Privacy policy

At ellemilla, we believe it is important to handle your personal data carefully and transparently. This Privacy Policy explains which personal data we process, why we process it, who we may share it with, how long we retain it and what rights you have.

1. Who is responsible for your personal data?

Quarzo Rosa BV
Trading as: ellemilla
Koning Leopoldlaan 32
3920 Lommel
Belgium

Company number: 0811.820.516
VAT number: BE0811.820.516
Email: info@ellemillashop.com
WhatsApp: +32 469 10 77 12

Quarzo Rosa BV is the controller of the personal data processed in connection with our online shop and services, unless expressly stated otherwise.

2. What personal data do we process?

Depending on how you use our online shop, we may process the following categories of personal data:

• first and last name;
• billing and delivery address;
• email address;
• telephone number;
• order number and order history;
• information about products ordered, returned or refunded;
• payment status and limited transaction information;
• communications with our customer service team;
• information you provide in connection with a return, complaint or warranty claim;
• IP address;
• browser, device and technical information;
• cookie identifiers and information about your use of our online shop, where a valid legal basis exists;
• marketing preferences and information about interactions with our emails or advertisements, where applicable.

Payment information such as full card details is generally processed by your chosen payment provider. We normally only receive the information necessary to determine the status of your payment and to administer your order.

3. Why do we use your personal data?

We process personal data for purposes including:

• processing, paying for, shipping and delivering your order;
• creating and managing your customer account, where you choose to have one;
• processing returns, refunds, store credit, complaints and warranty cases;
• answering questions and providing customer service;
• sending necessary service communications relating to your order;
• preventing and investigating fraud, abuse and security incidents;
• complying with legal, accounting and tax obligations;
• improving, securing and technically operating our online shop;
• analysing use of our online shop where the required consent has been obtained;
• sending and personalising marketing communications where legally permitted;
• measuring and improving our marketing and advertising where the required consent has been obtained.

4. What legal bases do we rely on?

Depending on the purpose, we process personal data on one or more of the following legal bases:

Performance of a contract
Where processing is necessary to process, deliver, return or refund your order or to provide other services you have requested.

Legal obligation
Where we are required to process or retain data to comply with tax, accounting or other legal obligations.

Legitimate interests
Where processing is necessary for a legitimate business interest, for example fraud prevention, security, dispute management or improving our services, provided that your interests and fundamental rights do not override those interests.

Consent
Where consent is required by law, for example for certain marketing activities, analytics cookies or advertising cookies. You can withdraw consent at any time.

5. Orders and payments

When you place an order, we process the information required to register your order, process payment, prepare and ship the products, keep you informed about delivery and provide appropriate after-sales service.

We use external payment providers to process payments. Depending on your chosen payment method, these providers process the information required to complete the payment and prevent fraud.

6. Shipping and fulfilment

To process and deliver your order, necessary personal data may be shared with service providers involved in fulfilment, shipping software and transportation.

This may include your name, delivery address, email address, telephone number, order information and other information necessary to carry out and follow up the delivery.

7. Returns, refunds and complaints

If you register a return or contact us about a refund, an incorrect delivery or a damaged or defective item, we process the information needed to handle your request.

This may include order information, the reason for the return, communications and photographs that you provide.

We may use specialised service providers, including our returns software and logistics partners, to process returns.

8. Customer service

If you contact us by email, WhatsApp or another available contact channel, we process the personal data you provide and the content of the communication to the extent necessary to deal with your question or request.

9. Newsletters and marketing

We may send you email marketing or other commercial communications where a valid legal basis exists.

Where consent is required, it will be requested separately. Placing an order or accepting our Terms and Conditions does not automatically mean that you consent to marketing.

You can opt out of marketing emails at any time by using the unsubscribe link at the bottom of the email or by contacting us.

We use Klaviyo, among other services, for email marketing. Contact information, marketing preferences, purchase information and information about your interactions with our communications may be processed where legally permitted.

10. Cookies and similar technologies

Our online shop uses cookies and similar technologies.

Cookies that are strictly necessary for the operation of the online shop may be used without prior consent. Where consent is required for cookies or trackers, we ask for it before those technologies are stored or accessed.

This may include cookies used for statistics, personalisation and marketing.

You can change or withdraw your choices at any time through Cookie Preferences on our online shop.

More information about the cookies currently in use, their purposes, providers and retention periods can be found in our Cookie Declaration. This is managed through Cookiebot and updated based on the cookies and trackers used on our website.

11. Analytics and advertising

Where you have provided the required consent, we may use analytics and advertising technologies to understand how our online shop is used, measure performance and make advertising more relevant.

This may involve processing information such as cookie identifiers, IP address, device and browser information, pages visited, interactions and purchase information.

Depending on the services we use, providers such as Google and Meta may be involved. Non-essential trackers are only used where the required consent has been obtained.

12. Who do we share personal data with?

We do not sell your personal data.

We only share personal data where this is necessary to provide our services, where another valid legal basis applies or where we are legally required to do so.

Depending on the service, personal data may be processed by or shared with parties including:

• Shopify for our online shop and e-commerce infrastructure;
• payment providers;
• Picqer for order and warehouse management;
• Sendcloud and carriers for shipping and delivery;
• Returnless for returns processing;
• Klaviyo for email marketing and customer communications;
• Cookiebot for managing and recording cookie preferences;
• analytics and advertising partners, including Google and Meta where applicable;
• IT, hosting, security, advisory and other professional service providers;
• public authorities or other competent parties where we are legally required to disclose information.

These service providers only receive personal data that is necessary for their activities and are required to process personal data in accordance with applicable data protection law.

13. Processing outside the European Economic Area

Some of our service providers operate internationally. As a result, personal data may in some cases be processed outside the European Economic Area.

Where personal data is transferred to a country for which no adequate level of protection has been recognised, we use appropriate safeguards where required, such as standard contractual clauses approved by the European Commission or another legally permitted transfer mechanism.

14. How long do we retain personal data?

We do not keep personal data for longer than is necessary for the purpose for which it was collected, unless a longer retention period is necessary or required by law.

The specific retention period may differ depending on the type of information and processing involved. We take into account matters including:

• the duration of our customer relationship;
• processing and after-sales service relating to orders and returns;
• statutory warranty and limitation periods;
• tax and accounting retention obligations;
• fraud, security and dispute records;
• the validity and withdrawal of marketing or cookie consent.

When personal data is no longer required, we delete or anonymise it unless we are legally required to retain it for longer.

15. Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration and unlawful disclosure.

We take into account the nature of the data, the processing involved, available technology and the risks to individuals.

We also require service providers processing personal data on our behalf to implement appropriate security measures.

16. Your privacy rights

Depending on the circumstances, under the GDPR you may have the right to:

• access your personal data;
• have inaccurate or incomplete personal data corrected;
• request deletion of your personal data;
• request restriction of processing;
• object to certain processing;
• receive certain information that you provided to us in a portable format;
• withdraw consent at any time;
• lodge a complaint with the competent data protection authority.

You can submit a request by emailing info@ellemillashop.com.

To prevent personal data from being disclosed to the wrong person, we may request additional information that allows us to reasonably verify your identity. We will not request more information than is necessary for this purpose.

17. Objection to direct marketing

You have the right to object at any time to the use of your personal data for direct marketing.

For email marketing, you can also use the unsubscribe link included at the bottom of every marketing email.

18. Complaints to the supervisory authority

If you have a complaint about the way we handle your personal data, you are welcome to contact us first at info@ellemillashop.com so that we can try to resolve the issue.

You also have the right to lodge a complaint with the competent supervisory authority. For Quarzo Rosa BV in Belgium, this is the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données).

19. Links to other websites

Our online shop may contain links to websites or services operated by other parties. This Privacy Policy does not apply to the processing of personal data by those third parties.

We recommend reviewing the privacy policy of the relevant provider when using an external website or service.

20. Changes to this Privacy Policy

We may update this Privacy Policy when our services, the systems we use or applicable legislation change.

The most recent version will always be published on our online shop.

Last updated: 6 October 2026