Privacy Policy - iLuvenvy

1. Introduction

At iluvenvy.com (“Website”), protecting your personal data and preserving your privacy are among our highest priorities. This Privacy Policy outlines how we collect, use, store, and protect your personal information in compliance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the California Consumer Privacy Act (“CCPA”). We are dedicated to maintaining transparency and ensuring that your information is handled responsibly, lawfully, and with the utmost care.

2. Scope of This Policy and the Role of the Data Controller

This Privacy Policy applies to all users who interact with iluvenvy.com, including visitors, registered users, and customers who access our services online, submit inquiries, complete transactions, or otherwise engage with our Website. For purposes of applicable data protection laws, iluvenvy.com is the data controller responsible for determining the purposes and means of processing your personal data.

3. Categories of Data Processed

We may collect and process the following categories of personal data:

a) Usage Data:
Includes information about your interactions with the Website, such as IP address, browser type and version, browsing activity, referring/exit URLs, session duration, and pages viewed.

b) Account Data:
Collected when you create or modify an account, including full name, email address, postal address, and telephone number.

c) Profile Data:
Comprises user preferences, shopping behavior, wishlist items, and history of purchases and interactions with our platform.

d) Communication Data:
Includes content and metadata associated with inquiries, customer service communications, support tickets, chat transcripts, and email correspondences.

e) Technical Data:
Encompasses device identifiers, hardware model, operating system, software version, mobile platform, and other technical configurations used to access the Website.

f) Transaction Data:
Details financial and billing information such as order history, payment method (e.g., last four digits of payment card), shipping and delivery records, and transaction confirmations.

g) Preference Data:
Relates to your marketing preferences, newsletter subscriptions, expressed product interests, and consent for receiving communications from us or third parties.

4. Legal Bases for Processing

We process your personal data on the following lawful grounds as provided by GDPR and applicable regulations:

– Performance of a Contract: To process payments, fulfill orders, deliver goods and services, and manage your account.
– Consent: For sending marketing communications, using cookies (other than essential cookies), and sharing data with third parties where legally required.
– Legitimate Interests: To enhance Website functionality, perform analytics, secure transactions, prevent fraud, and improve customer experience.
– Legal Obligations: To comply with applicable legislation, such as tax law and consumer protection regulations.

Under the CCPA, we do not sell your personal information. We use your data solely for the purposes described in this Policy and in accordance with legal bases.

5. Your Rights

Under GDPR and CCPA, you have the following rights regarding your personal data:

– Right of Access: Request access to your personal data held by us.
– Right to Rectification: Request corrections to incomplete or inaccurate information.
– Right to Erasure: Request deletion of your personal data where applicable.
– Right to Restriction: Request that we limit the use of your personal data under specific circumstances.
– Right to Portability: Request a copy of your data in a structured, commonly used, machine-readable format.
– Right to Object: Object to certain processing activities based on legitimate interests or direct marketing.
– Opt-Out (for California Residents): You may request to opt-out of any data-selling practices, though iluvenvy.com does not engage in the sale of personal data.

To exercise your rights, please contact us at [email protected].

6. Security Measures

We maintain robust technical and organizational security practices to safeguard your personal data, including:

– Encryption of data in transit and at rest
– Access controls and multi-factor authentication for administrative systems
– Routine data backups and secure storage
– Staff training in data protection and incident response
– Regular system monitoring and vulnerability assessments

7. International Data Transfers

If personal data is transferred outside of the European Economic Area (EEA), such as to data processors located in countries that may not provide the same levels of data protection, we ensure appropriate safeguards are in place. These include:

– Standard Contractual Clauses (SCCs) approved by the European Commission
– DPA agreements aligned with GDPR standards
– Additional technical and legal measures as needed to ensure regional compliance

8. Data Retention

Your personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specific retention periods include:

– Account and Profile Data: Retained as long as your account remains active, and for 3 years after closure for administrative or legal reasons.
– Transaction and Payment Data: Retained for a minimum of 7 years to meet tax and auditing requirements.
– Communication Data: Maintained for up to 3 years from the last date of communication.
– Cookie Data: As specified in our Cookie Policy below.

9. Cookie Policy

We use cookies and similar technologies to enhance the functionality and user experience on iluvenvy.com. Cookies may be categorized as follows:

– Essential Cookies: Necessary for the operation of the Website, enabling core functions like security, network management, and accessibility.
– Functional Cookies: Allow the Website to remember user preferences (such as your region or language).
– Analytics Cookies: Help us analyze website traffic and understand how users engage with the Website (e.g., Google Analytics).
– Performance Cookies: Improve performance by tracking page load times and system errors.

10. Cookie Management & Compliance (GDPR & CCPA)

Upon your first visit to iluvenvy.com, a cookie banner allows you to manage your preferences. You may accept all, reject all, or customize settings. You can also manage cookies at any time via your browser settings or via the Cookie Preferences section on our Website.

Under the GDPR, we require your explicit consent to set non-essential cookies. Under the CCPA, Californian residents may opt out of the use of certain cookies that constitute a “sale” of their information—iluvenvy.com does not engage in such practice but offers transparent cookie settings nonetheless.

11. Children’s Privacy

We do not intentionally collect or process personal data from individuals under the age of 13. If we become aware that we have inadvertently collected such data, we will delete it promptly. Parents or legal guardians who believe we may have collected information from a child should contact us at [email protected].

12. Policy Updates

From time to time, we may revise this Privacy Policy to comply with updates in legal or regulatory requirements, or to reflect modifications in our data processing activities. Material changes will be communicated to users via the Website or direct communication where appropriate. We recommend that users review the Privacy Policy periodically.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, you may reach us directly at:

Email: [email protected]

We are committed to adhering to all applicable data protection laws and providing users with the highest standard of transparency and control over their personal information. If you wish to exercise your rights or have any concerns regarding your privacy, please do not hesitate to contact us.