Privacy policy
What we do with your data, why, and how to exercise your rights.
Draft, not legal advice, pending review
This text is a draft awaiting review by a lawyer. It is not legal advice and may change before publication.
1. Data controller
The data controller is To be completed: [Company name to be completed], To be completed: [Registered address to be completed], RCS To be completed: [RCS number to be completed]. Contact for any question about your data: To be completed: [Contact email to be completed].
2. Data we process
We process your account data (name, email), your order data (delivery addresses, items, confirmed payments), shipment tracking data, and the technical data needed to run the site.
We do not keep your card details: they are handled by the payment provider.
3. Why we use it
To fulfil your orders and manage your account (performance of the contract), to meet our accounting and tax obligations (legal obligation), to secure the site and prevent fraud (legitimate interest), and to send notifications you asked for (consent).
4. Who receives your data
The merchants you buy from receive the data needed to prepare and ship your order. We also use payment, carrier, hosting and email providers, who act on our instructions.
5. Retention
Account data is kept while the account exists. Accounting records are kept for the period required by law. Other data is deleted when it is no longer needed.
6. Transfers outside the EU
We prefer providers located in the European Economic Area. Where a transfer outside the EU takes place, it relies on a GDPR mechanism such as standard contractual clauses.
7. Your rights
You can ask for access to, rectification, erasure, restriction and portability of your data, and object to certain processing. You can withdraw consent at any time.
Write to us at To be completed: [Contact email to be completed]. You can also lodge a complaint with the Commission nationale pour la protection des données (CNPD) in Luxembourg.
8. Cookies
The cookies and local storage used by the site are described in the cookie policy.