Privacy Policy

Data Protection Policy

Information on the Collection of Personal Data and Contact Details of the Controller

We appreciate your interest in our website and thank you for visiting Olivia Boutique California. The following policy explains how we handle your personal data when you use our website. Personal data refers to any information that can identify you personally.

The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is Olivia Boutique California, which determines the purposes and means of processing personal data.

For your security, our website uses SSL or TLS encryption to protect personal data and other confidential content, such as orders or inquiries. You can recognize an encrypted connection by “https://” in your browser address bar and the lock symbol displayed there.

Data Collection When Visiting Our Website

When you visit our website purely for informational purposes, we only collect data that your browser automatically transmits to our server (server log files). This includes:

• The website visited

• Date and time of access

• Amount of data transferred

• The source/referring page

• Browser and operating system used

• IP address (in anonymized form, where applicable)

This processing is carried out in accordance with Article 6(1)(f) GDPR, based on our legitimate interest in ensuring the stability and functionality of our website. The data is not shared or used further unless there are indications of unlawful use, in which case we may review the log files retrospectively.

Cookies

To make your visit to our website pleasant and to enable certain features, we use cookies. Cookies are small text files stored on your device. Some are temporary and deleted once your browser is closed (session cookies), while others remain on your device (persistent cookies). Persistent cookies help us recognize your browser on subsequent visits and are automatically deleted after a specified period.

Cookies may store user preferences or shopping cart contents to simplify your experience. Processing of personal data via cookies is based on Article 6(1)(b) GDPR (contract fulfillment) or Article 6(1)(f) GDPR (legitimate interest in website functionality and user experience).

You can control cookies through your browser settings. For guidance on managing cookies, please visit:

• Internet Explorer

• Firefox

• Chrome

• Safari

• Opera

Please note that disabling cookies may affect website functionality.

Contacting Us

When you contact us (for example, via our contact form or email), we collect personal data only to the extent necessary to respond to your inquiry. This processing is based on Article 6(1)(f) GDPR (legitimate interest in responding to inquiries) or Article 6(1)(b) GDPR (contractual relationship). Once your inquiry is resolved and no further legal obligation to retain data exists, your information will be deleted.

Customer Accounts and Contract Execution

When you open a customer account or place an order, we collect personal data in accordance with Article 6(1)(b) GDPR for the purpose of contract execution. The specific data collected depends on the relevant input forms.

You may request deletion of your customer account at any time by contacting us. Once the contract has been completed or your account deleted, data will be retained only as required by law (e.g., for tax or accounting purposes) and deleted once these periods expire.

Use of Data for Direct Advertising

If you register for our newsletter, we will send you information about our offers. Only your email address is required, and any additional data you provide is optional. Subscription is based on your consent under Article 6(1)(a) GDPR. You can unsubscribe at any time using the link provided in each newsletter or by contacting us directly.

If you have provided your email address during a purchase, we may send you information about similar products based on our legitimate interest in direct marketing under Article 6(1)(f) GDPR. You may opt out of these emails at any time.

Data Processing for Order Fulfillment

For order processing, your personal data is shared only with service providers necessary to complete your purchase (e.g., shipping carriers and payment processors). This occurs under Article 6(1)(b) GDPR.

Payment Services:

• PayPal – Payment data is transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg, for payment processing. You can review PayPal’s Privacy Policy here: PayPal Privacy Policy.

Review Requests

If you have expressly consented, we may contact you via email after your order to request feedback or a review. You may withdraw your consent at any time.

Social Media Plugins

Our website may use Shariff-integrated social media plugins (Facebook, Google+, Instagram) to ensure data protection. These act as static links until you click them, meaning no personal data is transmitted to social networks until you actively interact. Once clicked, you will be redirected to the social media site and its respective privacy policies will apply.

• Facebook Privacy Policy

• Google Privacy Policy

• Instagram Privacy Policy

Online Marketing and Analytics

We use Google Ads, Google Analytics, and Facebook Pixel to analyze website usage and improve our marketing. Data is processed in accordance with Article 6(1)(a) and 6(1)(f) GDPR for legitimate business interests. Cookies used in this process help us understand how visitors use our website and tailor our ads accordingly.

You can opt out of tracking via your browser settings or by installing Google’s browser add-on: Google Opt-Out.

Rights of Data Subjects

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Article 15) – Obtain information about data processed.

• Right to rectification (Article 16) – Correct inaccurate data.

• Right to erasure (Article 17) – Request deletion of your data under certain conditions.

• Right to restriction (Article 18) – Limit how your data is processed.

• Right to data portability (Article 20) – Receive your data in a structured format.

• Right to withdraw consent (Article 7(3)) – Withdraw previously granted consent at any time.

• Right to lodge a complaint (Article 77) – File a complaint with a data protection authority.

You also have the right to object (Article 21) to processing based on legitimate interests or for direct marketing purposes. If you object to marketing use, we will stop using your data for that purpose.

Data Retention

Your personal data is stored for as long as necessary to fulfill contractual obligations or legal requirements. Once these retention periods expire, data will be deleted unless continued storage is required by law or justified by a legitimate business interest.

Contact

For questions or to exercise your data protection rights, please contact:
Olivia Boutique California
Email: info@olivia-boutique-california.com