Experiences

Privacy Policy for Lulu de Bretagne Last updated: 26 September 2025 At Lulu de Bretagne, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and safeguard your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. 1. Who We Are Lulu de Bretagne (“we”, “us”, “our”) operates this website. We are the data controller responsible for your personal information. If you have any questions about this policy or how we use your data, please contact us: 📧 Email: luludebretagne35@gmail.com 📍 Address: London 2. What Information We Collect We may collect and process the following personal data: Identity Data: name, username, or similar identifiers. Contact Data: email address, phone number, billing/shipping address. Transaction Data: details of purchases and payments. Technical Data: IP address, browser type, device information, and cookies. Usage Data: how you use our website, products, and services. Marketing Data: preferences in receiving marketing from us. 3. How We Use Your Information We will only use your personal data when the law allows us to, typically under one of these lawful bases: To perform a contract: e.g., process and deliver your order. To comply with legal obligations: e.g., tax or regulatory requirements. For our legitimate interests: e.g., website improvements, fraud prevention, marketing (where your rights do not override our interests). With your consent: e.g., sending newsletters or promotional materials. 4. Cookies Our website uses cookies to improve functionality, analyse traffic, and personalise your experience. You can manage or disable cookies in your browser settings. Please note that some website features may not work without them. 5. Sharing Your Data We do not sell your data. We may share personal information only with: Service Providers: such as payment processors, delivery companies, and IT support. Legal Authorities: when required to comply with the law or protect our rights. 6. Data Retention We will keep your personal information only for as long as necessary to fulfil the purposes we collected it for, including legal, accounting, or reporting requirements. Customer records: typically kept for 6 years after your last interaction, to meet UK tax and legal obligations. Marketing data: kept until you withdraw your consent or unsubscribe. 7. Your Rights Under UK GDPR You have the right to: Access the personal data we hold about you. Request correction of inaccurate or incomplete data. Request erasure of your data (“the right to be forgotten”). Restrict or object to processing of your data. Request transfer of your data to another provider. Withdraw consent for processing (e.g., marketing emails). To exercise any of these rights, please contact us. If you are unhappy with how we handle your data, you also have the right to complain to the Information Commissioner’s Office (ICO): https://ico.org.uk . 8. Data Security We use appropriate technical and organisational measures to protect your data from loss, misuse, or unauthorised access. However, no method of online transmission or storage is completely secure. 9. Third-Party Links Our website may contain links to other websites. We are not responsible for the privacy practices of these third-party sites. 10. Updates to This Policy We may update this Privacy Policy from time to time. The latest version will always be available on this page, with the “Last updated” date shown at the top.

bottom of page