Privacy policy
Privacy Policy
Last Updated: March 12, 2026
1. DATA CONTROLLER
The entity responsible for processing your personal data under the General Data Protection Regulation (GDPR) is:
-
Store Name: LuvruFashion
-
Legal Representative: Andries Dragos Andrei
-
Address: Luvru Fashion
c/o flexdienst – #20886
Kurt-Schumacher-Straße 76
67663 Kaiserslautern
Deutschland -
Email: luvrufashion@gmail.com
2. PERSONAL DATA WE COLLECT
We collect information that identifies you or can reasonably be linked to you, including:
-
Contact Details: Full name, shipping address, billing address, phone number, and email address.
-
Payment Information: Processed securely via Shopify Payments and Stripe. We do not store your credit card numbers or full financial details; these are handled exclusively by the secure payment providers.
-
Technical Data: IP address, browser type, device info, and interaction data collected via cookies.
3. LEGAL BASIS FOR PROCESSING
We process your personal information based on the following legal grounds:
-
Contractual Necessity: To fulfill and deliver your orders.
-
Legal Obligation: To comply with German commercial and tax laws (e.g., 10-year record keeping).
-
Consent: When you explicitly sign up for marketing materials.
-
Legitimate Interest: To ensure site security and prevent fraud.
4. INTERNATIONAL TRANSFERS & DROPSHIPPING
LuvruFashion operates on a dropshipping model. To fulfill your order, your delivery data (Name, Shipping Address, and Phone Number) is shared with our external fulfillment and logistics partners located in China.
By placing an order, you acknowledge that your data will be transferred outside the European Economic Area (EEA) to facilitate the international delivery of your goods. We ensure that your data remains protected through Standard Contractual Clauses (SCCs) to maintain a level of protection equivalent to EU standards.
5. DATA DISCLOSURE TO THIRD PARTIES
We disclose personal information to the following categories of service providers:
-
Shopify Inc.: To host and power our online store.
-
Payment Processors: Such as Stripe, to handle transactions securely.
-
Logistics Partners: Third-party suppliers and shipping carriers responsible for delivering products to your address.
-
Analytics Providers: Such as Google Analytics (only with your prior consent).
6. DATA RETENTION
-
Order Records: Retained for 10 years as required by German tax and commercial regulations.
-
Customer Accounts: Retained until you request deletion.
-
Marketing Data: Retained until you withdraw your consent or unsubscribe.
7. YOUR GDPR RIGHTS
As a resident of the European Economic Area (EEA), you have the following rights:
-
Right to Access: Request a copy of your personal data.
-
Right to Rectification: Request correction of inaccurate data.
-
Right to Erasure: Request the deletion of your data.
-
Right to Restrict/Object: Limit or object to the processing of your data.
-
Right to Data Portability: Request your data in a machine-readable format.
To exercise these rights, please contact us at luvrufashion@gmail.com.
8. COMPLAINTS
If you believe our processing violates GDPR, you have the right to lodge a complaint with the competent supervisory authority: State Commissioner for Data Protection and Freedom of Information of Thuringia (Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit).
9. COOKIES
We use essential cookies for the store to function. Non-essential cookies are only activated if you click "Accept" on our cookie banner.
