Privacy Policy

Last updated: October 21, 2026

1. Controller

Curalife Supplementation GmbH, Grinzinger Allee 8, 1190 Vienna, Austria, email info@headlightcenter.com, is responsible for processing your personal data in connection with headlightcenter.com.

2. Data we process

Order data: name, billing and shipping address, email, phone number, ordered products and payment status.
Communication: the content of emails you send us.
Technical data: IP address, device and browser information, and how you use the shop (via cookies, see below).

We do not see or store your full card details; payments are handled by our payment providers.

3. Purposes and legal bases

Processing and delivering your order and handling returns (Art. 6(1)(b) GDPR).
Keeping records required by tax and commercial law (Art. 6(1)(c) GDPR).
Answering your enquiries and protecting the shop against fraud and misuse (Art. 6(1)(f) GDPR).
Newsletters and marketing cookies only with your consent, which you can withdraw at any time (Art. 6(1)(a) GDPR).

4. Recipients

We share data only as needed with: Shopify (shop hosting and checkout), payment providers, our supplier and courier companies (to ship your order), and our accountant and tax authorities. Shopify may process data outside the EU; such transfers are protected by EU Standard Contractual Clauses or an adequacy decision.

5. Cookies

Our shop uses cookies that are necessary for it to work (for example the shopping cart). Analytics and marketing cookies are only used if you agree in the cookie banner.

6. Storage period

We keep order data for as long as required by law (in Austria generally 7 years for accounting records). Other data is deleted when it is no longer needed.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and to withdraw consent at any time. Contact us at info@headlightcenter.com. You also have the right to lodge a complaint with a supervisory authority, in Austria the Austrian Data Protection Authority (Datenschutzbehörde, www.dsb.gv.at).