Privacy policy
This Privacy Policy describes how the operator of prettylittlehome.shop collects, uses, discloses, stores and otherwise processes personal information when individuals visit our website, make a purchase, contact us or otherwise interact with our store.
Contact regarding privacy matters:
Email: info@prettylittlehome.shop
This Privacy Policy should be read together with our other store policies.
1. Scope of This Privacy Policy
This Policy applies to personal information processed in connection with:
- Visiting prettylittlehome.shop;
- Browsing products;
- Creating or using customer features where available;
- Placing an order;
- Making a payment;
- Receiving delivery;
- Contacting customer service;
- Requesting a return or refund;
- Exercising privacy rights;
- Participating in marketing communications where permitted; and
- Otherwise interacting with our online store.
2. Data Controller
For purposes of data-protection law, the operator of prettylittlehome.shop determines the purposes and means of processing personal data in connection with the operation of the store and therefore acts as controller where applicable.
Privacy enquiries may be directed to:
3. Personal Information We May Collect
Depending on your interaction with the store, we may collect information such as:
Identity Information
- Name;
- Account information where available; and
- Information reasonably required to verify a request.
Contact Information
- Email address;
- Telephone number where provided;
- Billing address; and
- Delivery address.
Transaction Information
- Products ordered;
- Order value;
- Order number;
- Discounts;
- Refunds;
- Returns;
- Transaction history; and
- Related customer-service records.
Payment-Related Information
Payment information may be processed by authorised payment processors.
We do not encourage customers to transmit full payment-card numbers, security codes or banking passwords through ordinary email.
Device and Technical Information
Depending on website settings and technologies used, information may include:
- IP address;
- Browser type;
- Device type;
- Operating system;
- Website activity;
- Session information;
- Referral information;
- Cookie identifiers; and
- Similar technical information.
Communications
If you contact us, we may process:
- Your email address;
- Message contents;
- Attachments;
- Customer-service history; and
- Information reasonably necessary to answer your request.
4. How We Collect Information
We may obtain personal information:
- Directly from you;
- Automatically when you use the website;
- Through Shopify;
- Through payment processors;
- Through shipping and fulfilment providers;
- Through customer-support services;
- Through analytics or security providers;
- Through marketing services where legally permitted; and
- From other parties where lawful.
5. Purposes of Processing
We may process personal information to:
- Provide our website;
- Process purchases;
- Confirm orders;
- Process payments;
- Prevent fraud;
- Fulfil orders;
- Arrange delivery;
- Provide tracking information;
- Handle returns;
- Process refunds;
- Respond to questions;
- Provide customer service;
- Maintain transaction records;
- Comply with tax, accounting and legal requirements;
- Establish, exercise or defend legal claims;
- Improve website functionality;
- Maintain website and transaction security;
- Detect misuse;
- Analyse performance where lawful; and
- Send marketing communications where consent or another lawful basis permits.
6. Legal Bases Under GDPR
Where the General Data Protection Regulation applies, processing may be based on one or more lawful grounds.
Performance of a Contract
We process information necessary to:
- Process an order;
- Accept payment;
- Deliver products;
- Communicate regarding an order;
- Handle contractual returns; and
- Provide requested customer service.
Legal Obligations
We may process or retain information where required to comply with legal obligations, including accounting, taxation, consumer-protection and regulatory requirements.
Legitimate Interests
Where legally permitted and not overridden by individual rights and freedoms, we may process information for legitimate interests such as:
- Fraud prevention;
- Security;
- Business administration;
- Customer-service improvement;
- Website reliability;
- Protecting legal rights; and
- Understanding ordinary business performance.
Consent
Where consent is legally required, we may rely on consent for activities such as certain:
- Marketing communications;
- Advertising technologies;
- Analytics technologies; and
- Non-essential cookies.
Consent may be withdrawn where legally applicable.
Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
7. Shopify
Our store uses Shopify's ecommerce platform.
Shopify and its affiliates or subprocessors may process customer information to provide platform infrastructure, transaction functionality, security and other services.
For customers in the European Economic Area, Shopify states that EEA customer personal data is initially processed by Shopify International Limited in Ireland, while international transfers may occur subject to applicable data-transfer safeguards.
Shopify maintains its own privacy documentation concerning processing carried out in connection with its services.
8. Payment Service Providers
Payment transactions may involve third-party payment processors, banks, card networks or payment-service providers.
These organisations may process information necessary to:
- Authorise payments;
- Detect fraud;
- Verify identity;
- Process refunds;
- Comply with legal obligations; and
- Maintain payment security.
Their processing may also be governed by their own privacy notices and legal responsibilities.
9. Shipping and Fulfilment
To deliver an order, we may share information with relevant logistics providers.
This may include:
- Recipient name;
- Shipping address;
- Telephone number where necessary;
- Email where necessary;
- Order information; and
- Other information required to complete delivery.
We limit disclosure to information reasonably necessary for the relevant purpose.
10. Service Providers
We may use service providers for activities including:
- Ecommerce infrastructure;
- Hosting;
- Payment processing;
- Fraud prevention;
- Customer support;
- Order fulfilment;
- Shipping;
- Analytics;
- Website security;
- Email delivery;
- Marketing; and
- Technical support.
Service providers may process information only to the extent required for their authorised role and subject to applicable legal requirements.
11. Cookies and Similar Technologies
Our website may use cookies or similar technologies.
Some technologies are necessary for purposes such as:
- Maintaining shopping-cart functionality;
- Authentication;
- Security;
- Fraud prevention;
- Remembering essential settings; and
- Providing checkout functionality.
Other technologies may be used for analytics, personalisation or marketing where legally permitted.
Where French or European rules require prior consent for non-essential cookies or trackers, those technologies should not be activated until the required consent has been obtained.
French data-protection guidance requires users to be informed and, for certain non-essential trackers, to give prior consent.
12. Marketing Communications
Where legally permitted, we may send promotional communications to customers or subscribers.
Where consent is required, marketing communications will be sent on the basis of valid consent.
Recipients may withdraw or modify their marketing preferences using available unsubscribe mechanisms or by contacting:
Transactional messages concerning an order, return, refund, security issue or other service matter are not marketing communications.
13. Data Retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected or as required by applicable law.
Retention periods may depend on:
- Contractual obligations;
- Tax requirements;
- Accounting requirements;
- Consumer-protection requirements;
- Fraud-prevention needs;
- Dispute limitation periods;
- Security requirements; and
- Legal claims.
When information is no longer reasonably necessary, it may be deleted, anonymised or otherwise handled in accordance with applicable law.
14. International Data Transfers
Some service providers may process information outside France or the European Economic Area.
Where GDPR applies, appropriate mechanisms must be used for transfers requiring safeguards.
Depending on the circumstances, mechanisms may include:
- Adequacy decisions;
- Standard Contractual Clauses;
- Contractual safeguards; or
- Other legally permitted transfer mechanisms.
15. Data Security
We use reasonable technical and organisational measures intended to protect personal information against:
- Unauthorised access;
- Unlawful disclosure;
- Accidental loss;
- Alteration;
- Misuse; and
- Destruction.
However, no method of electronic transmission or digital storage can be guaranteed to be completely secure.
16. Your GDPR Rights
Subject to legal conditions and limitations, individuals may have rights including:
- Right of access;
- Right to rectification;
- Right to erasure;
- Right to restriction of processing;
- Right to data portability;
- Right to object;
- Right to withdraw consent;
- Rights relating to certain automated decision-making; and
- Right to lodge a complaint with a competent supervisory authority.
The CNIL identifies access, rectification, erasure, portability, restriction and objection among the data-protection rights available to individuals.
17. Exercising Privacy Rights
To make a privacy request, contact:
Please clearly identify the nature of your request.
We may request reasonable information necessary to confirm identity where required to protect personal information from unauthorised disclosure.
Requests will be handled in accordance with applicable data-protection law.
18. Complaints
If you believe your personal information has been processed improperly, please contact:
Individuals may also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) or another competent data-protection authority.
19. Children's Privacy
Our store is not intended to knowingly collect personal information from children who cannot lawfully provide the relevant information or consent.
If we become aware that personal information has been collected in circumstances contrary to applicable law, appropriate steps may be taken.
20. Third-Party Links
Our website may contain links to third-party websites or services.
We are not responsible for the privacy practices of third parties outside our control.
Customers should review the privacy information of external services before providing personal information to them.
21. Changes to This Privacy Policy
We may update this Privacy Policy to reflect:
- Changes in law;
- Changes in technology;
- Changes in Shopify functionality;
- Changes in service providers; or
- Changes in our processing practices.
The latest revision date will be displayed at the beginning of this Policy.
22. Contact
For privacy-related enquiries:
prettylittlehome.shop
Email: info@prettylittlehome.shop
- Choosing a selection results in a full page refresh.