Privacy Policy

Effective Date: November 26, 2024

Luxe and Lovely respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit LuxeAndLovely.com.

By using this website, you consent to the practices described in this policy.

1. Data Controller Information

  • Business Name: Luxe and Lovely
  • Website: LuxeAndLovely.com
  • Email: gibranmahardika96@gmail.com
  • Address: Komplek Danamon Block C3 No. 34-35, Jatiasih, Jatisari, Bekasi

2. Personal Data We Collect

We collect and process the following types of personal data:

a) Data You Provide Directly

  • Name, email address, phone number, and billing/shipping addresses during account creation or checkout.
  • Payment details (processed securely by third-party payment providers).

b) Data We Collect Automatically

  • IP address, browser type, operating system, and browsing behavior on our website.
  • Cookies and similar technologies to improve your user experience (see Section 8).

c) Data from Third Parties

  • Payment processors may share transaction data to confirm payments.

3. How We Use Your Personal Data

We process your data for the following purposes:

  • To process and deliver your orders.
  • To manage your account and provide customer support.
  • To send transactional emails (e.g., order confirmations, shipping updates).
  • To improve our website, products, and services.
  • To comply with legal obligations (e.g., tax reporting).

Legal Basis for Processing:

  • Performance of a contract (e.g., processing orders).
  • Consent (e.g., email marketing).
  • Legitimate interest (e.g., website analytics).
  • Legal compliance (e.g., fraud prevention).

4. Data Sharing and Disclosure

We do not sell or rent your personal data. However, we may share your information with:

  • Service Providers: Payment processors, shipping companies, and IT providers.
  • Legal Authorities: If required by law or to protect our rights and property.
  • Business Transfers: In case of a merger, sale, or acquisition, your data may be transferred.

All third-party partners are bound by contractual agreements to protect your data.

5. Data Retention

We retain your personal data only as long as necessary for:

  • The purposes outlined in this policy.
  • Legal or regulatory obligations (e.g., tax records).

Once data is no longer required, we securely delete or anonymize it.

6. Data Security

We implement robust security measures to protect your data:

  • SSL encryption for data transmitted over the internet.
  • Secure storage of data with restricted access.
  • Regular monitoring for potential security vulnerabilities.

While we strive to protect your data, no system is completely secure. Use caution when sharing sensitive information online.

7. Your Rights Under GDPR

As a resident of the European Economic Area (EEA), you have the following rights:

a) Access

Request a copy of the personal data we hold about you.

b) Rectification

Request correction of inaccurate or incomplete data.

c) Erasure (Right to Be Forgotten)

Request deletion of your data, subject to legal obligations.

d) Restriction of Processing

Request limitations on how your data is used.

e) Data Portability

Request transfer of your data to another service provider in a machine-readable format.

f) Objection

Object to processing based on legitimate interests or direct marketing.

g) Withdraw Consent

Withdraw consent for specific processing activities (e.g., marketing emails).

To exercise these rights, contact us at gibranmahardika96@gmail.com. We will respond within one month of receiving your request.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience.

  • Essential Cookies: Necessary for website functionality.
  • Performance Cookies: Collect data on site usage for analytics.
  • Marketing Cookies: Track activity for personalized ads.

You can manage cookie preferences through your browser settings.

9. International Data Transfers

Your data may be transferred to and processed in countries outside the EEA. We ensure such transfers are protected by appropriate safeguards (e.g., standard contractual clauses).

10. Children’s Privacy

Our website is not intended for children under 18. We do not knowingly collect data from minors. If you believe a child has provided personal data, contact us to request deletion.

11. Changes to This Privacy Policy

We may update this policy periodically to reflect changes in our practices or legal requirements. Updates will be posted on this page with an updated effective date.

12. Contact Information

For questions, concerns, or to exercise your rights under this policy, please contact us:

This Privacy Policy ensures compliance with GDPR while maintaining transparency and protecting user privacy. Let me know if you need further assistance!