Privacy policy

Privacy Policy

Effective [EFFECTIVE DATE]

This policy explains what MSLuxe ([LEGAL ENTITY], "we", "us") collects when you visit or buy from [WEBSITE], why we collect it, and what you can do about it.

Who we are

[LEGAL ENTITY], [REGISTERED ADDRESS]. Contact: [SUPPORT EMAIL].

What we collect

You give us: name, email, phone, shipping and billing address, order contents, and anything you write to us in a message or review.

Collected automatically: IP address, browser and device type, pages viewed, referring site, and time on site — through cookies and similar technologies.

We never see your full card number. Payment details go directly to our payment processor. We receive only a confirmation, the last four digits, and the card type.

Why we use it

Purpose What this covers
Fulfilling your order Payment, shipping, customs paperwork, tracking, returns
Customer support Answering your questions and resolving problems
Fraud prevention and security Screening orders, protecting accounts
Legal compliance Tax, customs, accounting, and record-keeping obligations
Marketing Emails and ads — only with your consent where consent is required
Improving the store Understanding which pages and products work

Who we share it with

We don't sell your personal information. We share it only with parties who need it to run the store:

  • Shopify, which hosts this store and processes orders
  • Payment processors, to take payment and prevent fraud
  • Shipping carriers and customs authorities, to deliver your parcel and clear it through import
  • Email and analytics providers, to send the messages you asked for and understand site usage
  • Professional advisers and authorities, where the law requires it or to protect our legal rights

International transfers

We operate from [REGISTERED ADDRESS], so if you're in the US your information is transferred outside the United States and processed by us and our service providers abroad. Data protection law in those countries may differ from your own. We take reasonable steps to protect your information wherever it's handled.

How long we keep it

Order records are kept for as long as tax, customs, and accounting law requires — generally 7 years. Marketing contacts are kept until you unsubscribe. Support messages are kept for [X] years.

Your choices

  • Unsubscribe from marketing at any time using the link in any email.
  • Cookies can be blocked or deleted in your browser settings. Some parts of the store won't work properly without them.
  • Access, correction, deletion, or a copy of your information — email [SUPPORT EMAIL] and we'll respond within the time the law allows.

If you're a California resident

Under the CCPA/CPRA you may request the categories and specific pieces of personal information we collected, request deletion or correction, and opt out of any sale or sharing of personal information for cross-context behavioural advertising. We won't discriminate against you for exercising these rights. Email [SUPPORT EMAIL] with "California privacy request" in the subject line.

[Other US states — including Virginia, Colorado, Connecticut, Utah and Texas — have their own privacy laws with similar rights. Have a lawyer confirm which apply to your volume and add a state-by-state section if needed.]

If you're in the EU or UK

You have rights of access, rectification, erasure, restriction, portability, and objection, and the right to complain to your data protection authority. Our legal bases are contract performance for orders, legitimate interests for security and improvement, and consent for marketing.

Children

This store isn't directed at children under 13, and we don't knowingly collect their information. If you believe a child has given us personal information, email us and we'll delete it.

Security

We use TLS encryption in transit and rely on Shopify's PCI-compliant infrastructure for payments. No method of transmission or storage is completely secure, so we can't guarantee absolute security.

Changes

We'll post any update here with a new effective date. Material changes will be announced by email or a notice on the site.

Contact

[SUPPORT EMAIL] · [LEGAL ENTITY], [REGISTERED ADDRESS]