Privacy Policy

1. Who's responsible for your data

The data controller is Oro Market Trading S.L. (CIF B88857958), Calle de la Paz, 34, 46003 Valencia, Spain. You can reach us at complaints@lucielle.se.

2. What data we collect

We collect this data when you check out, create an account, or update your details under My pages.

• —Name
• —Email address
• —Delivery address
• —Phone number, if you provide one under My pages
• —Order history and subscription choices — colour, delivery interval and add-ons

3. Why we process your data

We process your data to deliver your order, manage your subscription, and give you access to My pages — this is necessary to fulfil our agreement with you.

We may also be required to keep certain data, such as accounting records, to comply with the law.

4. Where your data is stored

Your data is stored with our database provider, Supabase, in data centres within the EU. We don't use your data for anything beyond running the store and your subscription.

5. Who we share data with

• —Supabase, which provides our database and magic-link email sign-in.
• —A future payment provider (for example Klarna or Stripe) once payment is enabled — they'll only receive the data needed to process payment.
• —We never sell your data.

6. How long we keep your data

We keep your data for as long as you have an account or an active subscription, and after that for as long as the law requires — for example, seven years under Swedish accounting law for records tied to a purchase. You can ask us to delete your account at any time.

7. Cookies and local storage

We only use cookies and local storage that the store needs to function: a sign-in cookie that keeps you logged in, and a short-lived cookie that remembers your order until you sign in via the email link.

Your colour choice and checkout step are saved locally in your browser (localStorage) so you can pick up where you left off. We don't use any cookies for marketing or analytics today.

8. Your rights

Under GDPR you have the right to access, correct, delete or move your data, and to object to or restrict our processing. Contact complaints@lucielle.se to exercise your rights.

You also have the right to lodge a complaint with a supervisory authority — in Sweden, the Swedish Authority for Privacy Protection (IMY), or Spain's Agencia Española de Protección de Datos (AEPD).