Privacy Policy

This Privacy Policy explains how we collect, use, and protect personal information when you visit our website or make a purchase. We comply with the General Data Protection Regulation (GDPR) and other applicable international privacy laws.


By using this website, you agree to the practices described below.

 

1. Data Controller:

 

The responsible entity under GDPR is:


Lolita Sinz

Email: support@lolitasinz.com

 

 

2. Personal Data We Collect:

 

Data you provide:

 

Name

  • Email address
  • Billing and shipping address
  • Order details
  • Payment information (processed via Shopify; not stored by us)
  • Messages sent through our contact form or email

 

 

Automatically collected data:

 

  • IP address
  • Device and browser information
  • Pages viewed
  • Time and date of visit
  • Referrer URL
  • Purchase behaviour

 

 

3. Legal Basis for Processing (Art. 6 GDPR):

 

Contract performance – Art. 6(1)(b):

 

Order processing, shipping, customer service, returns.


 

Legal obligation – Art. 6(1)(c):

 

Tax compliance, accounting, recordkeeping.


 

Consent – Art. 6(1)(a):

 

Marketing emails, newsletters, optional cookies.


 

Legitimate interests – Art. 6(1)(f):

 

Fraud prevention, analytics, site optimization, security.

 

 

4. How We Use Your Data:

 

  • To process and deliver orders
  • To provide customer service
  • To send marketing communications (if consented)
  • To improve website performance
  • To manage payments
  • To prevent fraud
  • To comply with legal requirements

 

 

5. Email Marketing (Klaviyo):

 

We use Klaviyo to send newsletters, promotional emails, and transactional messages.

Klaviyo may store data on servers in the United States under Standard Contractual Clauses (SCCs).

You may unsubscribe at any time using the link in any email.

 

 

6. Tracking and Cookies:

 

Our website uses cookies and tracking technologies to improve the user experience and analyze website performance.

 

TikTok Pixel:

Used for advertising optimization and audience measurement.

 

Meta (Facebook) Pixel:

Used for conversion tracking and targeted advertising.

 

Shopify Cookies:

Used for essential website functions such as checkout, cart management, analytics, and fraud prevention.


You may disable cookies in your browser settings.

 

 

7. Payment Processing:

 

We do not store or access your payment information.

Payments are processed securely through:

  • Shopify Payments
  • PayPal
  • Klarna
  • Apple Pay
  • Google Pay

 

All providers comply with PCI-DSS security standards.

 

 

8. Third-Party Service Providers:

 

We share data with selected service providers necessary for operating our online store:

 

  • Shopify (e-commerce platform and hosting)
  • Print-on-demand production partners
  • Shipping and logistics carriers
  • Email service provider (Klaviyo)
  • Payment service providers
  • Advertising and analytics partners (TikTok, Meta, Google)

 

We do not sell personal data.

 

 

9. International Data Transfers:

 

Data may be transferred outside the EU, including to the United States and Canada, particularly through Shopify, Klaviyo, TikTok, and Meta.


These transfers are protected by:

Standard Contractual Clauses (SCCs), Data Processing Agreements, and platform-level security measures.

 

 

10. Data Retention:

 

  • Order data: up to 10 years (legal requirement)
  • Marketing data: until you unsubscribe
  • Analytics data: typically 14–26 months
  • Customer service data: until resolved

 

 

11. Your GDPR Rights:

 

Individuals within the EU and EEA have the right to:

  • Access their personal data
  • Request correction
  • Request deletion
  • Restrict processing
  • Transfer their data (data portability)
  • Withdraw consent
  • Object to certain forms of processing

 

To exercise your rights, email: support@lolitasinz.com

 

 

12. Children’s Privacy:

 

We do not knowingly collect data from individuals under the age of 16.

If you believe such data has been provided, contact us for removal.

 

 

13. Data Security:

 

We use SSL encryption, secure servers, Shopify’s built-in protections, access restrictions, and fraud prevention tools to safeguard personal information.

No system can guarantee absolute security, but we take appropriate measures to protect data.

 

 

14. Changes to This Privacy Policy:

 

This Privacy Policy may be updated periodically.

The most recent version will always be posted on this page.

 

 

15. Contact:

 

For questions about data protection or GDPR rights, contact:

support@lolitasinz.com

 

Last updated: [20.09.2025]