Privacy Policy

1. Data controller

The entity responsible for processing your personal data is:

2. Personal data we collect

Depending on how you interact with our store, we may collect the following categories of personal data:

• Identification and contact information: name, email address, telephone number, billing address, delivery address and Tax Identification Number.
• Order information: products purchased, sizes, quantities, prices, discounts, order status, delivery information, returns, exchanges and refunds.
• Payment information: payment method, payment status and transaction identifiers. Complete card details are processed directly by payment providers and are not made available to Gianni Kavanagh.
• Customer account information: login credentials, order history, preferences, saved products and information voluntarily added to the account.
• Technical and usage information: IP address, browser, operating system, device, online identifiers, pages visited, source of the visit, session duration and interaction with the store.
• Marketing information: newsletter subscription, communication preferences, campaign responses and interaction with marketing communications.
• Customer support information: messages, requests, complaints, photographs, videos and other information sent to our team.
• Security and fraud prevention information: information required to verify payments, protect accounts, detect suspicious activity and prevent fraudulent or abusive use.

We only request personal data that is adequate, relevant and necessary for each purpose.

3. How we collect personal data

We may collect personal data:

• Directly from you when you create an account, place an order, subscribe to our newsletter, complete a form, request a return or contact Customer Support.
• Automatically through cookies, pixels and similar technologies, according to your selected privacy preferences.
• From payment providers, carriers, technology platforms, social networks, marketing partners and apps integrated with our store.

4. Purposes and legal bases

5. Information required to place an order

Certain information, including your name, contact details, delivery address, billing address and payment information, is required to process your order.

If this information is not provided, we may be unable to complete the purchase, process the payment or deliver the order.

6. Who we share personal data with

We may share personal data, only to the extent necessary, with the following categories of recipients:

• Shopify: the platform used to host and manage our online store, checkout and e-commerce features.
• Payment providers: banks, card issuers, Shopify Payments, PayPal, Klarna and other payment methods available at checkout.
• Carriers and logistics providers: companies responsible for delivering, collecting, returning or tracking orders, including DPD, SEUR, DHL or other operators used according to the destination.
• Technology providers: providers of hosting, security, fraud prevention, account management, customer support, email, communications and store maintenance services.
• Analytics and marketing partners: platforms such as Google and Meta when these services are active and there is a valid legal basis for the processing.
• Professional advisers: accountants, auditors, lawyers, insurers and other advisers subject to confidentiality obligations.
• Public authorities: courts, tax, police, regulatory or administrative authorities when disclosure is legally required.

Service providers processing data on our behalf may only use it according to our instructions, for the contracted purposes and subject to applicable security and confidentiality requirements.

7. Shopify

Our store is powered by Shopify, which processes certain personal data required for the operation of the platform, checkout and related services.

Depending on the services used, Shopify may collect and process contact information, order information, device information, IP addresses and interaction with the store.

For more information about how Shopify processes consumer data, please read the Shopify Consumer Privacy Policy.

When Shopify Network Intelligence or other Shopify Enhanced Services are enabled, certain information may be used by Shopify to improve its services, personalisation, security, performance analysis and, where permitted, advertising.

The choices made through our cookie banner and, where applicable, our data-sharing opt-out page will be respected according to the store’s privacy settings.

8. Payments and Klarna

Complete payment card details are collected and processed directly by the selected payment providers according to their own security standards and privacy policies.

When you select Klarna as your payment method, we share the contact and order information required to provide the service, assess your eligibility for Klarna’s payment methods and prevent fraud.

Klarna acts as an independent data controller for the information used to assess and provide its services. Your data will be processed in accordance with the Klarna Privacy Policy.

9. International data transfers

Some of our service providers may process data in countries outside the European Economic Area.

Where personal data is transferred internationally, we use the mechanisms provided by applicable law, including European Commission adequacy decisions, Standard Contractual Clauses or other legally recognised safeguards.

Where necessary, additional measures will also be assessed to ensure an appropriate level of protection.

10. Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected.

• Information related to orders, payments, invoices, returns and warranties is retained throughout the contractual relationship and for the periods required by tax, accounting and commercial law and for the establishment or defence of legal claims.
• Customer account information is retained while the account remains active or until its deletion is requested, without affecting information that must be retained by law.
• Customer Support information is retained for as long as necessary to resolve the request and subsequently for the period required to protect our legal rights.
• Marketing information is retained until you withdraw your consent, unsubscribe or object to the processing.
• Information collected through cookies is retained for the periods stated in our Cookie Policy.

After the applicable retention periods have ended, the information will be deleted, anonymised or restricted in accordance with applicable law.

11. Marketing communications

When you subscribe to our newsletter or agree to receive marketing communications, we may use your email address and, where applicable, information about your preferences to send you Gianni Kavanagh news, campaigns, launches, discounts and content.

You can unsubscribe at any time through the link included in each communication or by contacting info@giannikavanagh.com.

Unsubscribing from marketing communications will not affect messages required to manage your orders, payments, deliveries, returns or customer account.

12. Cookies and similar technologies

We use cookies and similar technologies to operate the store, remember preferences and, with your consent where required, carry out analytics and marketing activities.

Detailed information about the cookies used, their purposes and retention periods is available in our Cookie Policy.

You can change your choices at any time through Cookie Preferences, available in the website footer.

13. Your data protection rights

Under applicable data protection law, you may have the following rights:

• Right of access: obtain confirmation about whether we process your personal data and request a copy.
• Right to rectification: request the correction of inaccurate or incomplete information.
• Right to erasure: request the deletion of personal data where the legal conditions are met.
• Right to restriction: request that processing be restricted in certain circumstances.
• Right to data portability: receive certain information in a structured, commonly used and machine-readable format or request its transfer to another controller.
• Right to object: object to processing based on our legitimate interests, including processing for direct marketing.
• Right to withdraw consent: withdraw previously given consent at any time.
• Right not to be subject to solely automated decisions: request human intervention when a solely automated decision produces legal or similarly significant effects, where provided by law.

To exercise any of these rights, send your request to info@giannikavanagh.com.

We may request additional information to confirm your identity and protect your data against unauthorised access. We will respond within the period established by applicable law.

14. Automated decisions and fraud prevention

Payment and fraud prevention providers may perform automated checks to assess transaction security, confirm the buyer’s identity or determine eligibility for certain payment methods.

When you use a service such as Klarna, some decisions relating to the approval of the payment method may be made directly by that provider in accordance with its own criteria and Privacy Policy.

15. Data security

We implement appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction.

These measures include access controls, encrypted communications, security systems, monitoring of suspicious activity and the use of service providers subject to data protection requirements.

Despite the measures adopted, no electronic transmission or storage system can guarantee absolute security.

16. Children

Our store is not intended for children who do not have the legal capacity to enter into purchase contracts.

We do not knowingly collect personal data from children without appropriate authorisation from their legal representative. If you believe that a child has improperly provided us with personal data, please contact us so that we can review and, where applicable, delete the information.

17. Links to third-party websites

Our website may contain links to websites or services operated by third parties. We do not control the privacy practices of these third parties and recommend reviewing their policies before providing personal data.

18. Complaints

If you believe that your personal data has not been processed in accordance with applicable law, we recommend contacting us first at info@giannikavanagh.com so that we can review the situation.

You also have the right to lodge a complaint with the competent supervisory authority:

You may also lodge a complaint with the data protection authority in the country of your habitual residence, your place of work or the place where the alleged infringement occurred.

19. Changes to this Privacy Policy

We may update this Privacy Policy to reflect legal, technical, operational or service-related changes.

Where changes are significant, we may communicate them through the website or by other appropriate means. The most recent version will always be available on this page together with its date of update.

20. Contact us

If you have any questions about this Privacy Policy or how we process your personal data, please contact: