Privacy Policy
1. Data Controller
The operator of valeriemacaulay.com is responsible for processing your personal data in compliance with global privacy laws (GDPR, CCPA, etc.).
2. Information We Collect
We process:
- Identity Data (name, address, email)
- Transaction Data (order history, payment details)
- Technical Data (IP address, device type, cookies)
3. Purpose & Legal Basis
| Purpose | Legal Basis (GDPR) | Retention Period |
|---|---|---|
| Order Processing | Contract (Art. 6(1)(b)) | 5 years |
| Customer Support | Legitimate Interest (6(1)(f) | 3 years |
| Marketing* | Consent (6(1)(a)) | Until withdrawn |
*Opt-in required for newsletters
4. Data Sharing
Limited to:
• Payment processors (PCI-DSS compliant)
• Shipping carriers (address/contact only)
• Analytics providers (anonymous data)
5. International Transfers
Data may be transferred to:
- EU-approved countries
- US providers with Standard Contractual Clauses
6. Your Rights
You may:
→ Access/rectify your data
→ Request deletion*
→ Object to processing
→ Data portability
*Exceptions may apply for legal compliance
7. Security Measures
We implement:
• AES-256 encryption
• Regular penetration testing
• Role-based access controls
8. Cookies
Essential cookies only for:
✓ Shopping cart functionality
✓ Account authentication
Manage preferences via browser settings.
9. Children’s Privacy
We do not knowingly collect data from users under 16.
10. Policy Updates
Changes will be posted here with effective dates.