Privacy Policy

Last updated: June 2026

1. Data controller

The data controller for shopmariegraceboutique.com is Skiepa, Professor Kouwerstraat 39, 2035CB Haarlem, The Netherlands (KvK 86814613). Contact: info@shopmariegraceboutique.com.

2. What we collect

  • Order data: name, shipping and billing address, email, phone, order contents.
  • Payment data: processed by our payment providers; we do not store full card numbers.
  • Account data (if you create one): email, password hash, order history.
  • Communications: emails and messages you send us.
  • Technical data: IP address, device and browser information, pages visited and referrer, collected via cookies and analytics.

3. Why we use it (lawful basis)

  • Processing orders and returns: contract performance (Art. 6(1)(b) GDPR).
  • Customer service: legitimate interest and contract performance.
  • Fraud prevention and security: legitimate interest.
  • Marketing emails: only with your consent; you can unsubscribe at any time.
  • Analytics and advertising: only with your consent through the cookie banner.
  • Legal obligations: bookkeeping, tax and consumer law.

4. Who we share data with

We share only what is necessary to deliver the service:

  • Shopify (platform hosting and payment processing through Shopify Payments)
  • The payment methods displayed at checkout
  • Shipping carriers and our fulfillment warehouse in the United States
  • Email service providers
  • Analytics and advertising platforms (Google, Meta), only with your consent
  • Public authorities where legally required

We do not sell personal data.

5. International transfers

Some service providers are based outside the EU and EEA, including our fulfillment warehouse in the United States. We rely on the EU Standard Contractual Clauses or equivalent safeguards for these transfers.

6. Retention

Order data is kept for 7 years (Dutch tax law). Marketing data is kept until you unsubscribe. Account data is kept for as long as your account remains active.

7. Your rights

You have the right to access, rectify, erase, restrict, port and object to the processing of your data, and you can withdraw your consent at any time. To exercise these rights, email info@shopmariegraceboutique.com. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

If you are a resident of California, you may also request details of the personal information we collect and ask us not to sell or share it. We do not sell personal data. To submit a request, use our Your Privacy Choices page or email us at the address above.

8. Cookies

We use essential cookies (cart, login) and, with your consent, analytics and marketing cookies. You can manage your preferences at any time through our cookie banner.

9. Children

Our store is intended for adults. We do not knowingly collect data from children under 16.

10. Security

We use industry standard encryption protocols (SSL) and security measures to protect your data during transmission and storage. Your card details are never stored on our servers.

11. Updates

We may update this policy to reflect legal or operational changes. The "Last updated" date above always shows the current version.

12. Contact

Skiepa
Professor Kouwerstraat 39
2035CB Haarlem, The Netherlands
Chamber of Commerce (KvK): 86814613

Email: info@shopmariegraceboutique.com
Phone: +1 2135975462

Customer service hours:
Monday to Friday | 09:00 - 18:00 CET
Closed on weekends and public holidays
We reply to all enquiries within 1 to 2 business days.