Privacy Policy

ELLEAURE respects your privacy and is committed to handling personal information responsibly and transparently.

This Privacy Policy explains how ELLEAURE collects, uses, stores and shares personal information when you visit our website, communicate with us, create an account, place an order or otherwise interact with ELLEAURE.

The registered operator responsible for ELLEAURE is identified on our Legal & Contact Information page.

Information We Collect

Depending on how you interact with ELLEAURE, we may collect information including your:

name;

billing and shipping address;

email address;

telephone number;

order and transaction information;

account information;

customer-service communications;

marketing preferences;

IP address;

browser and device information;

website activity;

cookie and tracking preferences; and

information voluntarily submitted through forms, reviews or other communications.

Payment information may be collected and processed directly by Shopify, Shopify Payments or another authorized payment provider. ELLEAURE does not normally receive your complete payment-card details.

How We Collect Information

Information may be collected directly from you when you place an order, create an account, subscribe to communications, contact us or otherwise provide information.

Information may also be collected automatically through Shopify, cookies, pixels and similar technologies.

We may receive information from service providers involved in operating our store, processing payments, preventing fraud, fulfilling orders, delivering parcels, providing analytics or supporting advertising.

Why We Use Personal Information

ELLEAURE may process personal information to:

operate the online store;

process and fulfill orders;

accept and verify payments;

arrange shipping and delivery;

provide order updates and tracking;

provide customer support;

handle returns, defects, refunds and complaints;

maintain customer accounts;

detect and prevent fraud;

secure the website;

meet legal, accounting, tax and regulatory obligations;

improve our website and services;

measure store performance;

understand customer interaction with ELLEAURE;

send marketing where permitted; and

provide or measure advertising where permitted.

Legal Bases for Processing

Where the GDPR, UK GDPR or similar law applies, ELLEAURE relies on one or more appropriate legal bases.

These may include processing necessary to perform a contract with you, comply with a legal obligation, pursue legitimate business interests that are not overridden by your rights, or processing based on your consent.

Where processing requires consent, you may withdraw that consent subject to applicable law.

The GDPR provides individuals with rights including access, rectification, erasure, restriction, portability and objection in appropriate circumstances.

Shopify

ELLEAURE uses Shopify to operate its online store.

Shopify processes customer information in connection with the ecommerce platform, checkout, orders, payments and related functionality.

Shopify maintains its own privacy documentation and data-processing terms. Shopify's current merchant framework includes its Privacy Policy and Data Processing Addendum.

Fulfillment and Shipping

ELLEAURE uses third-party fulfillment and logistics services.

Where an order is fulfilled through Branvas, information necessary to fulfill and deliver the order may be shared with Branvas, the relevant product supplier, fulfillment facility, logistics provider and delivery carrier.

Only information reasonably required for fulfillment, shipping, customer support or associated legal obligations should be shared for those purposes.

Other Service Providers

Personal information may also be shared where necessary with providers such as:

payment processors;

fraud-prevention providers;

hosting and ecommerce infrastructure;

email and communications providers;

analytics providers;

advertising platforms where enabled;

accounting or professional advisers; and

government authorities where legally required.

Service providers receive information according to the function they perform.

Advertising and Data Sharing

ELLEAURE may use advertising, analytics or marketing technologies where enabled.

Depending on the technology used and applicable US state law, certain disclosures of information for targeted or cross-context behavioral advertising may legally be considered a sale, sharing or targeted advertising, even where ELLEAURE does not receive money in exchange for personal information.

Where required by law, customers will be provided appropriate rights to opt out.

California law provides privacy rights to consumers where a business is subject to the CCPA.

Cookies

ELLEAURE uses cookies and similar technologies as described in our Cookie Policy.

Where required, non-essential technologies will be controlled through consent or privacy-preference mechanisms.

Shopify provides customer-privacy controls that can apply consent choices to Shopify-managed functionality such as pixels and checkout.

Marketing Communications

Where permitted by law, ELLEAURE may send marketing communications to customers or subscribers.

You can unsubscribe from marketing emails using the unsubscribe link included in the communication or by contacting ELLEAURE.

Withdrawing from marketing does not prevent ELLEAURE from sending transactional messages required for orders, account security, customer support or legal matters.

International Data Transfers

ELLEAURE and its service providers may process information in countries other than the country in which you live.

Where applicable data-protection law requires safeguards for international transfers, ELLEAURE and its providers may rely on lawful transfer mechanisms such as adequacy decisions, approved contractual protections or Standard Contractual Clauses.

The European Commission recognizes SCCs as one mechanism for protected international transfers under the GDPR.

Data Retention

Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected or to meet legal, tax, accounting, fraud-prevention, dispute-resolution and regulatory requirements.

Different categories of information may therefore be retained for different periods.

Your Privacy Rights

Depending on where you live, you may have rights relating to your personal information.

These can include the right to request access, correction, deletion, restriction, portability or objection.

Residents of jurisdictions with applicable US state privacy legislation may also have rights to request information about data practices and, where applicable, opt out of sale, sharing or targeted advertising.

Certain rights are subject to exceptions permitted by law.

ELLEAURE may need to verify your identity before completing certain privacy requests.

Privacy Choices

Where available, you may manage cookie and data-processing preferences through the Privacy Choices or cookie-settings functionality displayed by the ELLEAURE storefront.

Shopify allows customers to revisit and change consent preferences through its customer-privacy settings when configured by the merchant.

Children

The ELLEAURE website and products are not specifically directed toward children.

ELLEAURE does not knowingly seek to collect personal information from children in circumstances where parental or guardian consent is legally required.

If you believe a child has provided personal information unlawfully, contact ELLEAURE so the matter can be investigated.

Security

ELLEAURE uses Shopify and other professional service providers to support secure ecommerce operations.

No online system can guarantee absolute security, but reasonable administrative, organizational and technical measures are used to protect personal information.

Complaints

If you have concerns regarding ELLEAURE's use of personal information, please contact us first.

Where GDPR rights apply, you may also have the right to complain to the data-protection authority in your country.

Because ELLEAURE operates from Denmark, the relevant Danish supervisory authority is Datatilsynet.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect legal, technical or operational changes.

The updated date will appear at the top of the policy.

Contact

Privacy requests can be sent using the contact details on the ELLEAURE Legal & Contact Information page.