Privacy policy

Privacy Policy

Last updated: 02 December 2025

Luca Mia Boutique operates this store and website, including all related information, content, features, tools, products, and services (the “Services”), in order to provide you with a curated shopping experience. Luca Mia Boutique is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and share your personal data when you visit, use, or make a purchase or other transaction through the Services, or otherwise communicate with us.

To the extent there is any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy shall prevail with respect to the collection, processing, and disclosure of your personal data.

Please read this Privacy Policy carefully. By using the Services, you confirm that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described herein.

1) Personal Data We Collect or Process

“Personal data” means information that identifies you or can reasonably be linked to you. Anonymous or de-identified information that cannot identify you is not considered personal data.

Depending on your use of the Services, your place of residence, and applicable law, we may process the following categories of personal data, including conclusions derived from such data:

  • Contact information: name, address, billing and shipping address, phone number, email address.

  • Payment information: credit/debit card details, payment service information (e.g. payment confirmation), account details, transaction information, selected payment method.

  • Account information: username, password, security questions, preferences, and settings.

  • Transaction information: viewed items, shopping cart/wishlist entries, purchases, returns, exchanges, cancellations, and transaction history.

  • Communications: contents of your inquiries (e.g. customer support contact).

  • Device information: device/browser/network information, IP address, unique identifiers.

  • Usage data: interactions with the Services (such as how and when you browse or make purchases).

2) Sources of Personal Data

We collect personal data:

  • Directly from you: for example when creating an account, placing an order, or contacting us.

  • Automatically through the Services: for example through your device, cookies, and similar technologies.

  • From service providers: when they provide technology or process data on our behalf.

  • From partners and third parties.

3) Purposes of Data Processing

a) Providing, Personalising & Improving the Services

Fulfilling contracts, processing payments, handling orders, shipping and returns, account management, notifications, reviews, recommendations, and personalised shopping experiences.

b) Marketing & Advertising

Sending marketing, promotional, or advertising communications (email, SMS, post) and displaying online advertisements, potentially based on previous purchases, cart data, and use of the Services.

c) Security & Fraud Prevention

Account verification, secure shopping and payment experiences, detection, investigation, and response to fraudulent, unlawful, or harmful activities, and protection of our Services.

d) Communication & Support

Providing customer service, responding to inquiries, and maintaining customer relationships.

e) Legal Reasons

Compliance with applicable laws, responding to lawful requests (e.g. from authorities), dispute resolution, and enforcement of our terms and policies.

4) Sharing Personal Data

We may disclose personal data in the following cases, subject to this Privacy Policy:

  • To Shopify, suppliers, and service providers acting on our behalf (e.g. IT, payment processing, analytics, customer support, cloud services, fulfilment, and shipping).

  • To business and marketing partners for advertising and marketing services, including personalised advertising based on your online activity across merchants and websites. Partners use data according to their own privacy policies. Depending on your place of residence, you may have the right to object to such sharing for advertising purposes.

  • At your direction or with your consent, for example shipping services or social media integrations.

  • Within our corporate group and affiliated companies.

  • In connection with business transactions (e.g. merger, acquisition, or insolvency), to comply with legal obligations, to enforce our terms, or to protect the Services, our rights, and the rights of others.

5) Relationship with Shopify

The Services are hosted by Shopify. Shopify collects and processes personal data regarding your access to and use of the Services in order to provide and improve the Services. Data you submit through the Services may be transferred to Shopify and third parties located outside your country of residence.

To improve our business, we use enhanced Shopify features that incorporate data from your interactions with our store, other merchants, and Shopify itself. In such cases, Shopify acts as the data controller for these purposes, including responding to requests regarding your rights.

For more information, please review the Shopify Consumer Privacy Policy and Shopify Privacy Portal.

6) Third-Party Websites & Links

The Services may contain links to third-party websites or platforms. Please review their privacy and security policies. We are not responsible for the content, security, or accuracy of third-party websites.

Information you share on public or semi-public channels (including social media) may be viewed and used by others.

7) Children’s Data

The Services are not intended for children, and we do not knowingly collect personal data from individuals below the age of majority in your jurisdiction. Parents or guardians may request deletion of such data by contacting us.

To our knowledge, we do not “share” or “sell” personal data of individuals under 16 years of age, where such terms are defined by applicable law.

8) Security & Retention

No security method is perfect, and transmissions over the internet may not always be secure. Please do not send sensitive information through unsecured channels.

We retain personal data for as long as necessary for account management, providing the Services, compliance with legal obligations, dispute resolution, and enforcement of agreements.

9) Your Rights & Choices

Depending on your place of residence, you may have the following rights, subject to applicable legal exceptions:

  • Right of access / right to know: access the personal data we process about you.

  • Right to deletion: request deletion of your personal data.

  • Right to correction: request correction of inaccurate personal data.

  • Right to data portability: receive a copy of your data or transfer it to another provider where applicable.

  • Communication preferences: unsubscribe from marketing emails using the unsubscribe link. Transactional emails may still be sent where necessary.

Additional Rights for UK/EEA Residents

  • Right to object to or restrict certain processing activities.

  • Right to withdraw consent (effective for future processing only).

You may exercise your rights through the Services where available or by contacting us using the information below.

For information regarding Shopify’s processing activities and your Shopify-related rights, please visit:
https://privacy.shopify.com/en

We do not discriminate against individuals exercising their rights. We may require identity verification before processing requests.

10) Complaints

If you have concerns regarding the processing of your personal data, please contact us using the details below.

Depending on your place of residence, you may also lodge a complaint with your local data protection authority.

11) International Data Transfers

We may transfer, store, and process personal data outside your country of residence.

For transfers from the EEA or the United Kingdom, we use recognised transfer mechanisms such as EU Standard Contractual Clauses or equivalent UK safeguards where required.

12) Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example due to changes in our practices, operational requirements, legal obligations, or regulatory requirements.

The updated version will be published on this website together with the revised “Last updated” date.

13) Contact

Questions or requests regarding this Privacy Policy:

Store Name

Luca Mia Boutique

Luca Mia Boutique is operated by Ecomexa LTD,
a company registered in the United Kingdom.

Business Address

ECOMEXA LTD
71–75 Shelton Street
WC2H 9JQ London
United Kingdom

Company Number

16609793

Contact

Email: support@lucamiaboutique.com

Phone: +61 386 141 653

Business Hours

Monday to Friday (09:00 AM – 05:00 PM GMT)