Privacy Policy

PRIVACY POLICY – ELLA & NOAH TORONTO

1) Information on the Collection of Personal Data and Contact Details of the Controller

1.1

We value your privacy and thank you for visiting our website. This Privacy Policy explains how Ella & Noah Toronto collects, processes, and protects your personal data when you visit our store or make a purchase.
Personal data means any information that can identify you as an individual.

1.2

The controller responsible for data processing on this website (in accordance with the General Data Protection Regulation – GDPR) is:

Ella & Noah Toronto
Customer Support: support@ellaandnoah-toronto.com

The controller is the legal or natural person who determines the purposes and means of processing personal data.

1.3

Our website uses SSL/TLS encryption for your security. You can recognize this by the "https://" and the padlock icon in your browser address bar.

2) Data Collection When Visiting Our Website

When you visit our website without creating an account or placing an order, we collect only the data your browser sends to our server (server log files), including:

  • Visited page(s)

  • Date and time of access

  • Data volume transferred

  • Source/referral (how you found us)

  • Browser type and version

  • Operating system

  • IP address (anonymized where possible)

Processing is based on Art. 6(1)(f) GDPR, serving our legitimate interest in ensuring the stability, security, and performance of our website.

3) Cookies

We use cookies to improve your browsing experience, enable certain functions, and analyze website traffic.

  • Session cookies are deleted when you close your browser.

  • Persistent cookies remain until they expire or you delete them.

Some cookies are essential for the ordering process (e.g. remembering cart items).
We may also work with third-party providers for marketing and analytics.

You can control cookies via your browser settings:

If you disable cookies, certain site features may not function properly.

4) Contacting Us

If you contact us via email or form, we store the data you provide to answer your inquiry.

  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest in responding to queries)

  • If your inquiry relates to an order or contract: Art. 6(1)(b) GDPR

5) Customer Accounts & Order Processing

When you create an account or place an order, we collect and process your data to:

  • Process and deliver your order

  • Provide customer support

  • Comply with legal obligations

After your order is completed, your data is stored according to applicable tax and commercial retention laws.

6) Email Marketing

  • Newsletter: Sent only with your explicit consent (Art. 6(1)(a) GDPR) via a double opt-in process.

  • Existing customers: We may email you offers for similar products (Art. 6(1)(f) GDPR). You can unsubscribe at any time.

7) Data Sharing for Order Fulfillment

We share your data only when necessary to process and deliver your order, for example:

  • Shipping providers

  • Payment processors (e.g. PayPal, Klarna, major credit cards)

  • Fraud prevention services

All partners process your data according to GDPR.

8) Payment Providers

PayPal, Klarna, and major credit cards are supported.
Each provider processes your data under their own privacy policy, which you should review.

9) Social Media Plugins

We use Shariff integration for Facebook, Instagram, and Google to ensure no data is shared unless you actively click a share button.

10) Online Marketing & Analytics

We use services like:

  • Google Analytics (with IP anonymization)

  • Facebook Pixel (with your consent) for ad optimization

  • Google Ads Conversion Tracking

You can opt out of these at any time via browser settings or the relevant provider's opt-out tools.

11) Your Data Protection Rights

Under GDPR, you have the right to:

  • Access your data

  • Correct inaccurate data

  • Request deletion ("Right to be Forgotten")

  • Restrict processing

  • Data portability

  • Withdraw consent at any time

  • Object to processing for direct marketing

  • File a complaint with your data protection authority

To exercise your rights, contact support@ellaandnoah-toronto.com.

12) Data Retention

We store your personal data only for as long as necessary:

  • For the purpose it was collected

  • To fulfill contracts and legal obligations

  • Until you withdraw consent (where applicable)

After the retention period, data will be deleted securely.