Privacy policy
This Privacy Policy explains which personal data we collect, for what purposes we process it, on what legal basis, how long we keep it and what rights you have. Processing is carried out in accordance with the Personal Data Protection Act of the Republic of Serbia (“ZZPL”).
1. Data controller
Seller: Beauty Bar Lis doo Beograd
Company number (MB): 21420131 · Tax ID (PIB): 111060157
Registered office: Stojana Protića 23, Belgrade-Vračar
Store address: Patrijarha Varnave 48, 11000 Belgrade
Email: [email protected] · Phone: +381 65 20 54 710
For all questions regarding the processing of personal data you can contact us at [email protected].
2. What data we collect
- Order data: first and last name, delivery address, city, postal code, phone number, email address, order contents and order notes.
- Account data (if you register): email address, password (stored solely in a protected, hashed form), order history.
- Contact form data: name, email address and message content.
- Mailing list: email address, with your explicit opt-in.
- Technical data: IP address, device and browser type, cookies (in accordance with the Cookie Policy and your consent).
3. Purposes and legal basis of processing
- Processing and delivery of the order (performance of the contract): the data is necessary for us to receive, process and deliver your order and communicate with you about it.
- Fulfilment of legal obligations: issuing invoices, keeping business records, handling complaints.
- Notifications about products and offers (consent): only if you subscribe to the mailing list; you may withdraw consent at any time via the unsubscribe link in every message.
- Improving the site (legitimate interest / consent for analytics cookies).
4. Who has access to the data
We do not sell your data or transfer it to third parties for marketing purposes. We share data solely with:
- the courier service - data necessary for delivery (name, address, phone);
- providers of technical services who maintain the site and email system, under a confidentiality obligation;
- the competent authorities, when this is a legal obligation.
5. Retention period
We keep order data for the periods prescribed by tax and accounting regulations. We keep mailing list data until you unsubscribe. We keep contact form data for a maximum of one year after the end of communication. We keep technical records for a maximum of 12 months.
6. Your rights
In accordance with the ZZPL you have the right to: access your data, rectify inaccurate data, erasure (“the right to be forgotten”), restriction of processing, data portability, object to processing, and the right to withdraw consent at any time (withdrawal does not affect the lawfulness of processing before withdrawal). You can submit a request to [email protected] - we respond without delay, and no later than within 30 days. You also have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection (Bulevar kralja Aleksandra 15, Belgrade, www.poverenik.rs).
7. Security
The site uses HTTPS encryption, access to data is limited to authorised persons, and passwords are stored solely in hashed form. We apply technical and organisational protection measures appropriate to the risk of processing.
8. Minors
Our online store is intended for adults. We do not knowingly collect data from persons under 15 years of age.
9. Changes to this policy
We update the Privacy Policy from time to time; the valid version is always published on this page with the date of the last change. Last change: July 2026.

