Privacy Policy
Last Updated: June 2026
Phlume Group ("Phlume Group", "we", "us", or "our"), operating under the brand name Biocreama, operates this website and related services, including all information, content, features, tools, products, and services made available through the Biocreama website (collectively, the "Services").
This Privacy Policy describes how we collect, use, disclose, store, transfer, and otherwise process your personal information when you visit, use, make a purchase from, or otherwise interact with our Services.
Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy and the collection, use, disclosure, and processing of your information as described herein.
1. Data Controller
For the purposes of applicable data protection laws, the data controller responsible for your personal information is:
Phlume Group
Dubai, United Arab Emirates
Brand: Biocreama
Email: hello@biocreama.com
2. Personal Information We Collect
When we use the term "personal information," we mean information that identifies, relates to, describes, can reasonably be associated with, or could reasonably be linked to an individual.
Depending on how you interact with our Services, we may collect the following categories of personal information.
Contact Information
- Name
- Email address
- Telephone number
- Billing address
- Shipping address
Account Information
- Username
- Password
- Account preferences
- Saved products
- Wishlist information
Transaction Information
- Products viewed
- Products purchased
- Cart activity
- Order history
- Returns and exchanges
- Purchase preferences
- Payment confirmations
Payment Information
Payments are processed through secure third-party payment providers. We do not store complete payment card numbers on our systems.
Payment providers may collect and process payment information in accordance with their own privacy notices.
Device Information
- IP address
- Browser type
- Device identifiers
- Operating system
- Time zone
- Language settings
- Network information
Usage Information
- Pages viewed
- Products viewed
- Search activity
- Click activity
- Session information
- Referral sources
- Website interactions
Marketing Information
- Email subscription status
- SMS subscription status
- Campaign engagement
- Advertising interactions
Customer Communications
- Customer support inquiries
- Survey responses
- Product feedback
- Reviews
- Testimonials
- Messages sent to us
User Generated Content
- Reviews
- Ratings
- Product photographs
- Videos
- Testimonials
- Social media content you choose to share with us
3. Sources of Personal Information
We may collect personal information:
Directly From You
Including when you:
- Create an account
- Place an order
- Subscribe to marketing communications
- Contact customer support
- Participate in surveys or promotions
- Submit reviews or testimonials
Automatically
Through:
- Cookies
- Pixels
- Web beacons
- Log files
- Analytics technologies
- Similar tracking technologies
From Service Providers and Partners
Including:
- Shopify
- Payment processors
- Shipping providers
- Analytics providers
- Advertising platforms
- Social media platforms
- Review platforms
4. How We Use Personal Information
We may use personal information for the following purposes:
Providing and Improving Services
- Processing orders
- Fulfilling purchases
- Managing accounts
- Processing returns and refunds
- Providing customer support
- Improving website functionality
- Improving customer experience
Marketing and Advertising
We may use personal information to:
- Send promotional communications
- Send newsletters
- Notify you about products and offers
- Display relevant advertisements
- Measure campaign effectiveness
- Build custom audiences
- Create lookalike audiences
Security and Fraud Prevention
We may use information to:
- Verify transactions
- Detect fraud
- Prevent unauthorized activity
- Protect our customers and business
Legal Compliance
We may process personal information to:
- Comply with legal obligations
- Respond to lawful requests
- Resolve disputes
- Enforce agreements
- Protect our rights and interests
5. Cookies and Tracking Technologies
We use cookies and similar technologies to provide, secure, analyze, personalize, and improve our Services.
Cookies may be placed by:
- Shopify
- Google Analytics
- Google Ads
- Meta Pixel
- TikTok Pixel
- Klaviyo
- Loox
- Other authorized providers
These technologies may collect information regarding your browsing activities across websites and services.
You may control cookie settings through your browser. Certain features may not function properly if cookies are disabled.
6. SMS, Email, and Marketing Communications
Where permitted by applicable law, we may send marketing communications by email, SMS, push notifications, or other channels.
You may opt out at any time by:
- Clicking the unsubscribe link in emails
- Following SMS opt-out instructions
- Contacting us directly
Opting out of marketing communications does not affect transactional or service-related communications.
7. Reviews, Testimonials, and User Content
We may use Loox or similar services to collect reviews, ratings, photographs, videos, and testimonials.
By submitting user-generated content, you grant Phlume Group a worldwide, non-exclusive, royalty-free, transferable license to use, reproduce, publish, display, distribute, modify, and promote such content in connection with our business, products, services, and marketing activities.
You remain responsible for ensuring that any content submitted does not violate the rights of others.
8. Disclosure of Personal Information
We may disclose personal information to:
Service Providers
Including providers of:
- Website hosting
- Ecommerce services
- Payment processing
- Order fulfillment
- Shipping
- Analytics
- Customer support
- Marketing services
Advertising Partners
Including:
- Meta
- TikTok
- Klaviyo
These partners and others similar may process information in accordance with their own privacy notices.
Professional Advisors
Including:
- Lawyers
- Auditors
- Accountants
- Consultants
Corporate Affiliates
Within our corporate group and affiliated businesses.
Legal Authorities
Where required by law or reasonably necessary to:
- Comply with legal obligations
- Protect rights
- Investigate fraud
- Protect users
- Enforce agreements
Corporate Transactions
In connection with:
- Mergers
- Acquisitions
- Investments
- Asset sales
- Reorganizations
9. Relationship With Shopify
Our Services are hosted by Shopify.
Shopify may collect and process personal information relating to your interactions with our store in order to provide and improve ecommerce services.
Information submitted through our website may be transmitted to and processed by Shopify and its service providers.
For additional information regarding Shopify's privacy practices, please review Shopify's consumer privacy information.
10. International Data Transfers
Your personal information may be transferred to, stored in, or processed in countries outside your country of residence.
Where required by applicable law, we implement appropriate safeguards designed to protect personal information during international transfers.
11. Data Retention
We retain personal information for as long as necessary to:
- Provide Services
- Fulfill orders
- Maintain business records
- Meet legal obligations
- Resolve disputes
- Enforce agreements
Retention periods may vary depending on the type of information and legal requirements.
12. Security
We maintain reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, use, disclosure, alteration, or destruction.
No system can guarantee absolute security.
13. Children's Privacy
Our Services are not intended for children under the age required by applicable law to provide valid consent.
We do not knowingly collect personal information from children.
14. Your Rights and Choices
Depending on your location and applicable law, you may have rights including:
- Right to access personal information
- Right to know how information is processed
- Right to correct inaccurate information
- Right to request deletion
- Right to data portability
- Right to restrict processing
- Right to object to processing
- Right to withdraw consent
- Right to opt out of targeted adversing where applicable
- Right to lodge a complaint with a supervisory authority
These rights may be subject to exceptions and limitations under applicable law.
To exercise your rights, contact:
We may require verification of identity before fulfilling requests.
15. Do Not Track and Global Privacy Signals
Where required by applicable law, we will honor legally recognized privacy preference signals and opt-out mechanisms.
Not all browser-based "Do Not Track" technologies are recognized or supported.
16. UAE Privacy Compliance
Phlume Group seeks to comply with applicable data protection laws, including the United Arab Emirates Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and related regulations, where applicable.
17. Third-Party Websites
Our Services may contain links to third-party websites or services.
We are not responsible for the privacy, security, or content of third-party websites.
18. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect operational, legal, regulatory, or technological developments.
Any updates will be posted on this page together with a revised "Last Updated" date.
19. Contact Us
Phlume Group
Dubai, United Arab Emirates
Privacy & Customer Support Inquiries: hello@biocreama.com