Last updated: 24 October 2026

​

1. About this policy

This policy explains how Clémence de Lafosse processes personal data when you visit clemencedelafosse.com, contact us, subscribe to our updates or order a garment. It also explains how cookies and similar technologies are used and how you can exercise your rights.

​

2. Who is responsible for your data?

Clémence de Lafosse
Leopoldstr. 38
10317 Berlin
Germany

Email: info@clemencedelafosse.com
Phone: +49 179 43 53 259

Clémence de Lafosse is the controller responsible for the processing described in this policy.

​

3. What information we process and why

​

Website visits

​

Our website is hosted on Wix. When you visit it, technical information such as your IP address, browser and device details, access times and pages requested may be processed to display the website, maintain security and diagnose technical problems.

The legal basis is Article 6(1)(f) GDPR: our legitimate interest in operating a secure and reliable website. Optional advertising technologies are described separately below.

​

Enquiries and correspondence

​

When you contact us, we process your contact details and the information you provide to answer your enquiry and manage any follow-up.

The legal basis is Article 6(1)(b) GDPR for enquiries concerning an order or a possible contract, or Article 6(1)(f) GDPR for other correspondence, based on our legitimate interest in responding to you.

​

Orders and personal measurements

​

Every garment is made to the customer’s personal measurements. We process your name, contact details, billing and delivery addresses, order details, design choices, measurements and fitting correspondence to prepare and fulfil your order.

​

You may provide your measurements directly or establish them with us during an agreed fitting consultation.

​

We also process information needed to arrange delivery, manage repairs and complaints, and comply with accounting and tax obligations.

​

The legal bases are Article 6(1)(b) GDPR for contractual services, Article 6(1)(c) GDPR for legal obligations and Article 6(1)(f) GDPR where necessary to establish, exercise or defend legal claims.

​

Information marked as required is necessary for the relevant request or order. Without essential contact, delivery or measurement information, we may be unable to fulfil your order. Optional information is voluntary.

​

Customer accounts

​

If you create a customer account, Wix processes the account and authentication information needed to provide it. We use relevant account information to support your relationship with us and manage requested services.

​

The legal basis is Article 6(1)(b) GDPR, with Article 6(1)(f) GDPR applying to proportionate security and misuse prevention.

​

4. Payments

Payments are processed through Wix Payments and the payment methods available at checkout.

​

Payment providers process the information needed to authorise and complete a transaction, including payment details, billing information, transaction amounts and technical information used for security and fraud prevention. We receive information needed to manage your order, including the transaction reference and payment status.

​

If PayPal is offered at checkout and you choose it, PayPal processes the information necessary for your payment under its own privacy notice. PayPal may not be available for every order.

​

Our legal bases are Article 6(1)(b) GDPR for payment and order fulfilment, Article 6(1)(c) GDPR for legal obligations and Article 6(1)(f) GDPR for proportionate fraud prevention and payment-dispute handling. Payment providers may also process information as independent controllers for their own legal and regulatory obligations.

​

Wix privacy notice:
https://www.wix.com/about/privacy

​

PayPal privacy notice:
https://www.paypal.com/de/legalhub/paypal/privacy-full

​

5. Newsletters and service emails

​

If you subscribe to our newsletter, we use your email address and any optional information you provide to send news about our collections, services and offers.

​

The legal basis is your consent under Article 6(1)(a) GDPR. You can unsubscribe at any time using the link in a marketing email or by contacting info@clemencedelafosse.com.

​

We retain information necessary to document your subscription and respect your choices. A limited suppression record may be retained to prevent further marketing after you unsubscribe.

​

Messages necessary to handle an enquiry or order, such as order confirmations and delivery information, are separate from marketing emails. They are processed under Article 6(1)(b) GDPR and any applicable legal obligations.

​

6. Wix and other recipients

​

Wix.com Ltd., Israel, and its relevant affiliated companies provide the infrastructure and features used to host our website, operate our shop, manage orders, receive forms and support customer accounts.

​

We share relevant information with service providers and collaborators where necessary to fulfil your order or run our business. Recipients may include payment providers, delivery companies, people assisting with garment production or fitting, and professional advisers. They receive the information needed for their role.

​

We may also disclose information where required by law or where necessary for legal claims.

​

Where a provider processes personal data on our behalf, the relationship is governed by applicable data processing arrangements. Some recipients, including payment and advertising providers, also process data as independent controllers.

​

Wix privacy notice:
https://www.wix.com/about/privacy

​

7. Cookies and your choices

​

Cookies are small files stored on your device. Similar technologies include local storage, advertising pixels and tracking scripts.

​

We distinguish between strictly necessary technologies and optional advertising technologies.

​

Strictly necessary technologies

​

These support functions such as website security, fraud prevention, shopping basket management, customer authentication and remembering your privacy choices.

​

Consent is not required where storage or access is strictly necessary to provide a service you expressly requested, in accordance with Section 25(2) of the German TDDDG.

​

Where personal data is processed, the legal basis is Article 6(1)(b), 6(1)(c) or 6(1)(f) GDPR, depending on the purpose.

​

Optional technologies

​

Advertising technologies require your consent under Section 25(1) TDDDG and Article 6(1)(a) GDPR.

 

You can accept or refuse optional technologies through the consent interface. Refusing advertising cookies does not prevent you from browsing the shop or placing an order.

​

You can change or withdraw your consent through the website’s cookie preferences interface. Withdrawal applies to future processing and does not affect processing carried out lawfully before withdrawal.

 

8. Usercentrics consent management

​

We use Usercentrics, provided by Usercentrics GmbH, Germany, to collect, record and manage your cookie choices.

The service processes information needed to remember and document your choices, such as your consent selection, the date and time, a consent identifier and relevant browser or device information.

​

The legal bases are Article 6(1)(c) GDPR for documenting consent obligations and Article 6(1)(f) GDPR for operating a reliable preference-management system. Strictly necessary device storage is covered by Section 25(2) TDDDG.

 

Usercentrics privacy notice:
https://usercentrics.com/privacy-policy/

​

9. Meta and Pinterest advertising

​

Meta Pixel

​

With your consent, we use the Meta Pixel, provided by Meta Platforms Ireland Limited, Ireland, to support advertising measurement and audiences.

The integration can process technical information, including your IP address, browser and device details, page visits, browser identifiers and website events made available through the integration.

​

Meta may associate this information with your Meta account and process it for advertising and measurement. For the collection and transmission of event data covered by Meta’s Business Tools terms, joint-controller arrangements apply. Meta is responsible for its subsequent processing under those terms.

​

Privacy notice:
https://www.facebook.com/privacy/policy/

​

Controller arrangements:
https://www.facebook.com/legal/controller_addendum

​

Pinterest Tag

​

With your consent, we use the Pinterest Tag to support website visit measurement and advertising audiences.

The tag can process technical information, page visits and browser or device identifiers. Pinterest may associate this information with your Pinterest account.

​

Pinterest Europe Ltd., Ireland, and Pinterest, Inc., United States, process information as described in Pinterest’s privacy notice:
https://policy.pinterest.com/en/privacy-policy

​

Our legal basis for these optional advertising technologies is consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG for relevant device storage or access.

​

10. Cookie details and storage periods

​

Session cookies expire when the relevant browser session ends. Persistent cookies and similar storage remain until their specified expiry or until they are deleted.

​

Consult the service details in the consent interface for the technologies used, their purposes, providers and storage periods.

​

A cookie’s lifespan is different from the period for which a provider may retain information already collected. The relevant provider’s privacy notice explains its personal-data retention practices.

​

You can also delete or restrict cookies through your browser settings. Blocking strictly necessary technologies may affect functions such as signing in or using your shopping basket. Deleting cookies does not automatically delete information already held by a provider.

 

11. International transfers

Some providers process personal data outside the European Economic Area, including in Israel and the United States.

​

Wix.com Ltd. is based in Israel, which benefits from an adequacy decision of the European Commission. Wix also uses infrastructure and service providers in other countries, including the United States.

​

Where a transfer is not covered by an applicable adequacy decision, appropriate safeguards are required, such as the European Commission’s Standard Contractual Clauses and any necessary supplementary measures.

​

The provider privacy notices linked above explain their international processing arrangements. You can contact us for information about the safeguards relevant to your data and how to obtain a copy.

 

12. How long we keep personal data

​

We retain personal data only for as long as necessary for its purpose, unless a longer period is required by law.

​

Enquiries are retained until the matter and relevant follow-up are resolved, subject to applicable legal requirements.

​

Order details and measurements are retained as needed for production, fitting, after-sales services and relevant legal claims. Measurements are not automatically subject to the same retention requirements as invoices.

​

Accounting and tax records are kept for the statutory period applicable to the document. Under German law, this may be eight years for invoices and accounting vouchers, six years for relevant business correspondence or ten years for certain accounting records.

​

Newsletter information is used until you unsubscribe. Limited records may be retained to demonstrate consent or respect an objection.

​

Consent records are retained as necessary to manage and document your choices and meet legal requirements.

​

Where data must be kept after its original purpose has ended, its use is restricted to the remaining lawful purpose. Retention may be extended where necessary for an ongoing dispute or legal obligation.

​

13. Security

We use technical and organisational safeguards appropriate to the data and the risks involved. These include encrypted website connections, access controls and limiting access to people and service providers who need the information for their work.

​

14. Your rights

Subject to the conditions of the GDPR, you may request access to your personal data, correction, deletion, restriction of processing and data portability.

You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

​

Where processing is based on legitimate interests, you may object on grounds relating to your particular situation. You may object to direct marketing at any time, including related profiling.

​

To exercise your rights, contact info@clemencedelafosse.com. We may request proportionate information to verify your identity.

​

You also have the right to complain to a supervisory authority, particularly where you live or work or where you believe an infringement occurred.

​

Our local supervisory authority is the Berliner Beauftragte für Datenschutz und Informationsfreiheit:
https://www.datenschutz-berlin.de/ueber-uns/kontakt/

​

15. Changes to this policy

​

We update this policy when our services, processing activities or legal obligations change. The date at the top identifies the latest version.

Where we introduce new uses of personal data, we will provide the relevant information and obtain consent where required before carrying out that processing.

​

For questions, contact info@clemencedelafosse.com.