Personal data categories

Depending on how you use the site, we may process identity and contact details, order and delivery information, transaction-related records, customer-service communications, technical information such as device or browser data, and cookie or preference information.

For orders, we use the information required to receive, process and fulfil purchases, provide delivery updates and handle returns, refunds or exchanges.

Processing purposes and GDPR legal bases

Personal data may be processed to perform a contract, comply with legal obligations, pursue legitimate interests such as fraud prevention and service security, or on the basis of consent where consent is required.

• Contract performance: order administration, payment coordination, delivery and customer service.
• Legitimate interests: service integrity, fraud prevention, security and operational improvement, balanced against your rights.
• Legal obligations: records and compliance required by applicable law.
• Consent: optional processing that requires consent, including relevant cookie categories where enabled.

Payment processing

Payments are processed through Stripe. Payment data is handled through the checkout payment flow and relevant payment networks. Do not send a full card number, CVV, CVC, PIN or other card security code through ordinary customer-service email.

Service providers

We may use service providers to support hosting, order fulfilment, delivery, payment processing, customer support, technical operations and other functions required to operate the store. Providers receive data only as needed for their role and subject to applicable data-protection obligations.

International data transfers

Where personal data is transferred across borders, appropriate safeguards are used where required by applicable data-protection law. The safeguards used depend on the destination, recipient and legal framework.

Data retention

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected, including contractual, accounting, fraud-prevention, dispute-resolution and legal-compliance needs.

Your data-protection rights

Cookies and similar technologies

The site may use necessary, functional, analytics and advertising or marketing cookies or similar technologies. Non-essential categories are handled according to applicable consent requirements. Please see the Cookie Policy for more information.

Security

We use technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure or loss. No online service can be described as absolutely secure.

Privacy contact

For privacy, personal-data, consent or data-subject requests, contact privacy@adornla.com.