Privacy policy

Last updated: [DATE]

This policy explains what personal data LuvruFashion collects when you visit our store or place an order, why we use it, and the rights you have.

1. Who is responsible

The controller of your personal data under the General Data Protection Regulation (GDPR) is:
LuvruFashion, Andries Dragos Andrei (sole trader)
[BUSINESS ADDRESS]
Email: [EMAIL ADDRESS]

2. What we collect

• Order details: name, shipping and billing address, email address, phone number (if you provide it), and the items you order.
• Payment details: your payment is handled by our payment providers. We never see or store your full card number.
• Account details: if you create an account, your login email and order history.
• Messages: what you send us by email.
• Technical data: IP address, browser and device type, and how you use our site, collected through cookies (see section 8).

3. Why we use it, and on what legal basis

• To process, ship and support your order (performance of a contract).
• To keep records required by tax and accounting law (legal obligation).
• To send you our newsletter, only if you sign up (consent; you can unsubscribe at any time).
• To keep our store secure and prevent fraud (legitimate interest).
• To understand how our site is used and improve it, only with your cookie consent (consent).

4. Who we share it with

We only share what each provider needs to do its job:

• Our e-commerce platform provider, which hosts the store and processes orders.
• Payment providers, to process your payment.
• Our fulfilment partners and shipping carriers, to pack and deliver your order (name, address, phone number, order contents).
• Email and analytics providers, where you have given consent.

We never sell your personal data.

5. Transfers outside the EU

Because our pieces ship from partner fulfilment centres outside the European Economic Area, mainly in China, your delivery details are transferred there to fulfil your order. We protect these transfers with the European Commission's Standard Contractual Clauses or other safeguards required by the GDPR.

6. How long we keep it

• Order and invoice records: as long as tax and accounting law requires ([NUMBER] years in [COUNTRY]).
• Account data: until you ask us to delete your account.
• Newsletter data: until you unsubscribe.

7. Your rights

You have the right to access your data, correct it, have it deleted, restrict or object to its use, receive it in a portable format, and withdraw your consent at any time. To use any of these rights, email [EMAIL ADDRESS]. We'll reply within one month.

8. Cookies

We use essential cookies so the store works (for example, to keep items in your bag). Analytics and advertising cookies are only set if you accept them in our cookie banner. You can change your choice at any time via "Cookie settings" in the footer. See also Your Privacy Choices.

9. Children

Our store is not intended for children under 16, and we don't knowingly collect their data.

10. Complaints

If you believe we've handled your data incorrectly, please contact us first at [EMAIL ADDRESS]. You also have the right to complain to a data protection authority, for example in your country of residence or [DATA PROTECTION AUTHORITY, e.g. the Data Protection Commission (Ireland)].

11. Changes

We may update this policy from time to time. The latest version is always on this page, with the date it was last updated.