Privacy Policy
1. Data Controller
The operator of andjessicasimpson.com is responsible for processing your personal data in compliance with applicable privacy laws (GDPR, CCPA, etc.).
2. Information We Collect
We may process:
- Identity Data (name, address, contact details)
- Transaction Data (purchase history, payment information)
- Technical Data (IP address, device type, cookies)
- Preferences (size selections, wish lists)
3. Legal Basis & Purpose
| Purpose | Legal Basis (GDPR) | Retention Period |
|---|---|---|
| Order Processing | Contract (Art. 6(1)(b)) | 5 years |
| Customer Support | Legitimate Interest (6(1)(f) | 3 years |
| Marketing* | Consent (6(1)(a)) | Until withdrawn |
*Opt-in required for newsletters
4. Data Sharing
We only share with:
• Payment processors (PCI-DSS compliant)
• Shipping carriers (minimum necessary data)
• Analytics providers (anonymous data only)
5. International Transfers
Data may be transferred to:
- Adequacy Decision Countries (e.g., UK, Canada)
- US Providers (under Standard Contractual Clauses)
6. Your Rights
Depending on residency, you may:
→ Access/rectify your data
→ Request deletion*
→ Object to processing
→ Data portability
*Exceptions apply for legal obligations
7. Security Measures
We implement:
• TLS 1.3 encryption
• Regular security audits
• Two-factor authentication for staff
8. Cookies
Essential cookies only for:
✓ Shopping cart functionality
✓ Account authentication
Manage preferences via browser settings.
9. Children’s Privacy
We do not knowingly collect data from users under 16.
10. Policy Updates
Changes will be posted here with effective dates.
Exercising Your Rights
Submit requests via:
- Your account privacy dashboard
- Data Request Portal (requires ID verification)