outside the European Economic Area (EEA), any cross-border data transfer relies on EU Standard Contractual Clauses (SCCs) or adequacy decisions to guarantee equivalent levels of protection globally.

6. Your Legal Data Rights

Under Articles 15 through 22 of the GDPR, authorized business representatives and individuals hold the following rights regarding their processed data:

• Right of Access: Request confirmation and details regarding data processing operations.
• Right to Rectification: Request correction of inaccurate or incomplete corporate records.
• Right to Erasure ("Right to be Forgotten"): Request data deletion when statutory retention obligations expire.
• Right to Restriction of Processing: Request limitations on processing under specific legal disputes.
• Right to Data Portability: Obtain structured, machine-readable copies of provided commercial data.
• Right to Object: Oppose data processing based on legitimate interest or marketing purposes.

To exercise any of these rights, contact our Privacy Compliance Officer via written correspondence to MPLUS COSMETICS SRL, Via Carlo Cattaneo 21/23, 20065 Inzago (Milan), Italy, or by email at [email protected]. You also maintain the right to lodge a complaint with the competent European Supervisory Authority (in Italy: Garante per la protezione dei dati personali).