Privacy Notice

1.Controller

The controller of the personal data collected through this website is LA TULIPE — a sole trader (Ukrainian FOP) registered in Ukraine. Contact for data-protection requests: latulipebrand@gmail.com.

2.What we collect and why

When you place an order we collect your name, email, phone, delivery address and order details. The legal basis is the performance of the sales contract. We use this information to process, ship and support your order, and to comply with our accounting and tax obligations.

When you subscribe to our newsletter we collect your email. The legal basis is your consent, which you can withdraw at any time using the unsubscribe link in every message.

We use strictly necessary cookies (session, cart, CSRF) to run the site and optional analytics cookies only if you accept them in the cookie banner.

3.Who we share data with

We share the minimum data needed with the following processors: the payment provider (WayForPay) to take payment, the carrier (Nova Poshta Global) to deliver your order, our email provider for transactional messages, and our hosting provider. Each acts under a written processing agreement and only on our instructions.

4.International transfers

Our servers and our team are in Ukraine. Where data is transferred outside the EEA or the UK, the transfer is covered by standard contractual clauses or by an applicable adequacy decision.

5.How long we keep it

Order data is kept for the period required by applicable tax and accounting law (typically up to 10 years). Newsletter subscribers are kept until they unsubscribe. Anonymised analytics are kept for up to 14 months.

6.Your rights

Under the GDPR and equivalent laws in your country, you have the right to access, rectify and erase your data, to restrict or object to processing, and to data portability. Where processing is based on consent you can withdraw it at any time. To exercise any of these rights, email latulipebrand@gmail.com. You also have the right to lodge a complaint with your national data-protection authority.

7.Changes

We may update this notice. The current version is always published on this page with the last-updated date above.