Privacy Policy

Vamylia.com - Children's Costume Rental Service

Last Updated: May 15, 2023

This Privacy Policy explains how Vamylia.com ("we," "us," or "our") collects, uses, shares, and protects your personal information when you visit our website or use our children's costume rental services. We respect your privacy and are committed to protecting your personal data in compliance with applicable privacy laws, including the General Data Protection Regulation (GDPR).

1. Information We Collect

We collect several types of information from and about users of our website, including:

1.1 Personal Data

  • Identity Information: First name, last name, username or similar identifier, and date of birth
  • Contact Information: Billing address, delivery address, email address, and telephone numbers
  • Financial Information: Payment card details (processed securely through our payment processors)
  • Transaction Information: Details about payments to and from you and other details of products and services you have purchased from us
  • Technical Information: Internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website

1.2 Usage Data

Information about how you use our website, products, and services, including browsing patterns, page views, traffic data, and other communication data.

2. How We Collect Your Information

We use different methods to collect data from and about you including through:

  • Direct interactions: Information you provide when creating an account, placing an order, completing forms, or corresponding with us
  • Automated technologies: As you interact with our website, we may automatically collect technical data about your equipment, browsing actions, and patterns using cookies and similar technologies
  • Third parties: We may receive personal data about you from various third parties such as payment processors, analytics providers, and advertising networks

3. How We Use Your Information

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • To register you as a new customer and manage your account
  • To process and deliver your orders, including managing payments and collecting money owed to us
  • To manage our relationship with you, including notifying you about changes to our terms or privacy policy
  • To enable you to participate in reviews, competitions, or complete surveys
  • To improve our website, products/services, marketing, and customer relationships
  • To recommend products or services that may interest you
  • To comply with legal obligations

4. Legal Basis for Processing

Under GDPR, we must have a legal basis for processing your personal data. We primarily rely on the following legal grounds:

  • Contractual necessity: Processing is necessary for the performance of a contract with you
  • Legitimate interests: Processing is necessary for our legitimate interests, provided those interests do not override your fundamental rights and freedoms
  • Legal obligation: Processing is necessary for compliance with a legal obligation
  • Consent: You have given clear consent for us to process your personal data for a specific purpose

5. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the data, and applicable legal requirements.

6. Your Data Protection Rights

Under certain circumstances, you have the following rights under data protection laws in relation to your personal data:

  • Access: Request access to your personal data
  • Correction: Request correction of incomplete or inaccurate data
  • Erasure: Request deletion of your personal data in certain circumstances
  • Restriction: Request the restriction of processing of your personal data
  • Data portability: Request the transfer of your personal data to you or a third party
  • Objection: Object to processing of your personal data in certain circumstances
  • Automated decision-making: Rights related to automated decision-making and profiling

If you wish to exercise any of these rights, please contact us. You will not have to pay a fee to access your personal data or to exercise any of your other rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

7. Cookies and Similar Technologies

Our website uses cookies and similar tracking technologies to distinguish you from other users. This helps us provide you with a good experience when browsing and also allows us to improve our site. A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer. We use the following types of cookies:

  • Strictly necessary cookies: Required for the operation of our website
  • Analytical/performance cookies: Allow us to recognize and count visitors and analyze website usage
  • Functionality cookies: Used to recognize you when you return to our website
  • Targeting cookies: Record your visit to our website, the pages you visit, and the links you follow

You can set your browser to refuse all or some browser cookies or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

8. Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.

We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

9. International Transfers

We may transfer your personal data to countries outside the European Economic Area (EEA). Whenever we transfer your personal data outside the EEA, we ensure a similar degree of protection is afforded to it by implementing at least one of the following safeguards:

  • Transferring data to countries that have been deemed to provide an adequate level of protection by the European Commission
  • Using specific contracts approved by the European Commission that give personal data the same protection it has in Europe
  • Using providers based in the US that are part of Privacy Shield (where applicable)

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Effective Date: May 15, 2023