Privacy Policy

Privacy Policy

Last updated: July 2026

LAYLADA is committed to protecting your personal data and your right to privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website and make a purchase.

If you have any questions, please contact us at: hello@laylada.com

1. Who We Are

LAYLADA is an online fashion store specialising in premium modest women's fashion. Our store is operated from Germany and is subject to the General Data Protection Regulation (GDPR) and applicable German data protection law.

2. What Data We Collect

We collect the following personal data when you use our store:

  • Contact information: name, email address, phone number
  • Delivery information: shipping address, billing address
  • Payment information: processed securely via Shopify Payments — we do not store card details
  • Order history: products purchased, order value, dates
  • Device & browsing data: IP address, browser type, pages visited (via cookies)

3. How We Use Your Data

We use your personal data to:

  • Process and fulfil your orders
  • Send order confirmations and shipping updates
  • Respond to customer service enquiries
  • Improve our website and product offering
  • Send marketing emails (only with your consent)
  • Comply with legal obligations

4. Legal Basis for Processing (GDPR)

  • Contract performance: processing your order
  • Legitimate interests: fraud prevention, store improvement
  • Consent: marketing communications
  • Legal obligation: tax and accounting records

5. Cookies

We use cookies to operate our store, remember your preferences, and analyse traffic. You can manage cookie preferences via your browser settings. By continuing to use our site, you consent to our use of essential cookies.

6. Data Sharing

We share your data only with trusted third parties necessary to operate our store:

  • Shopify Inc. — our e-commerce platform (data processed in accordance with Shopify's DPA)
  • Shipping carriers — to deliver your order
  • Payment processors — to process payments securely

We do not sell your personal data to third parties.

7. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by law (typically 10 years for financial records under German law).

8. Your Rights (GDPR)

Under GDPR, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate data
  • Erase your data ("right to be forgotten")
  • Restrict processing of your data
  • Data portability — receive your data in a structured format
  • Object to processing based on legitimate interests
  • Withdraw consent at any time for marketing communications

To exercise any of these rights, please contact us at hello@laylada.com. You also have the right to lodge a complaint with your national data protection authority (in Germany: Bundesbeauftragter für den Datenschutz und die Informationsfreiheit).

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All transactions are encrypted via SSL/TLS.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. The date at the top of this page reflects the most recent update.

For questions about this policy, contact us at hello@laylada.com