Datenschutzerklärung

This Privacy Policy describes how clairebridal.shop collects, uses, discloses, protects and otherwise processes personal information when individuals visit our website, purchase products, communicate with us or otherwise interact with our services.

For privacy questions or requests, contact:

Email: info@clairebridal.shop

Where clairebridal.shop determines the purposes and means of processing personal data, clairebridal.shop acts as the data controller for purposes of applicable data-protection law.

This policy is intended to reflect principles of the General Data Protection Regulation, including transparency regarding processing purposes and legal bases. GDPR Article 13 requires controllers to provide information including their identity, contact details, processing purposes and legal bases.

Personal Information We May Collect

Depending on how you use our services, we may process categories of personal information including:

Contact Information

This may include:

• Name;
• Email address;
• Telephone number where supplied;
• Billing information; and
• Delivery information.

Order Information

This may include:

• Products ordered;
• Order number;
• Order value;
• Order status;
• Delivery method;
• Return information;
• Refund information; and
• Customer-service records.

Payment and Transaction Information

Payments may be handled by third-party payment processors.

Depending on the payment method, payment providers may process:

• Payment-card information;
• Account details;
• Payment authorization information;
• Transaction identifiers; and
• Fraud-prevention information.

clairebridal.shop may receive limited payment-related information rather than complete payment-card credentials.

Device and Technical Information

When you use our website, information may be collected automatically, including:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Device identifiers;
• Website interactions;
• Referring pages;
• Approximate location derived from technical information;
• Cookie identifiers; and
• Similar technical data.

Customer Communications

If you contact us, we may process:

• Your email address;
• Message contents;
• Attachments;
• Order details;
• Customer-service history; and
• Information reasonably necessary to respond.

How We Use Personal Information

We may process personal information to:

• Provide and operate our website;
• Display products;
• Maintain shopping-cart functionality;
• Process orders;
• Process payments;
• Confirm transactions;
• Deliver purchases;
• Manage returns and refunds;
• Communicate about orders;
• Provide customer support;
• Prevent fraud;
• Protect accounts and transactions;
• Maintain website security;
• Detect technical problems;
• Maintain business records;
• Meet accounting and tax obligations;
• Respond to legal requests;
• Establish, exercise or defend legal claims;
• Analyze website performance where lawful;
• Improve our store and customer experience;
• Personalize services where permitted; and
• Conduct marketing where we have an appropriate lawful basis.

Legal Bases for Processing

Under the GDPR, personal-data processing requires an appropriate lawful basis. Relevant bases can include consent, contractual necessity, compliance with legal obligations and legitimate interests.

Depending on the processing activity, we may rely upon:

Performance of a Contract

We may process information where necessary to:

• Process your order;
• Collect payment;
• Arrange delivery;
• Handle returns;
• Provide customer service; and
• Perform obligations under a purchase contract.

Legal Obligations

We may process and retain information where necessary to comply with obligations concerning:

• Taxation;
• Accounting;
• Consumer protection;
• Fraud prevention;
• Regulatory requirements; and
• Lawful governmental requests.

Legitimate Interests

Where legally permitted, we may process information for legitimate interests such as:

• Preventing fraud;
• Protecting our website;
• Improving security;
• Managing business operations;
• Responding to customers;
• Establishing legal claims; and
• Improving our services.

Where legitimate interests are relied upon, we consider the relevant interests against the rights and freedoms of affected individuals.

Consent

We may rely on consent for certain activities, including certain:

• Marketing communications;
• Advertising technologies;
• Analytics technologies; and
• Non-essential cookies.

Where processing is based on consent, consent may be withdrawn for future processing, subject to applicable law.

Shopify

Our ecommerce store may be hosted and operated using Shopify technology.

Shopify may process customer information to provide services including:

• Store hosting;
• Checkout functionality;
• Payment-related services;
• Fraud prevention;
• Security;
• Analytics;
• Customer accounts; and
• Other ecommerce functionality.

Shopify indicates that customer personal data originating from the EEA, UK and Switzerland is initially processed by Shopify International Limited in Ireland, with affiliated entities and subprocessors assisting in providing services.

Where Shopify processes information for its own legally permitted purposes, its own privacy terms and privacy portal may also apply.

Service Providers

We may disclose personal data to service providers where reasonably necessary to operate our store.

Recipients may include providers of:

• Ecommerce infrastructure;
• Hosting;
• Payment processing;
• Fraud detection;
• Order fulfilment;
• Shipping;
• Delivery;
• Customer support;
• IT services;
• Security;
• Analytics;
• Marketing;
• Email communications; and
• Professional services.

We seek to limit disclosures to information reasonably necessary for the relevant service.

Payment Providers

Payment information may be transmitted directly to secure payment-service providers.

Payment providers may process personal data under their own privacy and security obligations.

The specific provider used may depend on the payment method selected at checkout.

Shipping Providers

To deliver your order, relevant information may be provided to:

• Fulfilment providers;
• Warehouses;
• Postal operators;
• Courier companies;
• Logistics providers; and
• Other parties reasonably necessary for delivery.

This may include your name, shipping address, telephone number where necessary and order-related information.

Cookies and Similar Technologies

Our website may use cookies, pixels, local storage and similar technologies.

These technologies may be used for:

• Shopping-cart functionality;
• Checkout;
• Account functionality;
• Website security;
• Fraud prevention;
• Preferences;
• Analytics;
• Advertising; and
• Performance measurement.

Essential Cookies

Some technologies are necessary to provide functionality expressly requested by the user or to transmit communications.

These may be used without consent where applicable law permits.

Non-Essential Cookies

German TDDDG §25 generally requires informed consent before information is stored on or accessed from an end user's device unless an applicable exception applies, including where the technology is strictly necessary to provide a service expressly requested by the user.

Accordingly, where required, non-essential analytics, advertising or similar technologies should only be activated after appropriate consent.

Shopify provides customer privacy controls and cookie-banner functionality for EEA markets.

Customers may manage cookie preferences through available consent controls.

Marketing Communications

Where legally permitted, we may send marketing communications to customers who have appropriately requested or consented to receiving them.

Marketing communications may include information concerning:

• Products;
• Promotions;
• Offers;
• Store updates; and
• Other commercial information.

Customers may unsubscribe using the available unsubscribe mechanism or by contacting:

info@clairebridal.shop

Withdrawing marketing consent does not affect service communications necessary to administer an existing order.

Fraud Prevention

We may use information to identify and prevent fraudulent or suspicious transactions.

This may involve automated risk indicators or information supplied by payment, ecommerce or fraud-prevention providers.

A transaction may be reviewed where indicators suggest unauthorized payment, identity misuse or other security risks.

International Data Transfers

Some service providers may process personal information outside Germany or outside the European Economic Area.

Where GDPR requirements apply to international transfers, appropriate safeguards will be used where required, which may include:

• Adequacy decisions;
• Standard contractual clauses;
• Other approved transfer mechanisms; or
• Applicable statutory derogations.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and for any additional period required or permitted by law.

Retention periods may depend on factors including:

• Whether an order remains active;
• Contractual obligations;
• Tax and accounting requirements;
• Consumer-law requirements;
• Fraud prevention;
• Legal claims;
• Disputes; and
• Security requirements.

When information is no longer reasonably required, it may be deleted, anonymized or otherwise disposed of in accordance with applicable requirements.

Data Security

We use reasonable administrative, technical and organizational measures intended to protect personal information against:

• Unauthorized access;
• Accidental loss;
• Unauthorized disclosure;
• Destruction;
• Misuse; and
• Alteration.

However, no internet transmission or electronic-storage system can be guaranteed to be completely secure.

Customers should protect account credentials and notify us if they believe their account or transaction information has been compromised.

Your GDPR Rights

Subject to applicable requirements and exceptions, individuals may have rights including:

• The right to access personal data;
• The right to correct inaccurate data;
• The right to request deletion;
• The right to restrict processing;
• The right to data portability;
• The right to object to certain processing;
• The right to withdraw consent;
• The right to obtain information about processing; and
• The right to lodge a complaint with a competent data-protection authority.

Exercising Privacy Rights

Requests may be sent to:

info@clairebridal.shop

We may require reasonable information to verify the requester's identity and protect personal data against unauthorized disclosure.

We will process valid requests in accordance with applicable law.

Right to Object to Direct Marketing

Where personal data is processed for direct-marketing purposes, individuals may object to such processing.

Upon a valid objection, personal data will no longer be processed for the relevant direct-marketing purpose to the extent required by law.

Children

Our website is intended for individuals who can legally enter into transactions or who use the website with appropriate parental or guardian authorization.

We do not knowingly seek to collect personal information from children in circumstances prohibited by applicable law.

If you believe a child has supplied personal data improperly, contact:

info@clairebridal.shop

Third-Party Websites

Our website may contain links to third-party websites or services.

We do not control the privacy practices of independent third parties.

Customers should review the privacy notices of third-party services before supplying personal information to them.

Changes to This Privacy Policy

We may update this Privacy Policy when reasonably necessary to reflect:

• Changes in our services;
• Changes in technology;
• Changes in service providers;
• Changes in legal requirements; or
• Changes in our privacy practices.

The updated version will be published on clairebridal.shop with an updated revision date where appropriate.

Contact

For privacy questions or requests:

clairebridal.shop
Email: info@clairebridal.shop