Privacy Policy

Last updated: 21/03/2026

My name is Elia, and I run FashFlip and the website fashflip.eu by myself. This means that I am the data controller for all personal information collected through my site.

I care deeply about your privacy, and I am committed to keeping your personal data safe, confidential, and used only for the purposes described below. By using my website, you agree to this Privacy Policy.

This Policy follows the EU General Data Protection Regulation (GDPR).

1. Personal Data I Collect

I only collect the information necessary to run my small business, process your orders, and communicate with you.
When you purchase something on fashflip.eu, I may collect:

• Your name

• Email address

• Phone number

• Shipping and billing address

• Order details and your purchase history

• Any messages you send me (email, contact form, or social media)

I may also collect technical data such as your IP address, browser type, device information, and cookies.

2. Why I Process Your Data

I only process the data I truly need. Here’s why:

a) To fulfil your order and help you as a customer

• Preparing and shipping your order

• Confirming your payment

• Communicating with you about your purchase

• Responding to questions or issues

b) To comply with legal and tax obligations

• Accounting, bookkeeping, and invoicing

• Required reporting to government authorities

c) To keep and improve my website

• Preventing fraud

• Ensuring the website works properly

• Improving user experience and security

d) For marketing (only if you consent)

If you sign up for updates or promotions, I may email you. You can unsubscribe at any time.

I always aim to process as little personal data as possible, only for legitimate and necessary purposes.

3. Who I Share Your Data With

I only share your personal data with trusted service providers who help me run my business:

• Payment processing: e.g., Paysera (they handle your card/bank details; I only receive payment confirmation).

• Shipping: e.g., PostNord (for creating labels, tracking parcels, and handling delivery claims).

• Website hosting and security: my hosting provider and services that keep the site running safely.

• Government authorities: when required by law for taxes or reporting.

I will never sell or rent your data to anyone.

4. Transfers Outside the EU/EEA

Some of my service providers may store or process data outside the EU/EEA (for example, in Canada or the United States).
When this happens, I make sure appropriate safeguards are in place, such as:

• EU Standard Contractual Clauses (SCCs)

• Adequacy decisions

• Other GDPR‑compliant protections

5. Your GDPR Rights

As an EU/EEA resident, you have the right to:

• Be informed about how your data is used

• Access the data I hold about you

• Request correction

• Request deletion

• Restrict how your data is used

• Object to processing

• Receive your data in a portable format

• Withdraw consent at any time

• Not be subject to automated profiling

If you want to exercise any of these rights, just contact me (see below).

You also have the right to complain to your local data protection authority, such as Datatilsynet in Denmark.

6. Links to Other Websites

My website may contain links to sites I don’t own or control.
I’m not responsible for their privacy practices, so I recommend reading their Privacy Policies before sharing any personal information with them.

7. How I Protect Your Information

I store your data securely and use reasonable technical, administrative, and physical safeguards to protect it against:

• Unauthorized access

• Loss or destruction

• Tampering or misuse

However, no online system can ever be guaranteed 100% secure.

8. Legal Disclosure

I may share your information if required by law, such as:

• Responding to legal processes (subpoenas, government requests)

• Protecting my rights and property

• Investigating fraud

• Ensuring your safety or the safety of others

I only do this when absolutely necessary and in good faith.

9. Changes to This Policy

I may update this Privacy Policy from time to time. When I do, I will update the “Last updated” date at the top of the page.

10. Contact Me

If you have any questions about this Privacy Policy or want to exercise your data rights, you can contact me at:

📧 elia.simonet@gmail.com
(Please use “Data Request” in the subject line for GDPR-related messages.)

I will do my best to reply quickly.