Privacy policy

Effective Date: 12 October 2026

At luccas.shop, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, disclose, and protect your information when you visit our website, purchase Fashion & Apparel products, contact our customer support team, or otherwise interact with our services.

By using our website, you acknowledge that your personal information will be handled as described in this Privacy Policy, subject to applicable data protection laws, including the General Data Protection Regulation (GDPR) and relevant French data protection legislation.

1. Information We Collect

We collect information that is necessary to operate our online store, process orders, provide customer service, and improve your shopping experience.

Personal Information

When you place an order, contact us, or interact with our website, we may collect:

Full name
Billing and shipping address
Email address
Telephone number
Order details and purchase history
Information you provide when contacting customer support
Other information you voluntarily submit through our website

Payment Information

Payments on our website are processed through Stripe. We may receive transaction confirmations, payment status, transaction references, and limited payment-related information necessary to manage your order.

Your payment details are handled according to Stripe's applicable security and privacy practices. We do not intentionally store complete payment card details on our own systems when payment processing is handled by Stripe.

Technical and Usage Information

When you visit our website, certain technical information may be collected automatically, including your IP address, browser type, device information, operating system, pages visited, referring website, and interactions with our website.

Cookies and similar technologies may also collect information about your browsing activity, depending on your cookie preferences and applicable legal requirements.

2. How We Use Your Information

We use the information we collect for the following purposes:

To process, confirm, and fulfil your orders.
To arrange shipping and delivery throughout France.
To process payments and manage transactions through Stripe.
To provide order confirmations, shipping updates, and other essential service communications.
To respond to questions, complaints, return requests, and refund enquiries.
To manage returns, exchanges, and refunds in accordance with our policies.
To maintain website security and prevent fraudulent or unauthorised transactions.
To improve our website, product selection, and customer experience.
To comply with applicable legal, tax, accounting, and regulatory obligations.
To send marketing communications where permitted by law and, when required, with your consent.

We do not use personal information for purposes that are incompatible with the purposes described in this policy unless permitted or required by applicable law.

3. Legal Basis for Processing

Where required under the GDPR, we process personal information on one or more of the following legal bases:

Contractual necessity: To process your order, arrange delivery, handle payments, and provide customer support related to your purchase.

Legal obligations: To comply with applicable tax, accounting, consumer protection, and other legal requirements.

Legitimate interests: To secure our website, prevent fraud, manage our business operations, and improve our services, provided these interests do not override your rights and freedoms.

Consent: To use non-essential cookies or send certain marketing communications where consent is required.

Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Payment Processing

We accept payments through Stripe only.

When you make a purchase, relevant transaction and order information may be shared with Stripe to authenticate and process your payment, prevent fraud, and complete the transaction.

Stripe may process your information in accordance with its own privacy policy and applicable terms. We encourage customers to review Stripe's privacy information to understand how their payment data is handled.

We do not offer alternative payment processors unless our payment arrangements are officially updated.

5. Shipping and Order Fulfilment

To deliver your Fashion & Apparel purchases, we use the name, delivery address, contact information, and order details necessary to fulfil your order.

We offer free shipping throughout France. Our standard estimated delivery schedule is:

Order handling time: 1–2 business days.
Transit time: 3–4 business days.
Estimated total delivery time: 4–6 business days.

Orders are generally subject to a daily order cut-off time of 2:00 PM Central European Summer Time (CEST). Orders placed after the cut-off may begin processing on the next business day.

We may share relevant delivery information with shipping providers or fulfilment partners as necessary to complete your order and provide delivery updates.

Delivery estimates are provided for informational purposes and may occasionally be affected by circumstances outside our control.

6. Returns and Refunds

We offer a 30-day return window and free returns in accordance with our Returns and Refunds Policy.

If you request a return or refund, we may use your order number, contact details, purchase information, and return-related communications to verify your request and process it.

Refunds are generally processed within 4–6 business days after the applicable return or refund request has been approved and is ready for processing. The time it takes for the refunded amount to appear in your account may depend on Stripe, your bank, or your payment provider.

We retain return and refund records where necessary for customer service, fraud prevention, accounting, and legal compliance.

7. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support essential website functionality, maintain security, remember preferences, and understand website performance.

Cookies may include:

Essential cookies: Necessary for core website functions, security, and checkout operations.
Preference cookies: Used to remember settings and improve your browsing experience.
Analytics cookies: Used to understand how visitors interact with our website, where implemented.
Marketing cookies: Used for advertising or measuring marketing performance, where implemented and legally permitted.

Non-essential cookies will be used only in accordance with applicable consent requirements. Where consent is required, you can manage your preferences through the available cookie settings.

You may also manage cookies through your browser settings. Disabling certain cookies may affect some website features.

8. Sharing Your Personal Information

We do not sell your personal information to third parties.

We may share information with trusted service providers when necessary to operate our store and fulfil your requests, including:

Stripe and other relevant payment-related service providers involved in payment processing.
Shipping and delivery providers.
Website hosting, maintenance, security, and technical support providers.
Analytics or marketing service providers, where applicable and legally permitted.
Professional advisers, auditors, or authorities when disclosure is necessary to meet legal obligations or protect our legal rights.

Service providers are expected to handle personal information in accordance with applicable privacy and data protection requirements.

We may also disclose information where required by law, in response to valid legal requests, or when necessary to prevent fraud, protect our customers, or safeguard our business.

9. International Data Transfers

Some of our service providers may process personal information outside France or the European Economic Area (EEA).

Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer complies with applicable data protection laws. Depending on the circumstances, these safeguards may include an adequacy decision, standard contractual clauses, or another legally recognised transfer mechanism.

10. Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this policy, including processing orders, providing customer support, managing returns, preventing fraud, and complying with legal obligations.

Retention periods vary according to the type of information and the reason it is collected. Certain transaction, invoice, and accounting records may need to be retained for statutory periods under French law.

When personal information is no longer required, we will take appropriate steps to delete it or anonymise it, subject to applicable legal requirements.

11. Data Security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss, or misuse.

These measures may include access controls, secure website technologies, service-provider safeguards, and appropriate administrative procedures.

However, no method of electronic transmission or storage can be guaranteed to be completely secure. We therefore cannot guarantee absolute security of information transmitted through the internet.

12. Your Privacy Rights

Depending on your circumstances and applicable law, you may have the right to:

Access: Request a copy of the personal information we hold about you.
Rectification: Ask us to correct inaccurate or incomplete information.
Erasure: Request deletion of personal information where the legal conditions are met.
Restriction: Ask us to restrict certain processing activities.
Data portability: Receive certain information in a structured, commonly used, machine-readable format.
Object: Object to processing based on legitimate interests or to direct marketing, as applicable.
Withdraw consent: Withdraw consent where processing is based on your consent.
Lodge a complaint: Submit a complaint to the relevant data protection authority.

To exercise your rights, contact us using the support email listed at the end of this policy. We may need to verify your identity before responding to your request.

We will respond within the time limits required by applicable law. Certain rights may be subject to legal exceptions, including our obligations to retain specific records.

If you are located in France, you may contact the Commission Nationale de l'Informatique et des Libertés (CNIL) for information about your data protection rights or to submit a complaint.

13. Children's Privacy

Our website is intended for general customers and is not specifically directed at children.

We do not knowingly collect personal information from children in circumstances where such collection is prohibited by applicable law. If you believe that a child has provided personal information to us unlawfully, please contact us so that we can review the matter and take appropriate action.

14. Third-Party Websites

Our website may contain links to third-party websites, payment services, or other external resources.

We are not responsible for the privacy practices, content, or security of websites that we do not operate. When you visit a third-party website, we recommend reviewing its privacy policy before providing personal information.

15. Marketing Communications

We may send promotional emails about our Fashion & Apparel products, offers, or store updates where permitted by law and, where required, with your prior consent.

You can unsubscribe from promotional emails by using the unsubscribe link included in the message or by contacting our support team.

Even if you opt out of marketing communications, we may continue sending essential messages relating to your orders, payments, deliveries, returns, refunds, or customer service enquiries.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, website functionality, service providers, or legal requirements.

Any updated version will be published on this page with a revised effective date. We encourage you to review this page periodically to stay informed about how we protect your personal information.

17. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or need more information about how your personal information is handled, please contact us using the details below.