Legal
Privacy
This policy explains what personal data VILNA (“we”) collects when you use vilna.fashion, why we collect it and the choices you have. We are the data controller for the purposes of the GDPR and comparable US state laws.
What we collect
- Order data: name, email, shipping and billing address, phone number, the items you buy and payment status. Card details are handled by Stripe and never reach our servers.
- Account data: email, password hash, saved addresses and your wishlist, if you create an account.
- Technical data: IP address, browser and device information, and cookies strictly necessary to keep your bag, language and region between pages.
- Marketing data: your email address, if you subscribe to our letters. You can unsubscribe from any email.
Why we use it
To fulfil and deliver your order, provide customer care, prevent fraud, meet tax and accounting obligations, and — with your consent — send you news from the atelier. We do not sell personal data and we do not use third-party advertising trackers.
Who we share it with
Stripe (payments), our shipping carriers (delivery), Zoho Books (accounting) and our hosting provider in the EU. Each processes data only on our instructions.
Retention
Order records are kept for the period required by tax law (typically 7–10 years). Account data is kept until you delete your account. Marketing data is kept until you unsubscribe.
Your rights
You may access, correct, export or delete your data, object to processing, or withdraw consent at any time by emailing care@vilna.fashion. EU residents may also complain to their local supervisory authority.
Cookies
We use only functional cookies: a cart identifier, a language preference, a region preference, a session token when you sign in, and a cache identifier. No consent banner is shown because no optional cookies are set.