Privacy Policy

Linaro ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what information we collect when you visit https://linaroluxury.com or place an order, how we use it, who we share it with, and the rights you have under applicable data protection laws — including the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).

1. Who is the data controller

Linaro is the data controller for personal data processed through this website. For any privacy question or to exercise your rights, contact us at customer.service@linaroluxury.com.

2. Information we collect

We collect the following categories of personal data:

• Identity & contact data: first and last name, email address, phone number, billing and shipping address.
• Order & transaction data: products purchased, order value, currency, order history, returns and refunds.
• Payment data: we never store full card numbers. Card details are tokenised by our PCI-DSS compliant payment provider (Shopify Payments / Stripe). We retain only the last four digits and card brand for receipts and fraud prevention.
• Technical data: IP address, browser type and version, device type, operating system, time-zone setting, language preferences, and pages viewed on our site.
• Marketing & communications data: your preferences in receiving marketing from us, and your communication history with our customer service team.
• Usage data: information about how you use our website, products and services (collected via cookies — see Section 6).

3. How we use your information

We use your personal data for the following purposes and lawful bases:

• Performance of contract — to process orders, take payment, ship products, and handle returns and refunds.
• Legitimate interest — to prevent fraud, secure our site, improve our products and services, and analyse aggregate site usage.
• Consent — to send you marketing emails, SMS or push notifications. You can withdraw consent at any time using the unsubscribe link in every email.
• Legal obligation — to keep accounting and tax records, respond to lawful requests from public authorities, and meet our regulatory duties.

4. Who we share your data with

We share your personal data only with carefully selected service providers who help us run our business, and only to the extent necessary for them to perform their services. These include:

• E-commerce platform: Shopify Inc.
• Payment processors: Shopify Payments, Stripe, PayPal.
• Shipping carriers: DHL, UPS, FedEx, Royal Mail and local delivery partners.
• Email & marketing platforms: Klaviyo for transactional and marketing email.
• Analytics: Google Analytics 4 (with IP anonymisation), Meta Pixel.
• Customer support tools: our help-desk software for ticket management.

We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.

5. International transfers

Some of our service providers are located outside the European Economic Area (EEA) and the United Kingdom. When we transfer personal data outside these regions, we rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard to ensure your data receives an adequate level of protection.

6. Cookies and similar technologies

We use cookies and similar technologies to keep your shopping cart, remember your preferences, measure how visitors use the site, and deliver relevant advertising. We use the following categories:

• Strictly necessary: required for the site to function (e.g. cart, checkout, security). Always on.
• Functional: remember language, currency and recently viewed products.
• Analytics: help us understand how visitors interact with the site so we can improve it.
• Advertising: used to show you relevant ads on third-party sites and measure their effectiveness.

You can accept or reject non-essential cookies via the cookie banner when you first visit the site, and update your preferences at any time in your browser settings.

7. Data retention

We keep your personal data only as long as necessary for the purposes we collected it for, including legal, accounting or reporting requirements:

• Order and transaction records: retained for 7 years to meet tax and accounting obligations.
• Customer account data: retained while your account is active, and for 2 years after last activity.
• Marketing data: until you unsubscribe, plus 30 days for suppression-list management.
• Support tickets: retained for 3 years from the date of resolution.
• Website analytics: aggregated and anonymised after 14 months.

8. Your rights

Depending on where you live, you have the following rights:

• Right of access — get a copy of the personal data we hold about you.
• Right to rectification — correct inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") — ask us to delete your data, subject to our legal obligations.
• Right to restriction — pause our processing of your data while a query is resolved.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interest, or to direct marketing at any time.
• Right to withdraw consent — where we rely on consent, withdraw it at any time.
• Right to lodge a complaint — with your local supervisory authority (e.g. the UK ICO, the Irish DPC, or the California Attorney General).

To exercise any of these rights, email customer.service@linaroluxury.com. We will respond within 30 days.

9. Security

We use industry-standard security measures to protect your data, including TLS/SSL encryption in transit, encryption at rest for sensitive fields, role-based access controls, and regular security reviews. No system is 100% secure, but we work hard to keep your data safe and we will notify you and the relevant supervisory authority of any qualifying data breach within 72 hours.

10. Children

Our site is not directed to children under 16, and we do not knowingly collect data from them. If you believe a child has given us personal data, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be highlighted at the top of this page, and where required by law we will notify you by email before the changes take effect.

12. Contact

Questions, requests, or complaints about this Privacy Policy or our data practices? Email customer.service@linaroluxury.com — we read every message.