Privacy Policy – cynthiarowleydresses.com

1. Information We Collect

Personal Data You Provide

  • Contact details (name, email, shipping address)
  • Payment information (processed via secure gateways)
  • Size preferences and purchase history
  • Account credentials (for registered users)

Automatically Collected Data

  • Device information (IP address, browser type)
  • Cookies and usage patterns
  • Website interaction data
  • Order history and browsing behavior

2. How We Use Your Information

We process your data to:

  • Fulfill orders and process returns
  • Provide personalized shopping experiences
  • Improve our products and services
  • Prevent fraud and enhance security
  • Comply with legal obligations

We rely on:

  • Contractual necessity (order fulfillment)
  • Legitimate business interests
  • Your explicit consent (for marketing)
  • Legal compliance requirements

4. Data Sharing Practices

We may share information with:

  • Payment processors (Stripe, PayPal)
  • Shipping providers (FedEx, DHL)
  • Analytics services (Google Analytics)
  • Fraud prevention services

We never sell your personal information.

5. International Data Transfers

Your data may be transferred with safeguards:

  • Standard Contractual Clauses
  • Privacy Shield frameworks (where applicable)

6. Data Retention Periods

We retain your information:

  • Active accounts: Until deletion request
  • Order records: 5 years (legal requirement)
  • Marketing data: Until consent withdrawal

7. Your Privacy Rights

You have the right to:

  • Access and update your information
  • Request deletion
  • Restrict processing
  • Data portability
  • Withdraw consent
  • Object to marketing

8. Cookies & Tracking Technologies

We use:

  • Essential cookies (site functionality)
  • Performance cookies (analytics)
  • Marketing cookies (with consent)
  • Preference cookies (size/currency)

Manage preferences via our cookie banner.

9. Security Measures

We implement:

  • 256-bit SSL encryption
  • Regular security audits
  • PCI-DSS compliance
  • Two-factor authentication

10. Children’s Privacy

Our services are not directed to individuals under 16.

11. Policy Updates

Changes will be posted here with effective dates.

12. Contact Us

For privacy requests:

  1. Use your account privacy settings
  2. Submit through our online form