Privacy Policy

1. Who We Are

D'Arcia Parfums is the data controller responsible for your personal information. Our registered address is [PLACEHOLDER: business address]. You can contact us regarding privacy matters at [PLACEHOLDER: privacy contact email].

2. Information We Collect

We may collect the following types of information:

• Contact details (name, email address, phone number, delivery/billing address)
• Order and transaction information
• Account information, if you create one
• Marketing preferences
• Website usage data (via cookies and analytics tools — see our Cookie Policy)
• [PLACEHOLDER: any additional data collected, e.g. through reviews, loyalty programs, or chat widgets]

3. How We Use Your Information

We use your information to:

• Process and fulfil your orders
• Communicate with you about your order or enquiries
• Send marketing communications, where you've opted in (see our Marketing Communications policy)
• Improve our website and services
• Comply with legal obligations

4. Third Parties We Share Data With

We use trusted third-party service providers to operate our store. This may include:

• Our e-commerce platform: Shopify
• [PLACEHOLDER: payment provider(s), e.g. Shopify Payments, PayPal, Klarna]
• [PLACEHOLDER: email marketing platform, e.g. Klaviyo]
• [PLACEHOLDER: analytics tools, e.g. Google Analytics, Meta Pixel]
• [PLACEHOLDER: delivery/courier partners]
• [PLACEHOLDER: any other apps or services that process customer data]

Each third party processes your data under their own privacy policies and, where required, in accordance with data processing agreements with us.

5. Legal Basis for Processing

[PLACEHOLDER: specify legal basis under UK GDPR for each processing activity — typically contract performance for orders, consent for marketing, and legitimate interests for analytics/fraud prevention].

6. International Data Transfers

[PLACEHOLDER: confirm whether any data is transferred outside the UK/EEA, e.g. via US-based service providers, and the safeguards in place].

7. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy, including any legal, accounting or reporting requirements. [PLACEHOLDER: specify retention periods where known].

8. Your Rights

Under UK GDPR, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Object to or restrict certain processing
• Request data portability
• Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, please contact us at [PLACEHOLDER: privacy contact email]. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies

Our website uses cookies and similar technologies. For details, please see our Cookie Policy.

10. Data Security

We take appropriate technical and organisational measures to protect your personal information against unauthorised access, loss or misuse. [PLACEHOLDER: any specific security measures worth mentioning].

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us through our Help page or at [PLACEHOLDER: privacy contact email].