Welcome to https://www.witchy-nails.com/ (“we”, “our”, or “the store”). This Privacy Policy explains how we collect, use, and protect your personal information when you shop with us online for fashion products.
Identity & contact: name, email, phone, billing/shipping address.
Order & billing: products purchased, payment method, last 4 digits of card (via our processor), transaction IDs.
Account data: username, password (hashed), order history, wishlists.
Support & forms: messages sent via contact forms, reviews, ticket history.
Technical & usage: IP address, device/browser, pages viewed, clicks, referral source, approximate location, cookies.
Marketing preferences: newsletter opt-ins/opt-outs, consent logs.
- UGC: photos/reviews you upload or tag us in.
To process your orders & deliver products (contract Art. 6(1)(b) GDPR).
Payments & fraud prevention (legitimate interests + legal obligation).
Customer support & returns (contract / legitimate interests).
Account management (contract).
Analytics & site performance (legitimate interests; consent where cookies are non-essential).
Marketing (email/SMS/ads) (consent; you may withdraw any time).
Legal compliance (tax, accounting, consumer protection).
We do not sell personal data. International transfers (e.g., to the US) use SCCs or other lawful safeguards. We share only what’s necessary with service providers, for example:
E-commerce & CMS: WordPress/WooCommerce, hosting [host name].
Payments: Stripe, PayPal (they act as independent controllers for payment details).
Fulfilment & shipping: [Wiio / Yakkyofy / carrier names] to ship orders.
Email & support: [Brevo/SendGrid/Mailgun], [Helpdesk/Chat].
Analytics & ads: Google Analytics, Meta Pixel, TikTok Pixel (only after consent where required).
Anti-fraud & security: [service]; server-side logs by our host.
We use cookies and similar tech to run the store, remember your cart, and measure performance/ads (after consent). You can change preferences anytime via the Cookie Settings link in the footer.
Orders & invoices: up to [6–10 years] (tax/accounting laws).
Accounts: as long as the account is active; delete on request.
Support tickets/forms: [12–24 months].
Marketing consent & logs: until you withdraw + [3 years] for proof.
Cookies: per table above or until you clear them.
You can access, rectify, erase, restrict, or object to processing; request data portability; and withdraw consent at any time without affecting prior processing.
To exercise these rights: email gbsunshop@gmail.com. We may verify your identity.
You also have the right to lodge a complaint with your local authority (e.g., CNIL in France, ICO in the UK, or your EU authority).
We send transactional emails (order, shipping, password reset).
For newsletters/offers, we rely on your opt-in consent. Unsubscribe via the link in each email or contact us.
Ads pixels only load after consent. You can update choices in Cookie Settings.
Our Website isn’t intended for children under 16. We do not knowingly collect data from minors. Parents may contact us to delete such data.
We use HTTPS, access controls, encryption at rest where supported by providers, and regular updates/backups. No method is 100% secure; please keep your account password confidential.
Our site may link to external websites. We are not responsible for their content or privacy practices—review their policies.
We may update this Policy periodically. Changes apply when posted with the “Last updated” date above. Material changes will be highlighted.
Privacy queries & rights requests
Email: gbsunshop@gmail.com