Privacy Policy - 55thousanddresses.com

Last Updated: April 8, 2025

At 55 Thousand Dresses (accessible via 55thousanddresses.com), we prioritize your privacy and are committed to protecting your personal data. This Privacy Policy outlines how we collect, use, store, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. By using our website, you agree to the collection and use of your information in accordance with this policy.

1. Information We Collect

We collect different types of personal data in order to provide and improve our services. The data we collect can be categorized as follows:

a. Personal Identification Information

Name
Email address
Phone number
Address (shipping and billing)
Payment information (credit/debit card details processed securely via third-party payment processors)

b. Non-Personal Identification Information

IP address
Browser type and version
Device information
Referring/exit pages
Pages viewed and time spent on our website
Location data (if enabled on your device)

c. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and hold certain information. Cookies help us improve the functionality of our website and provide a better browsing experience. You can manage your cookie preferences through your browser settings.

2. How We Use Your Data

We use the data we collect for the following purposes:

Order Processing: To process and fulfill your orders, including shipping and payment processing.
Customer Support: To provide you with assistance regarding your orders or inquiries and respond to customer service requests.
Marketing and Promotions: To send you promotional emails, newsletters, and offers if you have opted into receiving them. You can opt-out of marketing communications at any time by following the unsubscribe instructions in the emails.
Website Functionality: To ensure that our website functions properly, including improving the user experience and personalizing your visits.
Compliance: To comply with legal obligations and regulatory requirements.

3. Legal Basis for Processing Your Data

Under the GDPR, we rely on the following legal bases to process your personal data:

Contractual Necessity: Processing is necessary for the performance of a contract with you (e.g., processing and fulfilling orders).
Consent: Where you have given us explicit consent to process your personal data, such as for marketing communications.
Legitimate Interests: Processing is necessary for our legitimate interests, such as improving our services and website functionality, as long as your rights and freedoms are not overridden.
Legal Obligation: Processing is necessary to comply with legal obligations, such as tax or accounting requirements.

4. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by law. For example:

Order-related data is stored for accounting purposes.
Marketing data is kept until you unsubscribe from our emails.

After the retention period, your data will be securely deleted or anonymized.

5. Sharing Your Data

We do not sell, trade, or otherwise transfer your personal data to third parties unless it is necessary to provide services or as required by law. We may share your data with:

Third-Party Service Providers: These include payment processors, shipping partners, and email marketing services. We ensure that these providers comply with GDPR and other data protection regulations.
Legal Compliance: We may disclose your information if required by law or if we believe it is necessary to protect our legal rights, prevent fraud, or comply with a judicial proceeding, court order, or legal process.

6. International Transfers

As we may use service providers based outside the European Economic Area (EEA), your personal data may be transferred to countries outside the EEA. We ensure that any international transfers of your personal data are compliant with GDPR by using appropriate safeguards, such as Standard Contractual Clauses or ensuring that the receiving party is certified under the EU-U.S. Privacy Shield framework.

7. Your Rights Under the GDPR

You have the following rights under the GDPR:

Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can request correction of any inaccuracies in the personal data we hold about you.
Right to Erasure: You can request that we delete your personal data in certain circumstances (e.g., if it’s no longer necessary for the purposes for which it was collected).
Right to Restriction: You can request that we restrict the processing of your data under certain conditions.
Right to Object: You can object to the processing of your personal data, particularly where it is based on legitimate interests or for direct marketing purposes.
Right to Data Portability: You can request that we transfer your personal data to another organization in a structured, commonly used, and machine-readable format.
Right to Withdraw Consent: If you have given us consent to process your personal data, you have the right to withdraw it at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, in accordance with the GDPR.

8. Security of Your Data

We take the security of your personal data seriously and implement reasonable measures to protect it from unauthorized access, alteration, disclosure, or destruction. We use secure encryption protocols (SSL/TLS) to protect sensitive data, such as payment information, during transmission.

However, please note that no data transmission over the internet can be guaranteed 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

9. Third-Party Websites

Our website may contain links to third-party websites that are not operated or controlled by us. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any third-party websites you visit.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other operational reasons. Any changes will be posted on this page, and the “Last Updated” date at the top of the page will be revised. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data.

11. Contact Us

If you have any questions or concerns about our privacy practices or would like to exercise your rights under the GDPR, please contact us at:

55 Thousand Dresses
Email: [email protected]
Address: [Your business address]

We take your privacy seriously and are committed to responding to any inquiries or concerns you may have regarding your personal data.

This Privacy Policy complies with the requirements of the General Data Protection Regulation (GDPR) and ensures that your personal data is handled with the highest standards of security and respect. Thank you for trusting 55 Thousand Dresses with your personal information.