Privacy Policy

1. DATA CONTROLLER
The controller responsible for the processing described in this policy is:

CAVALEIRUS LLC
5830 E 2nd St, Ste 7000 #30744
Casper, Wyoming 82609
United States
Wyoming Entity ID: 2025-001824140
Trading name: Emily & Grace Dublin
Website: https://emilygrace-dublin.com
Email: support@emilygrace-dublin.com

EU representative under Article 27 EU GDPR, if required: [ADD BEFORE PUBLICATION]
UK representative under Article 27 UK GDPR, if required: [ADD BEFORE PUBLICATION]

2. SCOPE
This policy explains how we collect, use, disclose, retain and protect personal data when you visit the store, place an order, request support, make a return or receive marketing. For people in Ireland, the EU General Data Protection Regulation and applicable Irish law apply. For people in the United Kingdom, the UK GDPR and Data Protection Act 2018 apply.

3. PERSONAL DATA WE PROCESS
Depending on your interaction, we may process:
- name, email address, phone number, billing address and delivery address;
- account, order, return, transaction and customer-service information;
- payment status and limited payment details, while full card data is processed by payment providers;
- device, network and usage information, including IP address, browser, cookie identifiers and site activity;
- marketing choices, consent records and communications; and
- information reasonably necessary for fraud prevention and store security.

4. PURPOSES AND LAWFUL BASES
We process data:
- to perform a contract, including checkout, payment, order fulfilment, delivery, support, returns and refunds;
- to comply with tax, accounting, consumer-protection and other legal obligations;
- for legitimate interests such as security, fraud prevention, service improvement, record management and establishment or defence of legal claims, where those interests are not overridden by your rights; and
- with consent, where required, for non-essential cookies, personalised advertising and email or SMS marketing. Consent may be withdrawn at any time for the future.

5. SERVICE PROVIDERS AND RECIPIENTS
We disclose only the information reasonably needed to:
- Shopify for hosting, commerce functions and order management;
- Shopify Payments and payment providers displayed at checkout;
- Win-Winfulfillment in Ningbo, China, logistics providers, An Post and Royal Mail for fulfilment and delivery;
- Google services for analytics, advertising and measurement where enabled and lawfully permitted;
- email or SMS communication providers actually enabled for the store;
- security, fraud-prevention, IT, analytics, legal, accounting and tax providers; and
- authorities or other recipients where required by law or necessary to protect legal rights.

Providers act as processors or independent controllers depending on the service and legal arrangement.

6. INTERNATIONAL TRANSFERS
The operator is in the United States and the fulfilment partner is in China. Personal data can therefore be processed outside the European Economic Area and the United Kingdom.

Where there is no applicable adequacy decision, we use an available lawful transfer mechanism and appropriate safeguards, such as the European Commission's Standard Contractual Clauses for EEA transfers and the UK International Data Transfer Agreement or UK Addendum for restricted UK transfers, together with transfer-risk assessments and supplementary measures where required. You may request information about applicable safeguards at support@emilygrace-dublin.com.

7. COOKIES, ANALYTICS AND ADVERTISING
Necessary technologies support the cart, checkout, security, language and core store functions. Non-essential analytics, personalisation and advertising technologies are activated only after consent where required. The cookie interface must allow users to accept, refuse and change non-essential choices. Browser settings can also delete or block cookies, although this may affect store functions.

8. EMAIL AND SMS MARKETING
We send direct marketing only with consent or another lawful basis. You may unsubscribe through the link in an email, an available STOP instruction or by contacting support@emilygrace-dublin.com. Transactional messages about an order may continue. Withdrawal does not affect processing that was lawful before it.

9. RETENTION
We retain personal data only as long as reasonably necessary for the relevant purpose and applicable legal, tax, accounting, dispute and security requirements. We then delete or anonymise it. Retention periods depend on the type and sensitivity of the data and the reason it is held.

10. YOUR RIGHTS
Subject to applicable law and exceptions, you may request access, correction, deletion, restriction, objection and data portability and may withdraw consent. Where processing is based on legitimate interests or direct marketing, you may object as provided by law.

Send requests to support@emilygrace-dublin.com. We may request information reasonably necessary to verify identity. You also have the right to complain to the Irish Data Protection Commission if you are in Ireland or the Information Commissioner's Office if you are in the United Kingdom.

11. AUTOMATED DECISIONS
We do not make decisions based solely on automated processing that produce legal or similarly significant effects unless separately disclosed and lawfully permitted.

12. SECURITY AND DATA BREACHES
We use administrative, technical and organisational safeguards appropriate to the risks. No system is completely secure. We assess and report qualifying personal-data breaches and notify affected people where required.

13. CHILDREN
The store is not directed to children, and we do not knowingly process children's personal data contrary to applicable age and consent requirements.

14. CHANGES
We may update this policy when our practices, services or legal obligations change. The current revision date appears at the top.

15. CONTACT
Email: support@emilygrace-dublin.com

Emily & Grace Dublin is a trading name of CAVALEIRUS LLC.

Store operator and contracting party:
CAVALEIRUS LLC
5830 E 2nd St, Ste 7000 #30744
Casper, Wyoming 82609
United States
Wyoming Entity ID: 2025-001824140