Privacy policy

Gitana Lifestyle — Privacy Policy

Last updated: 23 September 2026

Gitana BV (KVK 93781679) – situated at Sporenstraat 7, 6211EB, Maastricht, Limburg, The Netherlands - (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, make a purchase, or interact with us in any way.

This policy is designed to comply with:

  • EU General Data Protection Regulation (GDPR)
  • UK GDPR
  • U.S. privacy standards, including California Consumer Privacy Act (CCPA) principles
  • Global best practices for e-commerce and data protection

1. Data We Collect

We collect information in the following categories through our ecommerce platform as well as our physical store(s) where appropriate:

A. Information You Provide to Us

  • Name
  • Shipping and billing address
  • Email address
  • Phone number
  • Payment information (processed securely via our payment providers; we do not store full card details)
  • Account login details (if you create one)
  • Communication preferences
  • Information provided through Customer Care interactions

B. Automatically Collected Information

When you browse our website, we may automatically collect:

  • IP address
  • Device information
  • Browser type
  • Cookies and tracking technologies
  • Pages viewed and time spent on the website
  • Shopping cart activity

C. Information from Third Parties

  • Payment processors (Shopify Payments, PayPal, Revolut)
  • Analytics tools (Google Analytics)
  • Advertising partners (Meta, Google)

2. How We Use Your Information

We use your information to:

  • Process and fulfil orders – Contractual necessity
  • Provide customer support – Legitimate interest
  • Manage returns and exchanges – Legitimate interest
  • Maintain and improve our website – Legitimate interest
  • Send transactional emails (order updates, shipping confirmations) – Contractual necessity
  • Send marketing communications if you opt in - Consent
  • Detect and prevent fraud or security risks – Legitimate interest
  • Comply with legal obligations – Legal compliance

3. Sharing of Personal Information

We do not sell your personal information.

We may share data with trusted service providers, including:

  • Payment processors
  • E-commerce and hosting platforms (e.g. Shopify)
  • Shipping and logistics partners
  • Email service providers
  • Analytics and marketing tools
  • IT/security providers

All partners process data solely to perform services on our behalf and must follow strict confidentiality and data-protection standards.

4. International Transfers

If you are located in the EU or UK, your personal information may be transferred outside your region.
When this occurs, we rely on Standard Contractual Clauses and, where applicable, other approved transfer mechanisms used by our service providers.

5. Your Rights

EU / UK Customers (GDPR)

You have the right to:

  • Access your personal data
  • Correct inaccurate information
  • Request deletion (“right to be forgotten”)
  • Restrict processing
  • Object to processing
  • Data portability
  • Withdraw consent at any time

·       You have the right to lodge a complaint with the data protection supervisory authority in your country of residence, place of work, or where you believe the issue occurred. In the Netherlands, this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

·       A full list of EU supervisory authorities is available at edpb.europa.eu.

·       In the United Kingdom, contact the Information Commissioner's Office (ico.org.uk)

U.S. Customers

Privacy rights differ by state. Where applicable, you may:

  • Request access to your personal information
  • Request deletion
  • Request to know what data is collected and how it is used
  • Opt out of the sale or sharing of personal data (we do not sell data)

If you are located outside the EU, UK, or US, you may have rights under your local data protection law, and can contact us directly to exercise them, or contact your local data protection authority if one exists.

6. Cookies & Tracking Technologies

We use cookies to:

  • Enable site functionality
  • Remember your preferences
  • Improve performance
  • Analyse site traffic
  • Support personalised marketing (only with consent in the EU)

You can adjust cookie settings anytime via your browser or a consent banner (required in the EU).

7. Marketing Communications

We will only send marketing emails if you opt in.

You may unsubscribe at any time using the link provided in every email.

8. Data Retention

We retain personal data only for a period of 7 years:

  • Fulfilling orders
  • Accounting and legal requirements
  • Customer support
  • Preventing fraud

Once no longer needed, data is securely deleted or anonymised.

9. Security

We use technical and organisational measures to protect your data, including:

  • Encrypted payment processing
  • Secure servers
  • Access controls
  • Regular platform updates

However, no method of online transmission is completely secure, and we cannot guarantee absolute security.

10. Children’s Privacy

Our website is not intended for individuals under 16 years of age.
We do not knowingly collect personal information from children.

11. Third-Party Links

Our website may include links to external sites. We are not responsible for their privacy practices.

12. Changes to This Privacy Policy

We may update this policy periodically.
The “Last updated” date will always indicate the current version.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Address: Sporenstraat 7, 6211EB, Maastricht, Limburg, The Netherlands

Customer Care: hello@gitanalifestyle.com