At Global Vibes Boutique, we take data. . .
Data Controller
Global Vibes Boutique is the data controller of your. . . .
Personal Data Collected
We collect personal data when you purchase on our website, subscribe to our newsletter, or contact us. The personal data we collect may include your name, email address, phone number, shipping address, and payment details.
We use cookies and similar technologies to collect information about your device, browsing behaviour and preferences on our website. For more information on how we use cookies and how you can manage your cookie preferences, please refer to our Cookie Policy.
Purpose of Processing Personal Data
We use your personal data to fulfil your orders, process your payments, deliver your purchases, and communicate with you about your orders. We also use your personal data to send promotional offers and updates about our products and services if you subscribe to our newsletter.
Legal Basis for Processing Personal Data
We process your personal data on the legal basis of performance of a contract (i.e., to fulfil your orders and process your payments), legitimate interests (i.e., to communicate with you about our products and services and to send you promotional offers and updates), and your consent (i.e., to send you our newsletter).
Sharing Personal Data
We do not sell, rent or trade your personal data to third parties. However, we may share your personal data with our service providers, such as our payment processors and shipping carriers, to fulfil your orders.
We may also share your personal data with law enforcement agencies, regulatory authorities, or other third parties if we are required to do so by law or in response to a court order.
Data Retention
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected unless a longer retention period is required or permitted by law. For example, we retain your purchase history for seven years for tax purposes.
Your Rights
Under the GDPR, you have the following rights regarding your personal data:
Right to access: You have the right to access and receive a copy of the personal data we hold about you.
Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to erasure: You have the right to request that we erase your personal data, subject to certain exceptions.
Right to restrict processing: You have the right to request that we restrict the processing of your personal data, subject to certain exceptions.
Right to data portability: You can receive the personal data we hold about you in a structured, commonly used and machine-readable format and transmit it to another data controller.
Right to object: You have the right to object to processing your personal data, subject to certain exceptions.
If you wish to exercise any of these rights, please get in touch with us via email. We may request additional information to verify your identity before fulfilling your request.
Data Security
We take appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. We restrict access to your personal data to only those employees and service providers who need to know it to fulfil their tasks.
Changes to the Privacy Policy
We reserve the right to modify or update this Privacy Policy at any time without prior notice.
