Legal

Privacy policy

We process personal data in accordance with Regulation (EU) 2016/679 (GDPR). This policy explains what we collect, why, and the rights you hold.

Data we collect

Contact and delivery details you provide when ordering or writing to us; order and payment records (card details are handled by our payment processor and never stored by us); and, with your consent, analytics data about how the site is used.

Why we process it

To fulfil your order and provide client care (performance of a contract); to meet tax and accounting obligations (legal obligation); to send marketing where you have subscribed (consent); and to improve the boutique (legitimate interest, or consent for optional cookies).

Sharing

We share data only with processors necessary to run the boutique — our commerce platform, payment provider, and delivery carriers — under data-processing agreements. We do not sell personal data.

Retention

Order records are retained for the period required by tax law. Marketing consent is retained until withdrawn. Analytics data is retained for a maximum of 14 months.

Your rights

You may request access, rectification, erasure, restriction, portability, or object to processing, and withdraw consent at any time. Write to contact@abayaroyaleboutique.com or via our contact page. You may also lodge a complaint with your national supervisory authority.