Privacy Policy
This Privacy Policy describes how personal information is collected, used, shared, and safeguarded when you visit https://elvieramode.com/ (the “Site”), make a purchase, or interact with our services (the “Services”).
1. Information Collected
When you place an order, we collect the personal details you voluntarily provide, such as your name, billing and shipping address, email address, and phone number. When you browse the Site, we automatically receive certain technical information, including your IP address, browser type, and operating system. With your consent, we may also collect your email address to send updates, promotions, and product-related communications.
2. Consent
By providing personal information to complete a transaction—such as placing an order, verifying payment details, arranging delivery, or requesting a return—you consent to our collecting and using that information for the intended purpose only. If we request your information for an additional purpose, such as marketing, we will ask for your explicit consent or provide a clear option to decline.
Withdrawing Consent: You can withdraw your consent at any time by contacting us using the details provided in the “Contact Us” page.
3. Disclosure
We may disclose personal information if required to do so by law or if you breach our Terms of Service.
4. Platform Hosting (Shopify)
Our online store is hosted on Shopify, which provides the e-commerce platform that allows us to sell products and services. Your data may be stored through Shopify’s secure databases and applications, protected behind firewalls.
Payments: If you choose a direct payment method, your payment information is processed and stored by Shopify in compliance with PCI-DSS standards. Transaction data is retained only for as long as necessary to complete your purchase and is removed afterward.
For additional details, please review Shopify’s official policies:
5. Third-Party Service Providers
We may share your information with trusted third-party providers, such as payment processors, fraud prevention services, and logistics partners, solely to the extent necessary for them to perform services on our behalf. These providers are governed by their own privacy policies, and we encourage you to review them.
Some service providers may operate in jurisdictions outside your country of residence. When you proceed with a transaction involving such providers, your information may be subject to the laws of those jurisdictions. Once you leave our Site or are redirected to a third-party platform, this Privacy Policy no longer applies.
6. Cookies and Analytics
We use cookies and similar technologies to ensure proper site functionality, remember user preferences, and analyze traffic and usage patterns. Certain cookies may be placed by third parties to support analytics or advertising.
Managing Cookies: Most browsers automatically accept cookies, but you may modify your browser settings to remove or block them. Please note that restricting cookies may affect site performance or functionality. You can also manage preferences via our cookie banner upon visiting the Site.
7. Security
We implement reasonable technical and organizational safeguards to protect personal data from unauthorized access, loss, misuse, or disclosure. Payment information is encrypted during transmission using secure protocols such as SSL/TLS. While no system is completely secure, we follow PCI-DSS and industry-standard security practices.
8. Lawful Basis for Processing (UK GDPR)
We process personal data under one or more lawful bases, including fulfilling contractual obligations, legitimate business interests, your consent, and compliance with legal requirements.
9. Your Rights (UK)
Under applicable data protection laws, you may have rights to access, correct, delete, restrict, or transfer your personal data, as well as object to certain processing activities. Where processing is based on consent, you may withdraw it at any time. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).
10. Data Retention
We retain personal information only for as long as necessary to provide our Services, meet legal and accounting obligations, resolve disputes, and enforce agreements. Retention periods vary depending on the type of data and its purpose.
11. International Data Transfers
When personal data is transferred outside the United Kingdom, we ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent protections, in accordance with UK GDPR requirements.
12. Children’s Information
Our Services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal information, please contact us so we can take appropriate action.
13. Updates to This Privacy Policy
We may revise this Privacy Policy periodically to reflect operational, legal, or regulatory changes. Updates become effective once posted on the Site. If material changes are made, they will be clearly noted on this page.