5.1 Privacy Policy

Last updated: 18/04/2026

This privacy policy applies to all services provided by Cecilia London, accessible via info@cecilialondon.com and based at [Business address]. We respect our customers’ privacy and treat the personal information you provide to us confidentially and in accordance with the General Data Protection Regulation (GDPR).

1. What data we collect

We collect personal data that you provide to us when placing an order, creating an account or contacting our customer service team, including:

Full name

Address and billing details

Email address

Telephone number

Payment details (processed via our payment providers; not stored on our servers)

IP address and device/browser details

Order and transaction history

Data regarding your activities and behaviour on our website (via cookies)

2. Purposes of processing

Processing, dispatching and invoicing your orders.

Providing customer service and support.

Sending order updates, tracking information and relevant information.

Improving our services, website and product range.

Preventing and detecting fraud and misuse.

Sending marketing communications, only where you have given your consent.

3. Legal bases

We process your data on the basis of the performance of the contract (your order), your consent (e.g. for marketing), a legal obligation (such as tax administration) and our legitimate interest (such as fraud prevention and improving our services).

4. Sharing data with third parties

Your data will only be shared with third parties to the extent necessary for us to provide our services, including:

Our payment providers: [Payment providers]

Our shipping and delivery partners: [Shipping services]

Our supplier(s) for the processing and dispatch of your order.

Providers of analytics and marketing services (where applicable and in accordance with your cookie preferences).

Where required, data processing agreements have been entered into with all these parties. We never sell your data to third parties. As part of our dispatch is carried out directly from a supplier outside the EEA (China), a transfer outside the EEA may take place; we observe appropriate safeguards in this regard.

5. Retention period

We do not retain your data for longer than is necessary for the purposes for which it was collected, or for as long as is required by law (such as a 7-year statutory retention obligation for tax records).

6. Cookies

Our website uses cookies to improve functionality, analyse visitor behaviour and support marketing. Please see our separate Cookie Policy for further information. You can always adjust your preferences via the cookie banner or your browser settings.

7. Security

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. All payments are processed via a secure SSL connection.

8. Your rights

You have the right to access, rectify, have your personal data erased or restrict its processing. You may also object to the processing, withdraw your consent and submit a request for data portability. To do so, please contact us at [Store email address]. You also have the right to lodge a complaint with the supervisory authority (in the Netherlands: the Dutch Data Protection Authority).

9. Contact

Cecilia London — [Registered office address] — info@cecilialondon.com