Privacy policy

At LillSash, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and safeguard your data when you visit our online store and purchase products such as shirts, skirts, and shorts. By using our website, you agree to the practices described in this policy.

1. Information We Collect

We collect only the information necessary to process your orders and improve your shopping experience. This includes:

  • Personal Identification Information: Your full name, billing and shipping address, and email address ([email protected] is our primary contact for privacy inquiries).
  • Payment Information: Credit card details, PayPal account information, or other payment method data, which is processed securely by our third-party payment processors. We do not store full payment card numbers on our servers.
  • Order Details: Items purchased (e.g., shirts, skirts, shorts), quantities, sizes, colors, and order history.
  • Technical Data: IP address, browser type, device information, and cookies (see Section 5 for details).

2. How We Use Your Information

We use your data solely for the following purposes:

  • To process and fulfill your orders, including shipping and delivery.
  • To communicate with you about your order status, returns, or customer service inquiries via email ([email protected]).
  • To improve our website, product offerings, and user experience.
  • To comply with legal obligations, such as tax and accounting requirements.
  • To send occasional promotional emails about new products or offers, only if you have opted in. You can unsubscribe at any time.

We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

3. Data Storage and Retention

Your personal data is stored securely on our servers and those of trusted service providers (e.g., payment gateways, shipping carriers). We retain your information only as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Typically, order data is kept for up to 5 years for accounting and warranty purposes. After that, it is securely deleted or anonymized.

4. Data Protection Measures

We implement industry-standard security measures to protect your data, including:

  • SSL/TLS encryption for all data transmitted between your browser and our website.
  • Firewalls and secure server infrastructure.
  • Regular security audits and vulnerability assessments.
  • Restricted access to personal data only to authorized personnel who need it to perform their duties.

Despite these measures, no online transmission is 100% secure. We cannot guarantee absolute security, but we strive to protect your data to the best of our ability.

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience. These include:

  • Essential Cookies: Required for the website to function (e.g., shopping cart functionality).
  • Analytics Cookies: Help us understand how you use our site (e.g., Google Analytics) to improve performance.
  • Functional Cookies: Remember your preferences (e.g., language or currency settings).

You can control cookie settings through your browser. Disabling certain cookies may affect site functionality. We do not use cookies for targeted advertising without your explicit consent.

6. Third-Party Services

We may share your data with trusted third parties who assist us in operating our business, such as:

  • Payment processors (e.g., Stripe, PayPal) for secure transaction handling.
  • Shipping carriers (e.g., FedEx, UPS) for order delivery.
  • Analytics providers (e.g., Google Analytics) for website improvement.

These third parties are contractually obligated to protect your data and use it only for the services they provide to us. We do not authorize them to use your information for any other purpose.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the data we hold about you.
  • Correction: Ask us to correct inaccurate or incomplete information.
  • Deletion: Request deletion of your data, subject to legal retention requirements.
  • Objection: Object to the processing of your data for marketing purposes.
  • Data Portability: Request a transfer of your data to another service provider.

To exercise these rights, please contact us at [email protected]. We will respond to your request within 30 days, as required by applicable law.

8. International Data Transfers

As an online store serving customers worldwide, your data may be transferred to and processed in countries outside your own, including the United States. We ensure that such transfers comply with applicable data protection laws (e.g., GDPR, CCPA) by using standard contractual clauses or other approved mechanisms.

9. Children's Privacy

Our website is not intended for children under the age of 16. We do not knowingly collect personal information from minors. If we become aware that a child has provided us with data, we will take steps to delete it promptly. Please contact us at [email protected] if you believe this has occurred.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page, and we encourage you to review it periodically. Continued use of our website after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please email us at [email protected]. We are here to help and will respond as promptly as possible.