Privacy

Who is responsible

The data controller is L & E S.R.L., Via della Moscova 49, 20121 Milano (MI), Italia. For any privacy matter, write to support@leclothing.shop or telephone +39 334 591 2638.

We have not appointed a data protection officer. We are not required to: we do not carry out large-scale systematic monitoring and we do not process special categories of data on a large scale. Enquiries go to the address above and are answered by a person.

What we collect and why

Three things we want to be explicit about

• Marketing consent is separate from your order. The mailing-list tick box at checkout is unticked by default, sits apart from the box that lets us process your order, and refusing it changes nothing about the purchase.
• Body measurements are treated as sensitive even though the law does not classify them so. They are used only to recommend a standard size, they are never used for marketing or profiling, they are never shared, and they are deleted after 12 months at the latest. You can ask us to delete them the moment you have your answer and we will do it that day.
• We do not profile or take automated decisions. No scoring, no automated rejection, no behavioural advertising, and we never sell or rent personal data to anyone.

Data we deliberately do not collect

Card numbers, dates of birth beyond confirming you are over 18, gender, and anything about your health. If a form here asks for something, it is because the order or your question cannot be handled without it.

Children

This shop is not for children. We do not knowingly collect data from anyone under 13. Where a customer is between 13 and 17, a parent or guardian must place the order and give consent for the data we hold. If you believe we hold data about a child, write to us and we will delete it immediately.

Who else sees your data

Only the parties that have to, each acting as a processor under a contract with us that meets article 28 of the GDPR:

• Our payment provider, to take payment and handle refunds and disputes.
• The carrier, to deliver the parcel — name, address, telephone and email only.
• Our email provider, to send order and enquiry messages.
• Our hosting provider, which stores the site and the order database.
• Our accountant, for tax and statutory accounting.

We also disclose data where the law requires it — to a tax authority, a customs authority or a court. We tell you when that happens unless we are forbidden from doing so.

Where your data goes

Data is stored on servers in the European Union. Where a processor operates outside the EEA — for example a carrier delivering to your country — the transfer relies on an adequacy decision by the European Commission, or on standard contractual clauses with supplementary safeguards. Ask us and we will tell you which mechanism applies to a specific provider.

Security

The site is served entirely over HTTPS with TLS. Card details never reach our infrastructure; they are entered on the certified page of a payment provider assessed to PCI DSS Level 1. Access to the order database is limited to the people who need it, and it is encrypted at rest. If a breach ever puts your rights at risk, we notify the Garante within 72 hours and tell you directly without undue delay.

Your rights

Under articles 15 to 22 of the GDPR you may ask us to give you a copy of your data; correct it; delete it; restrict how we use it; give it to you in a portable format; or object to processing based on our legitimate interests. Where processing rests on consent, you may withdraw it at any time, and doing so does not affect what was lawful before.

Write to support@leclothing.shop. We reply within 30 days, free of charge. We will ask you to confirm your identity, but only by matching an order — never by asking for a document we did not previously hold.

Complaints

You may complain to the Italian supervisory authority, the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Roma, or to the supervisory authority of the EU country where you live. You do not have to come to us first, though we would rather you did.

Cookies

Cookies are covered separately, with every cookie listed by name, purpose and duration, on the cookie notice.