Privacy policy

Last updated: [07.04.2025]

This Privacy Policy describes how Studio Rebecca (the "Site," "we," "us," or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from studiorebecca.myshopify.com (the "Site") or otherwise communicate with us (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" refers to you, the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected under this Privacy Policy.

Data Controller

The Data Controller responsible for the processing of personal data is Rebecca Dömling, based at Bisp Eskilsgatan 1A, 272 34 Simrishamn, Sweden. For any questions regarding the use of your personal data or if you wish to exercise your rights, please contact us at beeingrebecca@gmail.com.

Acceptance of Terms

Please read this Privacy Policy carefully. By using and accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access any of the Services.

Our store is hosted on Shopify. You can view Shopify’s Privacy Policy here: https://www.shopify.com/legal/privacy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date, and take any other steps required by applicable law.

What Data We Collect

We collect personal data provided directly by you when you interact with our services, such as when you sign up for newsletters, place an order, or fill out contact forms. The types of personal data we collect may include, but are not limited to, your name, email address, phone number, IP address, and payment details.

Purpose of Data Processing

We use your personal data to provide, improve, and personalize our services. This includes processing orders, sending you relevant information or promotional materials (if you have opted in), and improving the customer experience. Additionally, we may use your data to comply with legal obligations.

Legal Basis for Data Processing

We process your personal data based on the following legal grounds:

  1. Consent (where applicable, for example, for marketing communications).

  2. Performance of a contract (e.g., for processing orders or customer service).

  3. Legitimate interests (such as improving our services).

  4. Compliance with legal obligations (e.g., tax or accounting requirements).

How We Collect and Use Your Personal Information

To provide the Services, we collect and have collected over the past 12 months personal information about you from a variety of sources, as set out below. The information that we collect and use varies depending on how you interact with us.

In addition to the specific uses set out below, we may use information we collect about you to communicate with you, provide the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

What Personal Information We Collect

The types of personal information we obtain about you depend on how you interact with our Site and use our Services. When we use the term "personal information," we are referring to information that identifies, relates to, describes, or can be associated with you. The following sections describe the categories and specific types of personal information we collect.

Information We Collect Directly from You

Information that you directly submit to us through our Services may include:

  • Basic contact details: your name, address, phone number, email.

  • Order information: including your name, billing address, shipping address, payment confirmation, email address, and phone number.

  • Account information: including your username, password, and security questions.

  • Shopping information: including the items you view, put in your cart, or add to your wishlist.

  • Customer support information: including the information you choose to include in communications with us, for example, when sending a message through the Services.

Information We Collect through Cookies

We also automatically collect certain information about your interaction with the Services ("Usage Data"). To do this, we may use cookies, pixels, and similar technologies ("Cookies"). Usage Data may include information about how you access and use our Site and your account, including device information, browser information, information about your network connection, your IP address, and other information regarding your interaction with the Services.

Information We Obtain from Third Parties

Finally, we may obtain information about you from third parties, including from vendors and service providers who may collect information on our behalf, such as:

  • Companies who support our Site and Services, such as Shopify.

  • Payment processors, who collect payment information (e.g., bank account, credit or debit card information, billing address) to process your payment in order to fulfill your orders and provide you with products or services you have requested, in order to perform our contract with you.

Any information we obtain from third parties will be treated in accordance with this Privacy Policy.

How We Use Your Personal Information

We use your personal information for the following purposes:

  1. Providing Products and Services: To process your payments, fulfill your orders, and provide notifications related to your account or purchases.

  2. Marketing and Advertising: To send marketing communications by email, text message, or postal mail (only if you have opted in).

  3. Security and Fraud Prevention: To detect and prevent fraudulent or illegal activity.

  4. Customer Support: To assist with customer inquiries and improve the Services.

Children’s Privacy

Our website and services are not intended for children under the age of 16, and we do not knowingly collect personal data from individuals under 16 years of age. If we become aware that we have inadvertently collected personal data from a child under the age of 16, we will take steps to delete that information as soon as possible.

If you believe we have collected personal data of a child under the age of 16, please contact us immediately at beeingrebecca@gmail.com, and we will promptly delete such information.

Third-Party Websites and Services

Our Site may contain links to third-party websites or services, such as social media platforms, payment gateways, or other external services. Please note that we are not responsible for the privacy practices of those third parties. Once you leave our Site or interact with a third-party service, their own privacy policy will apply to your use of their site or service. We encourage you to read the privacy policies of any third-party sites you visit.

How We Protect Your Data

We implement appropriate technical and organizational measures to safeguard your personal data against unauthorized access, disclosure, alteration, or destruction. This includes encryption, secure storage, and access control systems.

Sharing Your Data

We do not sell or rent your personal data to third parties. However, we may share your data with trusted third-party service providers who assist in delivering our services, such as payment processors, marketing platforms, and shipping companies. These third parties are obligated to protect your data and only use it for the purposes specified.

Retention of Data

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting obligations. After this period, your data will be securely deleted.

We will retain your personal data only for as long as is necessary to fulfill the purposes outlined in this Privacy Policy, including for legal, accounting, or reporting obligations.

  • Customer Order History: We retain customer order history for a period of 10 years in order to comply with legal obligations (e.g., tax and accounting requirements). After this period, the data will be securely deleted.

  • Email List Data: We retain email list data for as long as you are subscribed to our communications. If you choose to unsubscribe, we will retain your email address for 1 year to ensure we respect your unsubscribe request and to fulfill legal obligations related to email marketing.

  • Cookies: Cookies are stored for varying lengths of time, depending on the type of cookie. You can manage these settings at any time through your browser or our cookie management tool.

After the specified retention period, your personal data will be securely deleted or anonymized in compliance with applicable laws and regulations.

International Data Transfers

In some cases, we may transfer your personal data to countries outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are in place, such as using Standard Contractual Clauses, to protect your data in accordance with applicable data protection laws.

Your Rights as a User

You have the following rights regarding your personal data under GDPR:

  1. The right to access your data.

  2. The right to correct any inaccurate or incomplete data.

  3. The right to erase your data (under certain circumstances).

  4. The right to restrict or object to processing.

  5. The right to data portability.

  6. The right to withdraw your consent at any time (where applicable).

To exercise any of these rights, please contact us at beeingrebecca@gmail.com.

User Rights in the Context of Automated Decisions/Profiling

We do not use your personal data for automated decision-making, including profiling, that produces legal effects or significantly affects you. If we were to introduce such practices in the future, you will be informed, and your consent would be required where applicable.

Clarification on Data Access Requests

You have the right to request access to the personal data we hold about you. This can include information on the purposes of processing, the categories of data, and the recipients of the data. If you wish to access or correct your data, please send a request to beeingrebecca@gmail.com. We will respond to your request within the time frame prescribed by law.

Cookies

We use Cookies to enhance the user experience and improve our services. For specific information about the cookies we use, please visit Shopify’s Cookie Policy.

We use cookies and similar tracking technologies to enhance your experience while navigating our site, analyze site traffic, and provide personalized marketing. Below are the types of cookies we use:

  • Essential Cookies: These are necessary for the functioning of our website and for providing the services requested. They cannot be disabled.

  • Analytics Cookies: These help us understand how visitors interact with our site, track user behavior, and improve our site’s functionality and performance. These are used by services like Google Analytics.

  • Marketing Cookies: These are used to deliver personalized advertisements to you based on your interests and previous interactions with our site. This includes cookies used by third-party providers like Facebook or Google for retargeting.

Managing Cookies: You can manage your cookie preferences by clicking on the cookie consent banner when you first visit our site or by adjusting the settings in your browser at any time. You can opt-out of certain cookies through your browser settings or by using our cookie management tool, if available. For more detailed information on the cookies we use and how to manage them, please visit Shopify’s Cookie Policy.

Cookie Consent in the EU

When you visit our Site from within the European Economic Area (EEA), we will ask for your consent to use non-essential cookies via a cookie banner or consent management platform. You may manage your cookie preferences at any time through the settings provided in the banner or your browser.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

  • With vendors or other third parties who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, fulfillment, and shipping).

  • With business and marketing partners, including Shopify, to provide services and advertise to you.

  • With our affiliates or otherwise within our corporate group, in our legitimate interests to run a successful business.