Privacy Policy

PRIVACY POLICY

Lucy’s Closet

1. General Information About Data Processing

Thank you for visiting Lucy’s Closet. Protecting your personal information is very important to us. This Privacy Policy explains how we collect, use, and protect your personal data when you use our website. Personal data refers to any information that can identify you as an individual.

2. Data Controller

For the purposes of the General Data Protection Regulation (GDPR), the data controller responsible for processing your personal information on this website is:

Lucy’s Closet
Email: info@closet-lucys.com

The data controller determines how and why personal data is processed, either independently or together with others.

3. Website Security

Our website uses SSL and/or TLS encryption to ensure secure transmission of data. You can recognize a secure connection by the “https://” prefix and the lock symbol in your browser’s address bar. This technology helps protect confidential information such as orders, payments, and contact requests.

We do not use automated decision-making or profiling that produces legal or similarly significant effects on users in accordance with Article 22 GDPR.

4. Data Collection When Visiting Our Website

If you browse our website without creating an account or submitting information, we only collect technical data automatically transmitted by your browser. This includes:

  • Visited pages

  • Date and time of access

  • Amount of data transferred

  • Referring URL

  • Browser type and version

  • Operating system

  • IP address (anonymized where applicable)

This data is processed under Article 6(1)(f) GDPR based on our legitimate interest in maintaining website stability, performance, and security. The information is not used to identify you personally and is not shared unless required for legal reasons.

5. Cookies

Our website uses cookies to enhance user experience and enable certain functions. Cookies are small files stored on your device.

We use:

  • Session cookies, which are deleted when you close your browser

  • Persistent cookies, which remain stored for a defined period

Cookies may collect information such as browser details, location data, and IP addresses. Some cookies help store shopping cart contents or user preferences.

Where cookies process personal data, this is done under:

  • Article 6(1)(b) GDPR for contract performance, or

  • Article 6(1)(f) GDPR for improving website functionality

You can manage or disable cookies through your browser settings at any time. Please note that disabling cookies may limit website functionality.

Upon your first visit, you will be asked to consent to non-essential cookies via a cookie banner. You can adjust your preferences at any time.

6. Contacting Us

When you contact us via email or contact forms, we collect the information you provide in order to respond to your inquiry. This data is used solely for communication and administrative purposes.

Legal basis:

  • Article 6(1)(f) GDPR for general inquiries

  • Article 6(1)(b) GDPR if related to a contract

Your data will be deleted once your request has been fully handled, unless legal retention obligations apply.

7. Customer Accounts and Order Processing

When you create an account or place an order, we collect personal data necessary to fulfill the contract, including payment and delivery information.

Legal basis: Article 6(1)(b) GDPR.

You may request deletion of your customer account at any time by contacting us. After account deletion or order completion, data is retained only as required by tax and commercial laws, unless further use is legally permitted or explicitly consented to.

8. Email Marketing

8.1 Newsletter Subscription

If you subscribe to our newsletter, we will send you promotional emails. Only your email address is required. We use a double opt-in process to confirm subscriptions.

We store your IP address and registration timestamp to prevent misuse.
Legal basis: Article 6(1)(a) GDPR.

You can unsubscribe at any time via the link in the newsletter or by contacting us. Upon unsubscribing, your email will be removed unless further lawful use applies.

8.2 Marketing Emails to Existing Customers

If you provided your email during a purchase, we may send you offers related to similar products. This is based on our legitimate interest in direct marketing under Article 6(1)(f) GDPR.

You can object at any time, and we will immediately stop using your email for marketing.

9. Order Fulfillment and Payments

To process your order, we share necessary data with shipping providers and payment processors.

Payment Providers

PayPal
Payments via PayPal are processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg. PayPal may perform credit checks where legally permitted. Processing is carried out under Article 6(1)(b) GDPR.

SOFORT (Klarna Group)
Payments via SOFORT are processed by SOFORT GmbH, Germany. Order and payment details are shared solely for transaction completion.

Each provider processes data according to its own privacy policy.

10. Review Requests

With your consent, we may send a one-time email asking you to review your order.
Legal basis: Article 6(1)(a) GDPR.

You may withdraw consent at any time by contacting us.

11. Social Media Plugins

Our website includes social sharing links for platforms such as Facebook, Instagram, and similar services using privacy-friendly solutions. These links do not automatically transmit data. Data is only shared if you actively click a social button.

Further information can be found in the privacy policies of the respective platforms.

12. Online Advertising & Analytics

Google Analytics

We use Google Analytics with IP anonymization to analyze website usage. Data is processed under Article 6(1)(f) GDPR for website optimization.

You can opt out via browser settings or Google’s opt-out tools.

Advertising & Remarketing

We may use services such as Google Ads and social media remarketing pixels to display relevant advertisements. These tools use cookies and only operate with your consent where required.

13. Your Rights Under GDPR

You have the right to:

  • Access your personal data

  • Correct inaccurate information

  • Request deletion of your data

  • Restrict processing

  • Object to processing

  • Data portability

  • Withdraw consent at any time

  • File a complaint with a supervisory authority

Requests can be sent to info@closet-lucys.com.

14. Data Retention

Personal data is stored only for as long as legally required or necessary to fulfill contractual obligations. Once retention periods expire, data is securely deleted unless further lawful storage is justified.

15. Contact

If you have questions about this Privacy Policy or wish to exercise your rights, please contact:

Lucy’s Closet
📧 info@closet-lucys.com