Privacy Policy

Last updated: June 2026

1. Data controller

The data controller for shopmariegraceboutique.com is Skiepa, Professor Kouwerstraat 39, 2035CB Haarlem, The Netherlands (KvK 86814613). Contact: info@shopmariegraceboutique.com.

2. What we collect

• Order data: name, shipping/billing address, email, phone, order contents.
• Payment data: processed by our payment providers; we do not store full card numbers.
• Account data (if you create one): email, password hash, order history.
• Communications: emails and chat messages you send us.
• Technical data: IP, device/browser info, pages visited, referrer — via cookies and analytics.

3. Why we use it (lawful basis)

• Processing orders and returns — contract performance (Art. 6(1)(b) GDPR).
• Customer service — legitimate interest / contract.
• Fraud prevention and security — legitimate interest.
• Marketing emails — only with your consent; you can unsubscribe at any time.
• Analytics and ads — only with your consent via the cookie banner.
• Legal obligations — bookkeeping, tax, consumer law.

4. Who we share data with

We share only what's necessary:

• Shopify (platform hosting)
• Payment processors (Stripe, PayPal, Shop Pay, etc.)
• Shipping carriers and fulfilment partners
• Email service providers
• Analytics (Google Analytics, Meta) — only with consent
• Public authorities where legally required

We do not sell personal data.

5. International transfers

Some service providers are based outside the EU/EEA. We rely on the EU Standard Contractual Clauses or equivalent safeguards for these transfers.

6. Retention

Order data is kept for 7 years (Dutch tax law). Marketing data is kept until you unsubscribe. Account data is kept as long as your account is active.

7. Your rights (GDPR)

You have the right to: access, rectify, erase, restrict, port, and object. You can withdraw consent at any time. To exercise these rights, email info@shopmariegraceboutique.com. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

8. Cookies

We use essential cookies (cart, login) and, with your consent, analytics and marketing cookies. You can manage preferences via our cookie banner.

9. Children

Our store is intended for adults. We do not knowingly collect data from children under 16.

10. Updates

We may update this policy. The "Last updated" date shows the current version.

11. Contact

Skiepa — info@shopmariegraceboutique.com