Privacy Policy
PRIVACY POLICY
INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE RESPONSIBLE PARTY
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data refers to all data that can personally identify you.
1.2 The party responsible for data processing on this website, as per the General Data Protection Regulation (GDPR), is Elaine’s Boutique. The responsible party for processing personal data is the individual or legal entity who, alone or in conjunction with others, decides on the purposes and means of processing personal data.
1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries directed to the responsible party). You can recognize an encrypted connection by the "https://" string and the lock symbol in your browser.
DATA COLLECTION WHEN VISITING OUR WEBSITE
When you visit our website for informational purposes only (i.e., you do not register or otherwise provide information), we only collect the data that your browser transmits to our server (known as "server log files"). This includes:
-
Our visited website
-
Date and time of access
-
Data volume transmitted (in bytes)
-
Source/reference from which you reached the page
-
Browser used
-
Operating system used
-
IP address (potentially anonymized)
The processing is based on our legitimate interest in improving the stability and functionality of our website, per Art. 6(1)(f) GDPR. The data will not be transferred or used otherwise unless specific evidence suggests illegal use.
COOKIES
We use cookies to make your visit more attractive and enable the use of certain functions. Cookies are small text files stored on your device. Some are session cookies (deleted after your session ends); others are persistent cookies that recognize you on future visits.
Cookies may collect browser data, IP addresses, and location data. We may use cookies to simplify the ordering process or for marketing purposes. The legal basis is Art. 6(1)(b) or 6(1)(f) GDPR.
You can configure your browser settings to control cookies:
Please note that disabling cookies may limit the functionality of our site.
CONTACT
If you contact us (e.g., via contact form or email), we collect personal data. This is used solely for responding to your inquiry under Art. 6(1)(f) GDPR, or 6(1)(b) if related to contract fulfillment. Your data will be deleted once the inquiry is resolved unless legal retention obligations apply.
DATA PROCESSING FOR CUSTOMER ACCOUNTS & ORDER FULFILLMENT
Under Art. 6(1)(b) GDPR, we collect and process personal data if you voluntarily provide it to fulfill an order or create an account. You may request account deletion at any time. We will retain data only for legal/tax purposes or if you consent to continued use.
USE OF YOUR DATA FOR DIRECT ADVERTISING
6.1 Newsletter Subscription
If you sign up for our newsletter, we will send periodic promotional emails. You must confirm your subscription through a double opt-in process. Legal basis: Art. 6(1)(a) GDPR. You may unsubscribe at any time via the newsletter link or by contacting support@elainesboutique-capetown.co.za
6.2 Newsletter to Existing Customers
If you provided your email during a purchase, we may email you offers for similar products. This is done based on our legitimate interest in marketing under Art. 6(1)(f) GDPR. You can object at any time with no additional cost.
DATA PROCESSING FOR ORDER HANDLING
7.1 We may share your data with delivery services and payment providers as necessary to fulfill your order. Legal basis: Art. 6(1)(b) GDPR.
7.2 Payment Providers
-
PayPal: Data is transferred to PayPal (Europe) S.a.r.l. et Cie, S.C.A., Luxembourg.
-
SOFORT: Data is transferred to SOFORT GmbH, part of Klarna Group, Germany.
More on SOFORT’s data policy
CONTACT FOR REVIEW REMINDERS
We may use your email address to request a product review, provided you gave prior consent per Art. 6(1)(a) GDPR. You may withdraw this consent at any time.
RIGHTS OF THE DATA SUBJECT
As per the GDPR, you have the following rights:
-
Access (Art. 15 GDPR)
-
Correction (Art. 16 GDPR)
-
Erasure (Art. 17 GDPR)
-
Restriction (Art. 18 GDPR)
-
Data portability (Art. 20 GDPR)
-
Withdraw consent (Art. 7(3) GDPR)
-
Lodge a complaint (Art. 77 GDPR)
DATA RETENTION PERIOD
Personal data is stored in accordance with statutory retention periods (e.g., tax/commercial laws). Once expired, your data is routinely deleted unless further retention is required for legal, contractual, or operational purposes.