Illulines Studio (“we,” “us,” “our”) operates this store and website, including all related information, content, features, tools, products, and services (collectively, the “Services”) to provide you, the customer, with a curated shopping experience. Illulines Studio is powered by Shopify, which enables us to provide the Services.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you access or use our Services, make purchases, or otherwise interact with us. By using our Services, you acknowledge that you have read and understood this Privacy Policy.

Personal information is any data that can identify you directly or indirectly. We may collect:

Information you provide directly:

• Contact details: name, address, billing/shipping address, phone number, email
• Financial information: credit/debit card numbers, financial account details, transaction details, payment method, payment confirmations
• Account information: username, password, security questions, preferences, settings
• Transaction information: items you view, add to cart, wishlist, purchase, return, exchange, or cancel, plus past transactions
• Communications with us: details you share when contacting customer support or otherwise communicating with us

Information we collect automatically

• Device information: device type, browser, network connection, IP address, other unique identifiers
• Usage information: how and when you interact with or navigate the Services
• Cookies and similar tracking technologies (see section 5)
  

Information from third parties

• Shopify and payment processors (to process and fulfill orders)
• Marketing, analytics, and advertising partners
• Other service providers or partners we work with
  

How we collect this information

• Directly from you: when you create an account, use the Services, make a purchase, or communicate with us
• Automatically: via your device and browser when using our Services, including through cookies and similar technologies
• From service providers and partners: when they collect or process data on our behalf

We use your personal information for the following purposes, based on legal grounds under GDPR and Swiss law:

• To provide and improve Services (Contract/Legitimate Interest):
  Process payments, fulfill orders, arrange shipping, handle returns, manage accounts, and create a personalized shopping experience.
  
• Marketing and advertising (Consent/Legitimate Interest):
  Send promotional communications and show personalized recommendations or ads based on your activity. You can withdraw consent at any time.
  
• Security and fraud prevention (Legal Obligation/Legitimate Interest):
  Protect our Services, detect and prevent fraud, ensure payment security, and protect public safety.
  
• Customer support (Contract/Legitimate Interest):
  Respond to inquiries, manage orders, and maintain our relationship with you.
  
• Legal compliance (Legal Obligation):
  Comply with laws, respond to legal requests, and enforce our policies.

We use cookies and similar technologies to improve our Services, remember preferences, and analyze usage. Non-essential cookies are only set with your consent. You can manage cookie preferences in your browser settings.

For details on Shopify cookies, see Shopify Cookies.

We only share your information when necessary:

• With Shopify and service providers: Payment processing, IT services, analytics, fulfillment, shipping, and cloud storage.
• With marketing and business partners: Personalized ads and marketing (with your consent where required).
• With affiliates or corporate group members.
• As required by law or to protect rights: Legal requests, investigations, or enforcement of terms.
• With your consent: E.g., social media integrations, product shipping.

We do not sell your personal information.

Reviews or other content you post publicly may be seen by anyone. Be mindful of the information you share.

Our Services may link to other websites. We are not responsible for the privacy or security practices of third parties. Information shared publicly or on third-party platforms may be visible to others.

Our Services are not intended for children under 16. If a child under 16 provides personal information, a parent or guardian may contact us to request the deletion of that information.

We take security seriously, but no system is completely secure. Information you send may not be safe during transmission.

We retain personal information only as long as necessary to:

• Provide Services and manage accounts
• Comply with legal obligations (e.g., tax, accounting laws)
• Resolve disputes or enforce contracts
  

Approximate retention periods:

• Orders and payment info: 7–10 years
• Marketing data: until consent is withdrawn
• Customer support messages: 2–5 years, depending on context

Depending on where you live, you may have the right to:

• Access, correct, delete, or receive a copy of your personal information
  
• Object to or restrict processing for marketing or other purposes
  
• Withdraw consent at any time (this does not affect prior lawful processing)
  
• Opt out of marketing communications via links in emails or by contacting us
  

To exercise your rights, email us at illulines.studio@gmail.com
We will not discriminate against you for exercising these rights.

For residents of the EU/EEA/UK, you may also complain to your local data protection authority.

Your information may be stored and processed outside your country, including outside the EU/EEA or Switzerland. We use safeguards like Standard Contractual Clauses to ensure adequate protection.

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or operational needs. We will update the “Last updated” date and provide notice as required by law.

If you have questions or concerns about this Privacy Policy or your personal data, contact us at:

Email: illulines.studio@gmail.com

Address: Røde Mølle Banke 20, Søvind, 8700, Denmark

For legal purposes, Illulines Studio is the data controller of your personal information.