Privacy Policy
Privacy & GDPR Policy – Serafina Luxe (Supplier Data Sharing Included)
Introduction
This Privacy Policy explains how Serafina Luxe handles personal data in accordance with the EU General Data Protection Regulation (GDPR). By using our website or placing an order, you agree to the data practices described here.
Data We Collect
We collect only the information necessary to process orders and provide customer service. This includes name, address, contact details, order details and payment confirmation (never full card details).
Why We Collect Personal Data
We use personal data strictly for:
-
processing orders
-
arranging delivery
-
communicating with customers
-
resolving service or product issues
-
complying with EU legal obligations
We do not sell or trade customer data.
Sharing Data With Suppliers (Legal Requirement)
Some products are sold and invoiced directly by suppliers. For these orders, Serafina Luxe must share limited customer information with the supplier so they can prepare and ship the order. The shared information includes only:
-
name
-
delivery address
-
contact details
-
ordered products
No financial information is ever shared. Suppliers may use this data only for fulfilling the order and may not use it for marketing unless the customer explicitly consents.
Legal Basis for Sharing Data
This data sharing is permitted under GDPR Article 6(1)(b), as it is required to fulfill the contract (your order). Without this, the supplier cannot ship your purchase.
Customer Rights Under GDPR
Customers have the right to:
-
access their data
-
request correction
-
request deletion where legally possible
-
restrict processing
-
object to data use
-
request a copy of their data (data portability)
Requests can be made via our support email.
Data Storage and Security
Your data is stored securely on EU-compliant servers. We use security measures to protect your data from unauthorized access, loss or misuse.
Retention Period
We keep order-related data only as long as required for legal, tax and accounting purposes. After this period, data is deleted or fully anonymized.
Third-Party Services
We use necessary third-party services such as payment processors and logistics partners. These partners handle personal data only as required to deliver the service and are GDPR-compliant.
Cookies
Our website may use cookies to improve site functionality. Users can manage cookie settings through their browser.
Changes to This Policy
We may update this Privacy Policy when necessary. Updates will be posted on this page.
Contact Information
For questions related to privacy, data protection or GDPR rights, contact us via email or through our website contact form.
