Privacy Policy

This Privacy Policy explains how Puella Marina (the “Site,” “we,” “us,” or “our”) collects, uses, and discloses your personal information when you visit or make a purchase from our Site. It also describes your rights regarding your personal information and how to contact us with any questions or concerns.

Collecting Personal Information

When you visit the Site or make a purchase, we collect certain information about your device and your interaction with the Site, as well as information needed to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy, “Personal Information” means any information that can uniquely identify an individual. Below we detail what Personal Information we collect and why.

Device Information – When you access our Site, we automatically collect certain information about your device and browsing actions.

Examples of Personal Information collected: Device identifiers (such as IP address), browser type and version, time zone setting, cookie identifiers, what pages or products you view, search terms, and how you interact with the Site (e.g. clicks and page navigation).
Purpose of collection: To load the Site properly for you, to perform analytics on Site usage, and to optimize our Site’s performance and user experience.
Source of collection: Collected automatically through cookies, log files, web beacons, tags, pixels, and similar tracking technologies when you navigate our Site. We use various tracking tools (and may adopt new ones in the future) to gather this information, consistent with this Privacy Policy.
Disclosure for a business purpose: We share this information with our website hosting and analytics partners, including our e-commerce platform provider Shopify, to power our online store and analyze usage. For example, device information may be shared with Shopify (our processor) and analytics services that help us understand Site traffic.autoriteitpersoonsgegevens.nl

Order Information – When you make or attempt to make a purchase through the Site, we collect information necessary to process and fulfill your order.

Examples of Personal Information collected: Name, billing address, shipping address, payment information (including credit card numbers, debit card details, PayPal or other payment method details), email address, and phone number.
Purpose of collection: To provide you with products or services as part of our contract (e.g. to process payments and fulfill orders). This includes using your information to process your payment, arrange shipping, send you invoices and order confirmations, communicate with you about your order, screen orders for fraud risk, and—if in line with preferences you’ve shared with us—send you information or advertising related to our products or services.
Source of collection: Collected directly from you when you provide it during checkout or account creation.
Disclosure for a business purpose: We share order information with our service providers as needed to fulfill our contract with you. For example, we share personal and payment details with Shopify (which hosts our store) to process your order, with payment gateways to handle payment processing, and with shipping or fulfillment partners to deliver your products. We may also share order information with sales channels or apps integrated in our store (for instance, if we list products on marketplaces or use fulfillment services), but only as necessary to complete your order and provide our services.

Customer Support Information – If you contact us for support or inquiries, we may collect additional information to assist you.

Examples of Personal Information collected: Any information you choose to provide when you contact us for help. This may include your name, contact information (such as email address or phone number), order details, and the content of your communications with us (e.g. the nature of your question or complaint, and any screenshots or documents you send).
Purpose of collection: To provide you with customer support and ensure we address your questions or concerns effectively. For example, we use this information to investigate and resolve issues, answer your questions, or process returns or complaints.
Source of collection: Collected directly from you when you communicate with us (such as via email, contact form, or chat).
Disclosure for a business purpose: We generally handle customer support in-house. However, we may use third-party customer support tools or service providers to manage communications (for example, an email service or helpdesk platform). In such cases, the information you provide may be stored or processed by those providers solely to assist with your support request. We do not share customer support information with any party except as necessary to provide support or as required by law.

Additional Information – We may collect other personal information in certain circumstances, which we will handle in accordance with this Privacy Policy.

Examples of additional collection: If you participate in optional activities such as surveys, contests, or promotions, we might collect the information you provide (like survey responses or contest entries). We may also receive personal information from third parties in some cases – for instance, if we obtain marketing leads or demographic information from legitimate data providers, or if someone refers you to our Site.
Purpose of collection: To fulfill the specific purposes for which you provided the information or for which we obtained it. For example, if we collect data through a survey, it would be used to improve our services. If we acquire marketing data externally, it would be used to expand our customer outreach in a manner consistent with applicable laws.
Source of collection: Collected from you directly (e.g. via forms you fill out) or from third-party sources (such as public databases or marketing list vendors) when appropriate.
Disclosure for a business purpose: If we collect additional information for a specific purpose (like a contest run with a partner company), we will disclose it only to service providers or partners involved in that activity. We will inform you at the time of collection if any third-party sharing will occur beyond the normal service providers described in this policy.

Minors – The Site is not intended for individuals under the age of 16. We do not knowingly collect Personal Information from children under 16 years of age. If you are a parent or guardian and believe that your child under 16 has provided us with personal information, please contact us at the email address below so that we can delete the child’s information. We ask that individuals under 16 do not use or submit any information through our Site.

Sharing Personal Information

We share your Personal Information with certain service providers and third parties to help us provide our services and fulfill our contracts with you, as described above. For example:

Service Providers: We use third-party companies to support our business operations. The primary service provider is Shopify, which powers our online store. Your personal information (such as order and device data) is stored on Shopify’s platform. Shopify acts as our data processor, meaning it processes personal data on our behalf. You can read more about how Shopify handles Personal Information in Shopify’s Privacy Policy: Shopify Privacy Policy. We also share relevant personal data with other vendors as needed – for instance, with payment processors to handle payments, with shipping carriers to deliver orders, and with apps or plugins that add functionality to our store (such as inventory management or email marketing tools). Each of these providers is given only the information necessary to perform their specific service, and they are contractually obligated to protect your data.
Compliance with Laws: We may disclose your Personal Information if required to do so by law or legal process. For example, we might share information in response to a subpoena, court order, or other lawful request by authorities. We may also share personal data when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
Business Transfers: In the event that our business is sold, merged, or reorganized, your Personal Information may be transferred to a successor or affiliate as part of that transaction. If such a change happens, we will ensure the confidentiality of your personal information is maintained and give affected users notice before personal data becomes subject to a different privacy policy.
Other Service Providers: [If applicable, include any specific other providers] For example, if we use an external customer support platform, or if we list our products on third-party marketplaces or social media “shops,” we might share necessary personal data (such as order details or your contact info) with those services to facilitate transactions or support. We will inform you in this Privacy Policy or at the point of data collection about any significant third-party data sharing not otherwise covered here.

Behavioural Advertising

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications that we believe may interest you. This is sometimes called “behavioral advertising” or “retargeting.” For example:

We use Google Analytics to understand how our customers use the Site and to improve your experience. Google Analytics collects information about your interaction with our Site (e.g. which pages you visit, how long you stay, how you got here, and your usage patterns). We use this data to compile reports and to help us make the Site more user-friendly. Google Analytics may use cookies and similar technologies to collect data. You can read more about how Google uses your Personal Information in Google’s Privacy Policy: Google Privacy Policy. If you wish, you can opt out of Google Analytics tracking by installing the Google Analytics opt-out browser add-on: Google Analytics Opt-out.
We also engage in advertising on third-party platforms to reach you with relevant ads. For example, we may use advertising services such as Google Ads or Facebook Ads. We might share information about your usage of the Site, your purchases, or your interactions with our ads on other sites with our advertising partners. This sharing may happen through cookies or pixels (for instance, we might use the Facebook Pixel on our Site, which helps us show you ads on Facebook that are more relevant to you based on your activity on our Site). In some cases, we share this information directly with our advertising partners; in other cases, it is collected and shared through the use of cookies or similar tracking tools (with your consent when required by law). These partners then help us to deliver targeted advertisements or to measure the effectiveness of our ad campaigns.
We may use other third-party marketing and analytics apps that collect information about buyer behavior on our Site. For instance, if we use an email marketing service or a referral program that tracks your purchases or browsing to offer rewards or send personalized offers, those tools will collect relevant data. We will ensure that any such third-party apps are disclosed in this Privacy Policy or our Cookie Policy if they gather personal information.

For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page: NAI – How Does Online Advertising Work?. This resource provides a helpful overview of how companies tailor ads based on your online behavior.

Your Choices: Opting Out of Targeted Advertising – If you prefer not to receive targeted ads based on your Personal Information, you can opt out of some of these services. Here are opt-out links for common advertising platforms we may use:

Facebook: You can adjust your ad preferences on Facebook here: Facebook Ad Preferences.
Google: You can opt out of Google personalized ads by visiting Google’s Ad Settings: Google Ads Settings.
Bing: To opt out of personalized ads on Bing, visit: Bing Ad Settings.

Additionally, you can opt out of some targeted advertising and retargeting services by visiting the Digital Advertising Alliance’s opt-out portal at: optout.aboutads.info. Using these tools will allow you to opt out from many participating advertising networks at once. Keep in mind that even if you opt out of targeted ads, you may still see advertisements – they just will not be personalized based on your behavior or interests.

Using Personal Information

We use your Personal Information to provide our services to you and to operate our Site. This includes a range of activities, for example:

Providing and Improving Our Services: We use the information we collect to offer products for sale, fulfill orders, process payments, and carry out shipping and fulfillment. Your information enables us to manage and track orders, process returns or exchanges, and provide you with customer support. It also helps us maintain and improve the functionality and security of our website.
Communicating with You: We use contact details (like your email address or phone number) to send order confirmations, invoices, shipping updates, and other transactional messages. With your consent (where required), we may also send you newsletters, marketing emails or other updates about new products, services, and offers that we think may interest you. You can unsubscribe from marketing communications at any time by following the instructions in those messages or contacting us.
Personalization and Advertising: As described in the Behavioural Advertising section, we may use your personal data to personalize your experience on the Site and to show you targeted advertisements or marketing content. For example, we might remember what products you viewed and suggest similar products, or use your purchase history to recommend other items. Any such processing is done either with your consent or in furtherance of our legitimate interests (where applicable law allows), and you have the right to opt out of targeted advertising as explained above.
Analytics and Fraud Prevention: We analyze usage information (like browsing data and purchase history) to understand how our customers use the Site, so we can improve our website and business. We also process personal information to screen for and prevent fraud and other harmful activities. For instance, information from orders (like IP address or payment details) may be used to automatically flag suspicious transactions for manual review. This kind of processing helps protect both you and us from fraudulent activity.
Legal Compliance: Finally, we use personal data to comply with applicable laws and regulations. For example, we keep records of purchases for tax and accounting purposes, and we may use and disclose information as required to respond to lawful requests from authorities or to meet our legal obligations (such as data subject rights requests or consumer protection laws).

In summary, we use your Personal Information to effectively run our e-commerce business and provide you with a smooth, secure, and personalized shopping experience, while also complying with our legal obligations.

Lawful Basis (for European Economic Area Customers)

If you are a resident of the European Economic Area (EEA) or the United Kingdom, we are required to inform you of the lawful bases on which we process your personal information under the General Data Protection Regulation (GDPR). This means we must tell you the specific legal reason for processing each category of Personal Information. Depending on the context, we may process your data under one or more of the following bases:

Your Consent: We will process your Personal Information if you have given us clear consent to do so for a specific purpose. For example, if you consent to receive marketing emails, we will use your email address to send you newsletters or promotional offers. You have the right to withdraw your consent at any time.
Performance of a Contract: We process Personal Information when it’s necessary to fulfill a contract with you, or to take steps at your request before entering into such a contract. For instance, when you place an order on our Site, we need to process your payment and shipping details to perform the purchase contract (i.e., to deliver the goods you bought).
Compliance with Legal Obligations: In some cases, we must process your data to comply with a legal obligation. For example, we may retain transaction records to fulfill tax and accounting requirements, or to respond to lawful requests by public authorities.
Legitimate Interests: We may process your information where it is in our legitimate business interests to do so, and those interests are not overridden by your rights and interests. This can include using Personal Information to improve and personalize our services, to prevent fraud, to secure our website, or to carry out direct marketing (where not based on consent). We always consider and balance any potential impact on you and your rights before processing your personal data for our legitimate interests. We do not use your Personal Information for activities where our interests are overridden by the impact on you (for example, we would not engage in automated decision-making with significant effects without your consent).

Note: We generally do not rely on "Vital Interests" or "Public Task" as a basis for processing your data, as these apply in very limited types of situations (primarily emergencies or official government functions). If we ever do need to process personal data under those bases, we will inform you of that.

Retention

When you place an order through the Site, we will retain your Personal Information for our records unless and until you ask us to erase or anonymize this information. We retain this information to fulfill the purposes outlined in this policy (for example, to have a record of your transactions for any returns or warranty issues, and for tax/accounting obligations).

If you are an EU/EEA resident, we typically will not keep your personal data longer than necessary for the purposes for which it was collected. However, please note we may retain certain information for longer if required by law (such as keeping invoice data for several years for tax regulations) or to otherwise protect our legal rights. If you request deletion of your data, we will honor that request in accordance with the “Your Rights” section below and applicable law.

Automatic Decision-Making

If you are a resident of the EEA (or another jurisdiction with similar rights), you have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects or similarly significant effects on you. We want to reassure you about how we use automated decision-making:

Our policy: We do not engage in fully automated decision-making that has a legal or otherwise significant effect on you, using customer data. In other words, any important decisions affecting you (such as acceptance of an order, credit approval, etc.) are not made without human review.
Fraud prevention: Our e-commerce processor, Shopify, does employ limited automated decision-making to prevent fraudulent transactions. This kind of automated processing is solely aimed at protecting our business and customers from fraud, and it does not have any legal or significant effect on you in terms of your rights or finances. For example, Shopify has automated systems that might temporarily flag or block certain unusual activities to combat fraud. These measures include:

Temporary denylist of IP addresses: If an IP address is associated with repeated failed transactions, that IP may be automatically placed on a temporary “denylist.” This means any further attempts from that IP address will be refused for a short period (the denylist persists for a small number of hours) to prevent potential fraud.

Temporary denylist of credit cards: Similarly, credit card numbers associated with a flagged IP address might be temporarily blocked. This denylist persists for a few days. During that time, transactions using that credit card will not be processed on our Site.

These automated fraud-prevention measures are in place to protect all our customers. They do not involve any human profiling or decision about you beyond preventing a potentially fraudulent transaction. If an order or payment is flagged by these systems and you believe it was in error, you can contact us to review and we will assess the situation manually.

Aside from these anti-fraud systems, no automated decision-making is used in our processing of your data that would adversely affect you without human intervention.

Selling Personal Information

We do not sell Personal Information, as defined by the California Consumer Privacy Act of 2018 (CCPA). “Selling” under the CCPA broadly includes sharing personal information with third parties for valuable consideration (whether or not money is exchanged). While we do use certain third-party services for advertising (as described above), and those may involve sharing data (such as using cookies for targeted ads), we only share Personal Information with third parties for the purposes outlined in this policy and not for them to independently market or sell to others. In terms of CCPA, we treat such sharing for targeted advertising as a “business purpose” or “sharing” rather than a “sale,” in line with regulatory guidance.

Because we do not sell Personal Information, we do not provide a “Do Not Sell My Personal Information” opt-out link on our Site at this time. If this changes in the future, we will update our Privacy Policy accordingly and ensure appropriate opt-out mechanisms are in place. We also do not knowingly sell the personal information of minors (children under 16 years of age) without affirmative authorization, consistent with CCPA requirements.

Your Rights

Depending on your location, you may have certain rights regarding your personal information. For example, if you are a resident of the EEA, UK, or California, you have specific legal rights under the GDPR or CCPA (as amended by CPRA) respectively. We are committed to honoring these rights. This section outlines those rights and how you can exercise them.

GDPR (EEA and UK Residents)

If you are a resident of the European Economic Area (EEA) or the United Kingdom, under the GDPR (General Data Protection Regulation) you have several important rights with respect to your personal information:

Right of Access: You have the right to request access to the personal data we hold about you (often called a “data subject access request”). This allows you to receive a copy of the personal information we have collected about you and to check that we are processing it lawfully.
Right to Rectification: You have the right to request that we correct or update any inaccurate or incomplete personal information. We want to make sure your data is accurate and up-to-date.
Right to Erasure: You have the right to request deletion of your personal data in certain circumstances (also known as the “right to be forgotten”). For example, if the data is no longer necessary for the purpose it was collected, or if you withdraw consent (where applicable) and we have no other legal basis to continue processing it. We will honor valid erasure requests and will also direct any service providers holding your data on our behalf to delete it, provided we are not legally required to retain the information.
Right to Restrict Processing: You can ask us to suspend processing of your personal information in certain scenarios, such as if you contest the data’s accuracy or object to us processing it.
Right to Data Portability: You have the right to request that we transfer the personal data you have provided to us to another organization, or directly to you, in a structured, commonly used, and machine-readable format, where it’s technically feasible. This right applies when the processing is based on your consent or on a contract with you, and the processing is carried out by automated means.
Right to Object: You have the right to object to our processing of your personal information in some cases. For example, you can object to direct marketing at any time, or to certain processing carried out on the basis of our legitimate interests if you feel it impacts your fundamental rights and freedoms.
Rights relating to Automated Decision-Making: As noted above, you have the right not to be subject to a decision based solely on automated processing (including profiling) which produces legal effects or similarly significantly affects you, unless it is necessary for entering into or performing a contract between you and us, or you provide explicit consent, or it’s otherwise authorized by law. We have explained in the section on Automatic Decision-Making that we do not engage in such profiling without human oversight.

If you would like to exercise any of these rights, please contact us using the contact information provided in the “Contact” section below. We may ask you to verify your identity before fulfilling your request (to ensure that we do not disclose personal data to the wrong person). Please be aware that these rights are not absolute – in some cases, we may be entitled to refuse your request if an exemption applies. We will explain if that is the case, such as by identifying the specific reason we cannot comply with a request.

Your personal information is initially processed in Ireland (because our website platform’s servers for EU data are located there), and then it may be transferred outside of Europe, including to Canada and the United States, for storage and further processing. For example, Shopify’s primary servers are in Canada and the US. We ensure that such transfers are done in compliance with GDPR. Shopify, for instance, certifies to certain legal frameworks for data transfer. For more information on how data transfers are handled in compliance with the GDPR, you can review Shopify’s GDPR Whitepaper: Shopify GDPR Whitepaper shopify.dev. We can also provide more details on transfer mechanisms (such as Standard Contractual Clauses) if you have questions.

CCPA (California Residents)

If you are a resident of California, you have specific rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and (if applicable) sell or share about you. This includes the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting (or selling/sharing, if applicable) the information, the categories of third parties with whom we share personal information, and the specific pieces of personal information we have about you. Essentially, you can ask us for a report of the personal data we have collected about you.
Right to Delete: You have the right to request that we delete any personal information about you that we have collected from you and retained, subject to certain exceptions. For instance, we may need to keep some data to complete a transaction you requested, to comply with a legal obligation, or for internal uses that are compatible with the context in which you provided the information. If no exception applies, we will delete (and direct our service providers to delete) your personal information from our records once we verify your request.
Right to Correct: You have the right to request that we correct inaccurate personal information that we hold about you. Upon verifying your request, we will correct any inaccurate information (taking into account the nature of the personal information and the purposes of processing).
Right to Opt-Out of Sale or Sharing: As noted above in the “Selling Personal Information” section, we do not sell your personal information as defined by CCPA. If we ever were to engage in “sharing” your information for cross-context behavioral advertising (as defined by CPRA) in a way that qualifies under the law, you would have the right to opt out of that sharing. We currently treat advertising-related sharing as a business purpose and honor global opt-out signals as required. If you have any concerns about this, please contact us.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. This means we won’t deny you goods or services, charge you a different price, or provide a different level of quality of service just because you exercised your rights under CCPA. In certain circumstances, if you request deletion of your data, we may not be able to provide certain services (for example, if you ask us to delete your account data completely, we might not be able to recognize you on a subsequent visit to apply loyalty discounts), but we will never punish you for making a request.
Right to Limit Use of Sensitive Personal Information: The CPRA introduced a new right for California consumers to limit the use and disclosure of “sensitive personal information” if a business uses it for purposes not necessary to provide the services. At this time, we do not use or disclose sensitive personal information (such as precise geolocation, social security number, etc.) beyond what is necessary to fulfill your orders or provide our services, so this right is not applicable in any significant way. If that changes, we will update our practices and honor any requests to limit use of sensitive info as required by law.

If you would like to exercise any of the rights above (Right to Know, Delete, Correct, or if applicable, Opt-Out), you or your authorized agent may contact us through the contact information below. We may need to verify your identity (or your agent’s authority) before fulfilling these requests, which could involve asking you to provide additional information or to log into your existing account if you have one. We will respond to verifiable requests as soon as we can, and in any event within the timeframe required by law (generally within 45 days for CCPA requests, with the possibility of a 45-day extension if necessary, which we will communicate to you).

If you have an authorized agent making the request on your behalf, we will require proof that you gave the agent permission to submit the request for you (for example, a written authorization or a power of attorney), and we will still need you to verify your identity directly with us (unless the agent has a power of attorney per the California Probate Code).

For clarity, personal information collected in a business-to-business context or in certain employment contexts may be exempt from some CCPA requests, but as a retail consumer-focused site, those likely do not apply here. We will let you know if any exemption applies.

Cookies

A cookie is a small piece of data that’s downloaded to your computer or device when you visit our Site. We use a variety of cookies and similar tracking technologies (like pixels and tags) to remember certain information about your visits and to improve your browsing experience. Cookies enable the website to remember your actions and preferences (such as login status and region selection) so you don’t have to re-enter this information each time you navigate between pages or return to the site. They also help us understand how people use our website (for example, whether it’s a first-time visit or a repeat visit, which pages are most popular, etc.).

We use the following types of cookies to optimize your experience on our Site and to provide our services:

Cookies Necessary for the Functioning of the Store

These cookies are essential for the basic functionality of our online store. Without them, the site would not work properly, and you would not be able to use important features (like adding items to your cart or checking out).

NameFunction_abUsed in connection with access to the admin area of the site (for example, to maintain an administrator’s session)._secure_session_idUsed in connection with navigation through the storefront. It stores session information for moving through pages.cartUsed in connection with the shopping cart. Remembers your cart contents.cart_sigUsed in connection with checkout. Helps secure the checkout process.cart_tsUsed in connection with checkout. Stores timing information for checkout.checkout_tokenUsed in connection with checkout. Stores a token necessary to process your checkout.secretUsed in connection with checkout. Often used to facilitate secure checkout functionality.secure_customer_sigUsed in connection with customer login. This cookie helps recognize a customer securely when they log in.storefront_digestUsed in connection with customer login. If the shop has a password, this cookie is used to determine if the current visitor has access._shopify_uUsed to facilitate updating customer account information.

These cookies ensure that the core e-commerce functions (like your shopping cart and account login) run smoothly and securely.

Reporting and Analytics

These cookies collect information about how visitors interact with our Site, helping us understand traffic patterns and user behavior. We use this data to make improvements and report on our performance. None of the information collected by these cookies personally identifies you; it is aggregated and used in a way that anonymizes users.

NameFunction_tracking_consentTracks your cookie preferences (so the site knows what types of cookies you have consented to or opted out of)._landing_pageTracks landing pages. This means it keeps track of the first page you landed on during your session._orig_referrerTracks the original referrer for your visit (e.g., if you came to our site by clicking a link on another site)._s, _shopify_sShopify analytics cookies, used for analyzing site usage (short duration)._shopify_fsShopify analytics cookie, used for analytics relating to first-time visits._shopify_sa_pShopify analytics relating to marketing and referrals (specifically, used to analyze how our marketing campaigns perform and how you found our site)._shopify_sa_tShopify analytics relating to marketing and referrals (similar to the above, possibly for tracking if you clicked through from an advertisement or affiliate link)._y, _shopify_yShopify analytics cookies, used for Shopify’s internal analytics of visitor sessions (longer duration).

In addition to the cookies listed above (which are primarily first-party cookies from our Site and Shopify), we may also use cookies and tracking technologies from third parties to enhance our Site’s functionality and for advertising/analytics purposes. For example:

Google Analytics cookies: We use Google Analytics as mentioned, which sets its own cookies (such as _ga, _gid, _gat and others) to collect information about user interactions. These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They provide information on how you found and navigated our site, and help distinguish unique users (without personally identifying you).
Advertising cookies: If we engage in advertising or retargeting, services like Google Ads or Facebook may set cookies or use similar tracking (like the Facebook Pixel) to track your activity and interests. These cookies remember your visit to our site and may show you related advertisements on other websites. They also help us measure the effectiveness of our advertising campaigns.
Other third-party tools: We might use additional tools or plugins that set cookies – for example, a live chat widget might set a cookie to remember your chat session, or a social media sharing plugin might set a cookie to enable easy sharing. If we add significant new cookies or tracking technologies in the future, we will update this Privacy Policy (or our Cookie Policy, if we maintain a separate one) to inform you about their use.

Cookie Duration: The length of time a cookie remains on your device depends on whether it is a “persistent” or “session” cookie. Session cookies last only while your browser is open and are typically deleted once you close your browser. Persistent cookies remain on your device after you close your browser, until they either expire or are manually deleted. For example, some of the cookies listed above (_secure_customer_sig, for instance) are persistent and help the site recognize you when you return, so you don’t have to log in every time. The persistent cookies we use have varying lifespans – many will expire automatically after a set period ranging from 30 minutes up to 2 years. (For instance, some analytics cookies last 30 minutes, whereas others like _shopify_y last up to 2 years.) These durations are determined by the cookie’s purpose – cookies that remember preferences might last longer, while those just for a single session expire quickly.

Managing Cookies: You have the right to control or disable cookies as you see fit, though please note that removing or rejecting cookies could affect the availability and functionality of our services. Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies or alert you when cookies are being sent. Each browser is a bit different, so check your browser’s Help menu or settings to learn how to change your cookie preferences. For example, you may be able to clear existing cookies, disable all cookies, enable “Do Not Track” mode, or set exceptions for cookies from certain websites.

For more detailed information on how to manage and delete cookies, you can visit educational resources such as AllAboutCookies.org. This site provides guides on how to see what cookies have been set and how to manage or delete them on various browsers. Additionally, YourOnlineChoices.eu (if you are in the EU) provides options to opt out of many advertising cookies through industry programs.

Please note that blocking or disabling certain cookies (especially the Necessary ones) may negatively impact your experience on our Site. For instance, if you disable cookies, you might not be able to add items to your cart or proceed through checkout properly. Our site may also not remember your preferences (like language or region selection) if cookies are disabled.

Also, blocking cookies does not entirely prevent data sharing with third parties. For example, even without cookies, some data (like device information or page visits) can be collected by other means (such as server logs or fingerprinting techniques). To fully exercise your rights or opt out of certain uses of your information by third parties (like targeted advertising), you may need to follow the instructions in the “Behavioural Advertising” section above (such as using the opt-out links provided for Facebook, Google, etc., or using browser privacy extensions).

Do Not Track

“Do Not Track” (DNT) is a privacy preference you can set in some web browsers to signal that you do not wish to be tracked across different websites. However, there is currently no consistent industry standard or agreement on how to respond to DNT signals. As a result, like many online retailers, we do not alter our Site’s data collection and usage practices when we detect a Do Not Track signal from your browser.

Until the industry establishes a clear standard for interpreting DNT signals, we will continue to treat DNT signals according to our current privacy standards (meaning we will collect and use your information as described in this policy, regardless of a DNT signal). You can still opt out of targeted advertising and manage cookies as described above. We will update this section if and when a uniform standard for responding to DNT is adopted.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technologies, legal requirements, or for other operational reasons. For example, we might modify the policy if we start collecting new types of personal data, if we change how we use data, or if laws governing privacy change.

When we make changes to this Privacy Policy, we will notify users as required. If the changes are significant, we may provide a more prominent notice (such as by email notification or a notice on our homepage). The “Last Updated” date at the bottom of this policy will also be revised. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Contact

For more information about our privacy practices, if you have questions, or if you would like to make a complaint or request regarding your personal information, please contact us:

By Email: info@puellamarina.com.
By Mail: As an e-commerce store based in the Netherlands, we primarily provide support online.

We take customer privacy seriously. If you contact us with a privacy-related request or complaint, we will respond as soon as possible, generally within 30 days.

If you’re not satisfied with our response to a privacy concern, you have the right to lodge a complaint with your local data protection authority. For example, if you are in the Netherlands (where we are headquartered), you can contact the Autoriteit Persoonsgegevens (Dutch Data Protection Authority) for further assistance or to file a complaint. You can find more information on the Autoriteit Persoonsgegevens website: Dutch DPA – Autoriteit Persoonsgegevens. If you are in another EEA member state, you may contact your country’s supervisory authority. For those in the UK, you can reach out to the Information Commissioner’s Office (ICO). Residents of other countries (including the United States or Canada) may contact their local privacy regulator if one exists, or of course, you can always reach out to us first and we will do our best to address your concerns.

Last updated: December , 2025.

Item added to your cart