Privacy policy
Last updated: 21 September 2026
Section 1 – What data do we collect?
When you place an order through our webshop https://graceandcurvesboutique.com, we collect the personal data you provide yourself. This includes your name, address, email address, and other details needed to process your order.
In addition, we automatically receive certain technical information when you visit our website, such as your IP address, browser type, and operating system. This data helps us improve the performance and security of our website.
If you have given your consent, we may also send you emails with information about new products, offers, and other relevant updates.
Section 2 – Consent
How do we obtain your consent?
When you provide personal data to place an order, make a payment, arrange a delivery, or submit a return request, you consent to the processing of that data for that specific purpose.
When we wish to use your data for other purposes, such as marketing, we will always ask for your consent in advance or give you the option to decline.
How can you withdraw your consent?
You may withdraw your consent at any time by contacting us at Support@graceandcurvesboutique.com.
Section 3 – Disclosure of data
We only share your personal data when legally required to do so, or when necessary for the performance of our Terms & Conditions. We do not sell your personal information.
Section 4 – Shopify
Our webshop runs on the e-commerce platform of Shopify Inc. Shopify provides the technical infrastructure that allows us to offer our products online.
Your data is stored in Shopify’s secure databases and protected by modern security techniques, including a firewall.
When you choose a direct payment method, payment data is processed in accordance with the Payment Card Industry Data Security Standard (PCI-DSS). This data is retained only for as long as necessary to process your payment, and is deleted afterwards.
You can find more information in Shopify’s Terms of Service and Privacy Policy.
Section 5 – Third-party services
For certain services we use external parties, such as payment providers and carriers. These parties process only the data necessary to carry out their services.
External service providers apply their own privacy policies. We recommend reviewing those statements to understand how your data is processed by them.
Some service providers may be located in another country, which means your data may be subject to the laws of that country.
When you leave our website via an external link, this privacy policy no longer applies.
Section 6 – Security
We take appropriate technical and organizational measures to protect your personal data against loss, misuse, unauthorized access, alteration, or disclosure.
Data transmitted during payments is secured with SSL encryption and stored in accordance with the AES-256 encryption standard. We also comply with applicable PCI-DSS guidelines and other generally accepted security standards.
Section 7 – Your privacy rights
Depending on your state of residence, you may have the right to request access to the personal information we hold about you, to request its correction or deletion, and to opt out of the sale or sharing of personal information. We do not sell personal information.
To exercise any of these rights, email Support@graceandcurvesboutique.com. We will respond within the period required by applicable law and will not discriminate against you for exercising your rights.
Section 8 – Cookies
Our website uses cookies to ensure the website functions properly and to improve the user experience.
Cookies are used, among other things, to remember your preferences, collect statistics, and optimize the performance of the website.
You can find more information about the cookies Shopify uses at https://www.shopify.com/legal/cookies.
You can delete or disable cookies at any time through your browser settings. Please note this may cause certain features of the website to work less than optimally.
Section 9 – Children’s privacy
Our website is not directed at children under the age of 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.
Section 10 – Changes to this privacy policy
We reserve the right to amend or update this privacy policy at any time. Any changes take effect once published on our website.
If our company is acquired by or merges with another business, your personal data may be transferred to the new owner so that our services can be continued.
Customer Service
Opening hours
Monday – Friday: 9:00 AM – 5:00 PM ET
Saturday – Sunday: 10:00 AM – 5:00 PM ET
