Privacy Policy

This Privacy Policy governs the collection, storage, use, processing, disclosure, protection and retention of your personal data when you visit, browse, register an account, submit inquiries, place orders, subscribe to newsletters or otherwise use the website www.sindrop.com (the “Site”), operated by Sindrop. This Privacy Policy applies to all visitors, users, customers and other persons accessing our Site.

By accessing and using our Site, you acknowledge that you have read, understood, and agree to the practices described within this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not use our website or submit any personal information to us. This Privacy Policy is to be read together with our Cookie Policy, Terms of Service, Shipping Policy and Return & Refund Policy.

1. Who We Are

Sindrop is an online retailer specializing in fashion handbags and accessories. Our contact email for privacy-related enquiries is info@drapeluxe.shop. If you are a resident of the European Economic Area (“EEA”), United Kingdom, California or other jurisdictions with data protection legislation, Drapeluxe acts as the Data Controller for your personal information collected via this Site.

2. What Personal Information We Collect

We collect two categories of information: (A) information that you voluntarily provide to us; and (B) information automatically gathered when you browse our Site.

2.1 Information You Voluntarily Provide

We collect personal data you actively submit when you interact with our website:

  • Full given name and surname;
  • Billing address, residential address and shipping delivery address;
  • Email address;
  • Phone number / mobile contact number;
  • Account login details (username and encrypted password) if you create a customer account;
  • Order information including items purchased, order value, purchase history, payment transaction records;
  • Messages you send via our contact form, customer service emails, product reviews, feedback, complaints or support communications;
  • Preferences you select, such as preferred currency, language, favorite product categories, newsletter subscription choices;
  • Information you provide for wholesale inquiries, brand collaboration requests or partnership applications.

We do not store full credit card numbers, CVV codes or complete bank card details on our servers. All payment processing is handled securely by PCI-DSS compliant third-party payment processors. We only receive payment confirmation, transaction reference numbers and billing verification information to complete your order.

2.2 Automatically Collected Information

When you visit our website, our server and analytics tools automatically collect technical and behavioural information:

  • Internet Protocol (IP) address;
  • Device model, device identifier, browser type, browser version, operating system;
  • Time zone and geographic region derived from your IP address;
  • Date and time of your website visits;
  • Pages you view, product pages visited, time spent on each page, click sequences, exit pages;
  • Referring website or source that brought you to our Site (such as social media, search engines or ad links);
  • Shopping cart activity including items added, removed or abandoned;
  • Anonymous behavioural statistics for website performance analysis.

This information is collected through cookies, web beacons, pixel tags and other tracking technologies, as further explained within our Cookie Policy.

3. How We Use Your Personal Information

We process your personal data only for specified, lawful purposes and will not use your data for purposes incompatible with the original reason of collection. The lawful bases for processing include contract performance, legitimate business interests, compliance with legal obligations, and consent where applicable.

We use your personal information for the following purposes:

  1. Order Fulfilment & Transaction Management: To process, verify, accept and manage your purchase orders, arrange product packaging, shipping, delivery tracking and after-sales support. This includes sharing necessary delivery information with international logistics carriers to send your parcels to your shipping address.
  2. Customer Service & Support: To respond to your emails, enquiries, complaints, return requests, exchange applications and resolve order-related issues.
  3. Account Management: To create, maintain and manage your customer account, verify identity, allow you to view your order history, save addresses and shopping preferences.
  4. Fraud Prevention & Security: To detect, investigate and prevent fraudulent transactions, unauthorized access, fake orders, identity theft and other harmful activities to protect drapeluxe and our customers.
  5. Website Improvement: To analyse visitor behaviour, measure website performance, test page layouts, fix technical bugs, optimize product display and improve user experience.
  6. Marketing Communications: To send promotional emails, product updates, new collection announcements, discount offers and newsletters only if you have explicitly opted-in to receive marketing emails. You may unsubscribe at any time.
  7. Legal & Regulatory Compliance: To comply with tax reporting, accounting requirements, customs declaration rules, court orders, government requests and other legal obligations applicable to cross-border e-commerce.
  8. Product Review & Social Proof: To publish your submitted product reviews (with your consent) on our product pages to help other shoppers.

We will not use your personal data for unrelated purposes without obtaining additional consent from you.

4. Who We Share Your Personal Data With

Drapeluxe does NOT sell, rent, lease or trade your personal information to third parties for their independent marketing purposes.

We may share your personal data with carefully selected third-party service providers who act as Data Processors, solely to operate our online store and complete your order. These third parties are contractually obligated to protect your personal data and cannot use your information for their own marketing.

Our trusted service providers include:

  • Payment service providers to process secure online payments;
  • Global shipping and logistics carriers to arrange international parcel delivery;
  • Cloud hosting and server providers to host our website and store secure data;
  • Email service providers for sending order confirmations, support messages and newsletters;
  • Analytics and advertising technology providers (subject to your cookie consent choices);
  • Customs brokers, where required for international customs clearance and declaration.

We may also disclose your personal information when legally required:

  • In response to valid court orders, subpoenas, regulatory requests or government investigations;
  • To enforce our website Terms of Service, Shipping Policy and Return & Refund Policy;
  • To protect the rights, property, safety of Drapeluxe, our customers or the public;
  • In connection with business transfer: In the event of merger, acquisition, sale of assets or company restructuring, customer personal data may be transferred as part of the business assets, subject to the same privacy protections.

5. Data Retention Period

We retain your personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, and in accordance with applicable law.

  • Order and transaction data: Stored for the period required for accounting, tax, warranty, after-sales and dispute resolution purposes, typically retained for 7 years after the last transaction as required by international commercial and tax rules.
  • Customer account information: Stored until you request account deletion. After account deletion, we will anonymize or erase your personal data, except records we must retain to meet legal requirements.
  • Marketing email contact information: Retained until you unsubscribe from our newsletter. After unsubscription, we keep a minimal suppression record to ensure we do not send you marketing emails again.
  • Customer service communications: Messages stored for up to 3 years after the last interaction to resolve follow-up enquiries.
  • Automatically collected anonymous browsing data: Most anonymous analytics data is retained for 24 months, then aggregated or anonymized.

6. Your Data Subject Rights

If you reside in the EEA, United Kingdom, California or other regions with data protection laws such as GDPR or CCPA, you hold the following rights:

  1. Right of Access: Request a copy of all personal data Drapeluxe holds about you.
  2. Right to Rectification: Request correction of inaccurate, incomplete or outdated personal information such as shipping address or name.
  3. Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data where there is no overriding legal reason for us to keep it.
  4. Right to Restriction of Processing: Request limitation of how we process your personal data under certain conditions.
  5. Right to Data Portability: Request your personal data in a machine-readable format for transfer to another controller.
  6. Right to Object: Object to processing of your personal data based on legitimate interests, or withdraw consent for marketing emails at any time.
  7. Right to Non-Discrimination: You will not receive discriminatory treatment for exercising your privacy rights.

To exercise any of these rights, send an email to info@drapeluxe.shop. We may require verification of your identity to process your request securely, to prevent unauthorized access to your personal data. We will respond to valid requests within the statutory time limits set by applicable law.

You also have the right to lodge a complaint with your local data protection authority if you believe we have violated data protection laws.

7. Data Security

We implement industry-standard administrative, technical and organizational safeguards to protect your personal data from unauthorized access, loss, destruction, alteration, theft or disclosure. Security measures include encrypted website transmission (SSL/TLS encryption), secure password hashing, access controls for internal staff, regular security audits and limited personnel access to personal data.

However, no method of internet transmission or electronic data storage can be guaranteed to be 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security of data transmitted over the internet. You are responsible for keeping your account password confidential and not sharing your login credentials with third parties.

8. Children’s Privacy

Our website and products are intended for users aged 18 years and older. We do not knowingly collect personal information from children under the age of 16. If you believe we have collected personal data from a child under 16 without parental consent, please contact us immediately at info@drapeluxe.shop, and we will promptly delete such information.

9. International Data Transfer

Your personal information may be transferred and stored outside your country of residence, including jurisdictions with different data protection laws. When transferring personal data internationally, we implement safeguards to ensure your data remains protected in compliance with applicable data protection law. By using our website, you consent to international transfer of your personal data as required for order processing and service delivery.

10. Changes to this Privacy Policy

We reserve the right to update or revise this Privacy Policy periodically. When we make material changes, we will post the revised version on this page and update the “Last Updated” date. We encourage you to review this Privacy Policy regularly. Continued use of our website after the publication of changes constitutes acceptance of the revised Privacy Policy.

11. Contact for Privacy Questions

If you have any questions, concerns or requests relating to this Privacy Policy or your personal data, please email us at: info@drapeluxe.shop