This Privacy Policy explains how The Olive Elephant (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit our website or purchase second-hand clothing from us. By using and accessing any of the services, you acknowledge that you have read this Privacy Policy and understand the collection, use and disclosure of your information as described in this Privacy Policy.
1. Personal Data We Collect
We collect personal data only when necessary to operate our shop and fulfill your orders.
a) When you place an order
- Name
- Shipping address
- Email address
- Payment details (processed through third-party payment providers; we do NOT store card numbers)
b) When you contact us
- Name
- Email address
- Content of your message
c) Automatically collected data
- IP address
- Browser information
- Pages visited
- Cookies (for basic site functionality; no unnecessary tracking cookies unless you add external tools)
2. How We Use Your Data
We use your personal data for:
- Processing and delivering your orders
- Providing customer support
- Communicating with you
- Operating and improving our website
- Fulfilling legal obligations (e.g., tax, accounting)
We do not sell or rent your personal data.
3. Legal Basis for Processing (GDPR Article 6)
- Contract performance – Art. 6(1)(b)
For processing orders and customer requests. - Legal obligation – Art. 6(1)(c)
For tax, accounting, and record-keeping. - Legitimate interest – Art. 6(1)(f)
For website security, fraud prevention, and analytics. - Consent – Art. 6(1)(a)
Only when required (e.g., if you subscribe to a newsletter or accept optional cookies).
4. Cookies
We use essential cookies that are necessary for the website to function.
If optional or tracking cookies are added in the future, we will display a cookie banner and request consent.
You can disable cookies in your browser at any time.
5. Data Sharing
We share data only when needed, such as with:
- Shipping providers (to deliver your orders)
- Payment processors (e.g., Stripe, PayPal — they process your payment data directly)
- Website hosting service
These providers receive only the data needed to perform their services.
6. Your GDPR Rights
You have the right to:
- Access your personal data
- Request correction or deletion
- Restrict or object to processing
- Request data portability
- Withdraw consent (when processing is based on consent)