Privacy policy

1. Data controller

ALTISARA LLC, 30 N Gould St STE 33131, Sheridan, WY 82801, USA — info@deluxfash.com — operates deluxfash.com and is the controller responsible for your personal data under the UK GDPR.

2. Information we collect

• Provided by you: name, delivery and billing address, email, phone, support messages.
• Order information: items, amounts, history.
• Payment information: handled exclusively by our certified payment provider — card numbers never reach us.
• Browsing information: IP address, device, pages viewed, via cookies.

3. Why we use it

Order processing and delivery (performance of a contract), customer support (performance of a contract), accounting obligations (legal obligation), our newsletter if you opt in (consent, withdrawable anytime), and site improvement (legitimate interest).

4. Sharing and international transfers

Shared only with the providers who make your order possible: Shopify, our payment provider, carriers and tracking. Your data is never sold. Where data is transferred internationally, including to the USA, appropriate safeguards such as the UK International Data Transfer Agreement or equivalent standard contractual clauses are applied.

5. Retention & cookies

Order data: 6 years (accounting obligations). Newsletter data: until you unsubscribe. Cookies: 13 months maximum. Essential cookies keep the cart and session working; analytics cookies run only with your consent — manage them in your browser settings.

6. Your rights

Under the UK GDPR you can request access, correction, erasure, restriction, objection and portability anytime at info@deluxfash.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.