Privacy policy

Privacy Policy

We know you're trusting us with your personal information, and we take that seriously. This policy explains what personal data we collect when you visit or shop on cicella.com, why we collect it, how long we keep it, who we share it with, and what rights you have — in line with the EU General Data Protection Regulation (GDPR) and Dutch law.

This policy applies only to cicella.com. We are not responsible for the privacy practices of any other website, even if linked from ours.

The data controller for cicella.com is:

Company Name: S/E I/S

Company registration number: 45070409

E-mail: privacy@cicella.com

We have not appointed a Data Protection Officer, as this isn't required for a business of our size and the type of data we process. If you have questions about this policy or how we handle your data, contact us at the e-mail above.

Placing an order

When you place an order, we collect your name, delivery and billing address, e-mail address, phone number, and payment details (the latter processed by our payment provider — see "Who we share your data with"). We use this to process and deliver your order, handle payment, provide customer service, and meet our legal obligations, such as invoicing and tax records. Legal basis: performance of our contract with you, and our legal obligation to keep financial records.

Customer service

When you contact us — by e-mail, contact form, or otherwise — we keep a record of that conversation, including any personal data you choose to share, so we can respond to you and follow up if needed. Legal basis: performance of our contract with you, or our legitimate interest in resolving your enquiry.

Newsletter and marketing

If you sign up for our newsletter, we use your e-mail address — and, if provided, your name and order history — to send you marketing communications and personalise them to your interests. Legal basis: your consent, which you can withdraw at any time (see "Newsletter preferences" below).

Cookies, analytics and advertising

See the "Cookies" section below.

Combining data

Where we have a valid legal basis, we may link data across the purposes above to run our business effectively — for example, using your order history to personalise the marketing e-mails we send you, or building advertising audiences on platforms such as Meta from our customer or newsletter list. Where this relies on your consent — such as non-essential cookies or marketing-based ad audiences — you can withdraw that consent at any time.

We share personal data with the following categories of recipients, who process it on our instructions (as our processors) or, in some cases, as independent controllers under their own privacy terms:

—   Shopify, our e-commerce platform, which hosts our webshop and processes orders

—   Mollie, our payment provider, to process payments (including iDEAL)

—   Klaviyo, our e-mail platform, to send order confirmations and, where you've opted in, marketing e-mails

—   Advertising platforms such as Meta, where you've consented to marketing cookies, so we can show you and similar audiences relevant ads

—   Shipping and logistics partners, to deliver your order

We require our processors to protect your data under a data processing agreement. We do not sell your personal data.

Some of the parties above (including Shopify, Meta and Klaviyo) are based outside the EU/EEA, mainly in the United States. Where we transfer personal data outside the EU/EEA, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses or, where applicable, the EU-U.S. Data Privacy Framework.

—   Order and invoice data: 7 years, as required by Dutch tax law

—   Customer service correspondence: 2 years after our last contact with you

—   Newsletter and marketing data: until you unsubscribe or withdraw consent, or after 2 years of inactivity

—   Cookie data: see retention periods in the cookie table you display in your cookie banner

Under the GDPR, you have the right to:

—   Access the personal data we hold about you

—   Correct inaccurate data

—   Have your data deleted, where applicable

—   Restrict or object to our processing of your data

—   Receive your data in a portable format

—   Withdraw consent at any time, without affecting processing carried out before the withdrawal

To exercise any of these rights, contact us at privacy@cicella.com. We will respond within one month, as required by law.

If you believe we are not handling your data properly, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), autoriteitpersoonsgegevens.nl.

Every newsletter includes a link to update your preferences or unsubscribe. You can also contact us directly to be removed from our marketing list.

Cookies are small text files placed on your device when you visit our website. We use the following categories:

—   Strictly necessary cookies (e.g. shopping cart, checkout, login) — these don't require consent, as the website can't function without them

—   Analytics cookies — help us understand how visitors use our site, so we can improve it

—   Marketing cookies — used by us and our advertising partners (such as Meta) to show you relevant ads on and off our site, and to measure ad performance

We only place analytics and marketing cookies with your prior, explicit consent, given via the cookie banner when you first visit our site. You can decline non-essential cookies just as easily as you can accept them, and you can change your choice at any time via https://cicella.com/policies/privacy-policy.

If you decline or later withdraw consent, we stop placing new non-essential cookies, though your browser may still hold ones already set until they expire or you clear them.

Most browsers also let you block or delete cookies directly in your settings. Some parts of our website may not work properly if you do this.

We do not use fully automated decision-making that produces legal or similarly significant effects on you — for example, we don't automatically refuse an order or a refund without human review. We do use profiling for marketing purposes, such as showing you relevant ads based on your browsing or purchase history, where this relies on cookies you've consented to.

We take appropriate technical and organisational measures to protect your personal data against loss or unauthorised access, including secure, encrypted connections and access controls on our systems.

We may update this privacy policy from time to time — for example, when we start using a new tool or service. We recommend checking this page occasionally.

We strive to ensure that all information on this page is accurate and up to date. However, we reserve the right to correct any errors, inaccuracies, or omissions at any time without prior notice. In the event of a discrepancy between the information on this page and applicable law, the latter shall prevail.

This page may be available in multiple languages. We do our best to keep translations accurate; however, if you shopped with us in Dutch or Danish, the terms of that language version govern our agreement with you, and any unclear wording is interpreted in the way most favourable to you, as required under Dutch consumer law. The English version serves as our internal master reference.