Privacy Policy

Last updated: January 2026

globalstratumium SARL ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website or use our services.

Data Controller Information

The data controller for your personal data is globalstratumium SARL, a company registered in Luxembourg with registration number RCSB584796. Our registered office is located at Avenue Monterey 91, 3687 Dudelange, Esch-sur-Alzette, Luxembourg.

Data Collection

We collect personal data that you provide to us directly and information that is automatically collected when you use our website. The data we collect includes:

• Contact Information: Name, email address, phone number, company name, and postal address when you contact us or request our services
• Communication Data: Records of your communications with us, including emails, phone calls, and messages sent through our contact forms
• Website Usage Data: Information about how you use our website, including IP address, browser type, pages visited, time spent on pages, and referring websites
• Technical Data: Device information, operating system, browser version, and other technical identifiers
• Marketing Data: Your preferences regarding marketing communications and your responses to marketing campaigns

How We Use Your Information

We use the personal data we collect for the following purposes, based on legitimate business interests and your consent where required:

• Service Provision: To provide our beauty market research services, respond to your enquiries, and deliver the information or services you request
• Communication: To communicate with you about our services, respond to your questions, and provide customer support
• Business Operations: To manage our business relationship with you, process payments, and maintain accurate records
• Website Improvement: To analyse website usage and improve our website functionality, content, and user experience
• Marketing: To send you relevant marketing communications about our services, subject to your consent and preferences
• Legal Compliance: To comply with legal obligations, resolve disputes, and enforce our agreements

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our use of cookies, please refer to our Cookie Policy.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Consent: Where you have given clear consent for us to process your personal data for specific purposes
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
• Legitimate Interests: Where processing is necessary for our legitimate business interests, such as improving our services and website functionality
• Legal Obligation: Where processing is necessary to comply with legal or regulatory obligations

Data Sharing and Disclosure

We do not sell, trade, or rent your personal data to third parties. We may share your information in the following limited circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our website and providing our services
• Legal Requirements: When required by law, regulation, or legal process, or to protect our rights and interests
• Business Transfers: In connection with any merger, acquisition, or sale of business assets

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations. Generally, we retain personal data for the following periods:

• Contact and Communication Data: 7 years from the last contact or business relationship
• Website Usage Data: 26 months from collection
• Marketing Data: Until you unsubscribe or withdraw consent, or 3 years from last engagement
• Legal and Compliance Data: As required by applicable laws and regulations

Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: To request a copy of the personal data we hold about you
• Right to Rectification: To request correction of inaccurate or incomplete personal data
• Right to Erasure: To request deletion of your personal data in certain circumstances
• Right to Restrict Processing: To request limitation of processing of your personal data
• Right to Data Portability: To request transfer of your data to another organisation
• Right to Object: To object to processing of your personal data for certain purposes
• Right to Withdraw Consent: To withdraw consent where processing is based on consent

Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training on data protection principles.

International Data Transfers

Your personal data may be processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or other approved mechanisms under GDPR.

Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out to us using the following contact information:

Supervisory Authority

If you believe that our processing of your personal data violates data protection laws, you have the right to lodge a complaint with the relevant supervisory authority. In Luxembourg, this is the Commission Nationale pour la Protection des Données (CNPD).