Datenschutzerklärung

This Privacy Policy describes how bridelily.shop collects, uses, stores, discloses and otherwise processes personal information when you visit our website, make a purchase, create or use an account, contact us, interact with our services or otherwise communicate with us.

For privacy-related questions or requests, contact:

Email: info@bridelily.shop

Our processing of personal data relating to individuals in Germany and the European Economic Area is intended to be conducted in accordance with applicable data-protection law, including the General Data Protection Regulation ("GDPR").

Personal Data We May Collect

Depending on how you interact with bridelily.shop, we may process information such as:

• Your name;
• Billing address;
• Delivery address;
• Email address;
• Telephone number if provided;
• Order details;
• Products purchased or viewed;
• Customer-account information;
• Payment and transaction information;
• Refund and return information;
• Customer-service communications;
• Browser information;
• Device information;
• IP address;
• Cookie identifiers;
• Website usage information;
• Shopping-cart information;
• Marketing preferences; and
• Fraud-prevention and security information.

We seek to collect only information reasonably relevant to the purposes for which it is processed.

How We Collect Information

Personal data may be collected:

Directly from you, for example when you place an order, create an account, contact customer service or subscribe to marketing.

Automatically, for example through cookies, server logs and similar technologies when you use our website.

From service providers, for example payment processors, fulfilment providers, shipping carriers, fraud-prevention providers and ecommerce technology providers.

From advertising or analytics partners, where such processing is permitted and any legally required consent has been obtained.

Why We Process Personal Data

We may process personal data for purposes including:

• Providing our website and ecommerce services;
• Processing and fulfilling orders;
• Processing payments;
• Confirming transactions;
• Arranging shipping and delivery;
• Managing returns and refunds;
• Responding to customer-service inquiries;
• Maintaining customer accounts;
• Detecting and preventing fraud;
• Protecting website and transaction security;
• Complying with legal obligations;
• Maintaining business and accounting records;
• Improving website performance and functionality;
• Understanding how customers use our services;
• Sending service-related communications;
• Sending marketing communications where legally permitted; and
• Establishing, exercising or defending legal claims.

Legal Bases Under the GDPR

Where the GDPR applies, we process personal data only where an appropriate legal basis exists.

Depending on the processing activity, this may include:

Performance of a Contract

We process information necessary to take steps requested before entering into a contract or to perform a contract with you.

This includes processing information necessary to accept, process, fulfil and deliver an order.

Legal Obligations

We may process personal information where necessary to comply with legal obligations, including accounting, taxation, consumer-protection, fraud-prevention or regulatory requirements.

Legitimate Interests

We may process information where necessary for legitimate business interests, provided those interests are not overridden by your rights and interests.

Such interests may include protecting our store, preventing fraud, maintaining network security, improving our services and defending legal claims.

Consent

Where required, we may process information on the basis of your consent.

For example, consent may be used for certain marketing activities or non-essential cookies.

Where processing is based on consent, you may withdraw your consent at any time for future processing.

GDPR Article 13 requires information concerning the controller, processing purposes, legal bases and other relevant information to be provided when personal data are collected.

Shopify

Our ecommerce store may be powered by Shopify.

Shopify and its affiliated or contracted service providers may process personal data in connection with services such as hosting, checkout, transaction processing, fraud prevention, analytics and ecommerce administration.

The exact role of Shopify or another provider may depend on the relevant processing activity.

Payment Processing

Payment information may be transmitted directly to payment processors.

We may receive transaction-related information such as payment confirmation, payment method type, transaction status and fraud-screening information.

We do not require customers to send complete payment-card credentials to us by ordinary email.

Order Fulfilment and Shipping

We may disclose information necessary to fulfil and deliver your order to relevant service providers, including:

• Fulfilment providers;
• Warehousing providers;
• Logistics providers;
• Postal operators; and
• Shipping carriers.

The information shared is limited to what is reasonably necessary for the relevant service.

Customer Service

If you contact us, we may process your communications, order details and related information to respond to your inquiry, resolve a problem, administer a return or refund and maintain records of the interaction.

Marketing

Where permitted by applicable law, we may use contact information to communicate information concerning products, offers or services.

Where consent is legally required, marketing communications will be sent on the basis of appropriate consent.

You may unsubscribe from electronic marketing using the unsubscribe mechanism provided in the communication or by contacting:

info@bridelily.shop

Withdrawal of marketing consent does not affect necessary transactional communications concerning existing orders.

Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Some technologies are strictly necessary for functions such as:

• Maintaining a shopping cart;
• Enabling checkout;
• Maintaining security;
• Remembering privacy choices; and
• Providing functionality expressly requested by the user.

Other technologies may support analytics, personalization or advertising.

Under Germany's TDDDG, storing or accessing information on a user's terminal equipment generally requires consent unless a statutory exception applies, including where access is strictly necessary to provide a digital service expressly requested by the user.

Where consent is legally required, relevant non-essential technologies should not be activated until appropriate consent has been obtained.

Managing Cookie Choices

Where our consent-management tools provide the functionality, users may accept, reject or modify categories of non-essential technologies.

Withdrawal of consent does not affect processing carried out lawfully before consent was withdrawn.

Strictly necessary technologies may continue to operate where they do not require consent under applicable law.

Disclosure of Personal Information

We may disclose personal data where reasonably necessary to:

• Shopify and ecommerce technology providers;
• Payment processors;
• Shipping and fulfilment providers;
• IT and hosting providers;
• Analytics providers;
• Customer-service providers;
• Security and fraud-prevention providers;
• Professional advisers;
• Government bodies where disclosure is legally required; and
• Other persons involved in a corporate transaction where permitted by law.

We do not authorize service providers to use personal information contrary to applicable data-protection law.

International Transfers

Some providers may process personal information outside Germany or the European Economic Area.

Where GDPR restrictions concerning international transfers apply, relevant transfers should be supported by a legally recognized transfer mechanism, such as:

• An adequacy decision;
• Appropriate contractual safeguards;
• Standard contractual clauses; or
• Another lawful transfer mechanism.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to satisfy applicable legal, accounting, tax, fraud-prevention, dispute-resolution and recordkeeping obligations.

Retention periods may therefore differ depending on the type of information and the reason it is processed.

When information is no longer required, we may delete or anonymize it where appropriate.

Data Security

We use reasonable organizational and technical measures intended to protect personal information against unauthorized access, disclosure, alteration, loss or destruction.

However, no internet-based system or electronic storage method can be guaranteed to be completely secure.

Customers should use appropriate precautions to protect account credentials and should not share passwords with unauthorized persons.

GDPR Rights

Subject to applicable conditions, limitations and exceptions, individuals may have rights including:

• The right of access;
• The right to rectification;
• The right to erasure;
• The right to restriction of processing;
• The right to data portability;
• The right to object to certain processing;
• The right to withdraw consent; and
• The right to lodge a complaint with a competent data-protection supervisory authority.

Exercising Privacy Rights

To submit a privacy request, contact:

info@bridelily.shop

We may request reasonable information necessary to confirm identity before acting on a request.

We will not request information that is disproportionate to the verification required.

Automated Decision-Making

Where legally relevant automated decision-making or profiling produces legal or similarly significant effects, we will provide the information and protections required by applicable law.

Routine fraud-detection or transaction-security tools may use automated indicators to assess transaction risk.

Children's Privacy

Our website is not intended to knowingly collect personal information from children in circumstances prohibited by applicable law.

If you believe that a child has provided personal information improperly, contact us at info@bridelily.shop.

Third-Party Websites

Our website may contain links to third-party websites or services.

We are not responsible for the independent privacy practices of third parties.

Customers should review the privacy information provided by the relevant third party.

Changes to This Privacy Policy

We may update this Privacy Policy when reasonably necessary to reflect changes in our services, technologies, business practices or legal requirements.

The current version will be displayed on bridelily.shop together with the applicable update date.

Contact

For privacy-related questions and requests:

bridelily.shop
Email: info@bridelily.shop