GDPR Privacy Center

Your GDPR Rights

Under GDPR, you have the right to:

• Access – Request a copy of the personal data we hold about you.
• Rectification – Correct inaccurate or incomplete information.
• Erasure – Request deletion of your data when there’s no compelling reason to retain it.
• Restriction – Limit how we process your data in certain circumstances.
• Data Portability – Receive your data in a structured, machine-readable format.
• Object – Object to processing based on legitimate interests or for direct marketing.
• Withdraw Consent – At any time, if processing is based on consent.

How to Submit a Request

To exercise any of the rights above, please contact us at:

For security, we may ask you to verify your identity before processing your request. We aim to respond within 30 days.

What Personal Data Do We Process?

We may collect and process the following data when you:

• Place an order: Name, shipping/billing address, email, phone number, payment details (via secure processors)
• Create an account: Email, password (hashed), order history
• Subscribe to our newsletter: Email address and preferences
• Visit our website: IP address, browser type, cookies (with consent where required)

Legal Basis for Processing

We only process your personal data when we have a valid legal basis, such as:

• Contract: To fulfill your order or provide customer support
• Legal obligation: To comply with tax or accounting laws
• Consent: For marketing emails or non-essential cookies (you may withdraw anytime)
• Legitimate interest: To prevent fraud, improve our site, or send service-related updates

International Data Transfers

Petite Lovelies is based in the United States. When we transfer your data outside the EEA/UK, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.