Privacy Policy

Last updated: 6 October 2026

1. Introduction

Divinia Couture ("we", "our", "us") respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and protect personal data when you:

Visit our website
Place an order
Create or use an account, where available
Contact us
Subscribe to marketing communications
Submit a review or other content
Otherwise interact with Divinia Couture

We are based in Sweden and sell to customers within the European Union. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Swedish data protection legislation.

2. Who Is Responsible for Your Personal Data?

The controller responsible for your personal data is:

Divinia Couture

Email: diviniacouture@gmail.com
Phone: +46723056261

If you have questions about how we process your personal data, please contact us using the email address above.

3. Personal Data We Collect

We collect personal data that you provide directly to us and certain information that is collected automatically when you use our website.

Information you provide directly

Depending on how you interact with us, this may include:

Full name
Email address
Telephone number
Billing address
Shipping address
Order details
Purchase history
Return and refund information
Measurements and specifications provided for custom or made-to-measure orders
Design preferences and other information necessary to fulfil customised orders
Messages and customer service communications
Reviews or other content you choose to submit
Marketing preferences and consent records

Payment information

Payments are processed through third-party payment providers.

We do not intend to store complete payment card numbers or security codes on our own systems.

Payment providers may collect and process payment information according to their own privacy policies and applicable law.

Automatically collected information

When you visit our website, certain technical information may be collected automatically, depending on the website features and cookies you have enabled.

This may include:

IP address
Browser type and version
Device type
Operating system
Language and general location information
Pages visited
Time spent on pages
Referring website
Website interactions
Cookie identifiers and similar technical identifiers

We do not use automatically collected information to identify you personally unless this is necessary for a specific legitimate purpose.

4. How We Use Your Personal Data

We may use personal data for the following purposes:

Processing and fulfilling orders

We use your information to:

Process your order
Manufacture or prepare your products
Deliver your order
Process payments
Handle returns and refunds
Communicate with you about your order
Provide customer support

Custom and personalised orders

If you order a custom, personalised or made-to-measure product, we may process additional information such as measurements, design specifications, colour preferences and other information that you provide to us.

We use this information only to fulfil and manage your order and provide the requested service.

Website operation

We may use personal data and technical information to:

Operate and maintain our website
Keep the website secure
Prevent fraud and abuse
Troubleshoot technical problems
Improve website functionality

Communication

We may use your contact details to respond to:

Questions
Customer service requests
Order-related communications
Complaints
Returns and refund requests

Marketing

Where required by applicable law, we will only send marketing communications where we have an appropriate legal basis, such as your consent.

You can unsubscribe from marketing emails at any time by using the unsubscribe link included in the communication or by contacting us.

Unsubscribing from marketing communications does not affect transactional emails relating to orders or services you have purchased.

Analytics and improvement

Where applicable and where legally permitted, we may use analytics information to understand how visitors use our website and to improve our products, services and website.

Where consent is required for a particular analytics or tracking technology, we will obtain consent before activating it.

5. Legal Bases for Processing

Under the GDPR, we must have a legal basis for processing personal data.

Depending on the circumstances, we may rely on the following legal bases:

Contract

We process personal data when necessary to enter into or perform a contract with you, including when you place an order.

For example, this includes processing your name, address, contact details and order information to fulfil your purchase.

Legal obligation

We may process personal data where necessary to comply with legal obligations, including accounting, tax, consumer protection and other statutory requirements.

Consent

We may rely on your consent for specific processing activities, such as certain marketing communications or non-essential cookies.

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

Legitimate interests

We may process personal data where necessary for our legitimate interests, provided that those interests are not overridden by your fundamental rights and freedoms.

Examples may include:

Protecting our website and systems
Preventing fraud
Maintaining website security
Managing customer relationships
Improving our services
Defending or establishing legal claims

6. Who We Share Personal Data With

We do not sell your personal data.

We may share personal data with trusted third parties where necessary to operate our business and provide our services.

These may include:

Payment service providers
Delivery and shipping companies
Website hosting providers
Squarespace and relevant technology providers
Email and customer communication providers
Analytics providers
Marketing providers, where applicable
IT and security service providers
Accountants, lawyers and other professional advisers

These providers may process personal data on our behalf and, where applicable, act as data processors under the GDPR.

We may also disclose personal data:

Where required by law
In response to a valid legal request
To protect our rights or property
To prevent fraud or unlawful activity
Where necessary to protect the safety of our customers or others

7. Squarespace and Third-Party Services

Our website is hosted and operated using third-party technology services, which may include Squarespace and services integrated with our website.

Depending on the features enabled on our website, these providers may process information such as:

IP addresses
Device information
Website usage information
Cookie identifiers
Order and transaction information
Contact information

The specific third-party services used may change over time as we update or improve our website.

Where third-party services process personal data on our behalf, we take reasonable steps to ensure that appropriate data protection agreements and safeguards are in place where required.

Third-party providers may also have their own privacy policies governing their processing activities.

8. International Data Transfers

Some of our service providers may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we will use an appropriate legal mechanism under the GDPR where required.

This may include:

A European Commission adequacy decision
Standard Contractual Clauses approved by the European Commission
Other lawful transfer mechanisms recognised under applicable data protection law

Where appropriate, we will also take additional measures to protect personal data transferred internationally.

9. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Cookies may be used for purposes such as:

Website functionality
Shopping cart functionality
Remembering preferences
Security
Website performance
Analytics
Marketing and advertising, where applicable

Some cookies are necessary for the website to function and cannot be disabled through the cookie settings.

Where consent is required for non-essential cookies, we will ask for your consent before placing or activating those cookies.

You can manage your cookie preferences through our cookie consent tools where available.

You can also adjust your browser settings to block or delete cookies. Please note that disabling certain cookies may affect website functionality.

10. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

The exact retention period depends on the type of information and why we need it.

For example:

Order and accounting information

Information relating to purchases may need to be retained for the period required by Swedish accounting, tax and other applicable legislation.

Customer service communications

Customer service messages may be retained for as long as reasonably necessary to handle your request, resolve disputes and maintain appropriate business records.

Marketing information

Where processing is based on consent, marketing information will generally be retained until you withdraw your consent or the information is no longer necessary.

Legal claims

Information may be retained for as long as reasonably necessary to establish, exercise or defend legal claims.

When personal data is no longer required, we will delete it or anonymise it where reasonably possible.

11. Your Rights Under the GDPR

Depending on the circumstances, you have the following rights under the GDPR:

Right of access

You can request information about the personal data we hold about you and request a copy of that information.

Right to rectification

You can ask us to correct inaccurate or incomplete personal data.

Right to erasure

You may ask us to delete your personal data in certain circumstances.

This right is not absolute and does not apply where we have a legal obligation or another lawful reason to retain the information.

Right to restriction

You may request that we restrict the processing of your personal data in certain circumstances.

Right to object

You may object to certain processing based on our legitimate interests.

You also have an absolute right to object to the processing of your personal data for direct marketing purposes.

Right to data portability

Where applicable, you may request to receive personal data that you have provided to us in a structured, commonly used and machine-readable format.

Right to withdraw consent

Where we process your personal data based on consent, you may withdraw your consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

12. How to Exercise Your Rights

To exercise any of your data protection rights, please contact:

diviniacouture@gmail.com

Please provide enough information for us to understand your request and verify your identity where reasonably necessary.

We will respond to valid requests within the timeframe required by applicable data protection law.

In certain circumstances, we may be permitted to charge a reasonable fee or refuse a request where permitted by law, for example where requests are manifestly unfounded or excessive.

13. Complaints

If you believe that we have processed your personal data unlawfully, please contact us first so that we have an opportunity to address your concern.

You also have the right to lodge a complaint with the Swedish data protection authority:

Integritetsskyddsmyndigheten (IMY)

You can find information about your rights and how to submit a complaint on the IMY website.

14. Children's Privacy

Our website is not directed specifically at children.

We do not knowingly collect personal data from children where such collection is prohibited by applicable law.

If you believe that a child has provided us with personal data in circumstances where this was not appropriate, please contact us.

15. Data Security

We take reasonable technical and organisational measures to protect personal data against:

Unauthorised access
Loss
Misuse
Alteration
Disclosure
Destruction

However, no online service or method of transmission can be guaranteed to be completely secure.

16. Third-Party Websites

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices, security or content of third-party websites.

We recommend reviewing the privacy policy of any third-party website you visit.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website, services, technology or applicable legal requirements.

The latest version will always be published on our website.

The "Last updated" date at the top of this page indicates when the policy was most recently revised.

18. Contact

If you have questions about this Privacy Policy or how we process personal data, please contact: