Privacy policy

Privacy & Cookie Policy

Last updated: 27 October 2026

This policy explains how ECOAWEAR ("we", "us", "our") collects, uses and protects your personal data when you visit our website or buy from us. We process personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

1. Who we are

ECOAWEAR is the data controller for your personal data. You can contact us about privacy at any time at assistenza@lieviaboutique.com.

2. The data we collect

Information you give us, when you place an order, create an account, sign up to our emails or contact us:

  • name, email address, delivery and billing address, phone number (if provided);
  • order details, such as products, sizes and order history;
  • messages you send to customer service, including photos of products.

Payment card details are handled directly by our payment providers. We never see or store your full card number.

Information collected automatically when you use our website: IP address, device and browser type, pages viewed, products added to basket, the website or advert that brought you to us, and cookie identifiers (see section 8).

3. How we use your data and our legal basis

  • Processing and delivering your order, handling exchanges, refunds and guarantee claims, customer service: performance of a contract.
  • Keeping tax and accounting records, responding to lawful requests: legal obligation.
  • Preventing fraud, keeping our website secure, improving our website and products, reminding you about an unfinished checkout: legitimate interests.
  • Sending marketing emails or texts, using analytics and advertising cookies, measuring and personalising our adverts on platforms such as Facebook and Instagram: consent, which you can withdraw at any time.

4. Who we share your data with

We never sell your personal data. We only share it with trusted service providers who help us run our business, and only as far as they need it:

  • Shopify, which hosts our online store and checkout;
  • payment providers (such as Shopify Payments, Stripe and PayPal), to take payments securely and prevent fraud;
  • fulfilment partners and delivery companies, to prepare and deliver your order;
  • email and customer service tools, to send order updates and, with your consent, marketing emails;
  • advertising and analytics platforms such as Meta (Facebook and Instagram), only where you have accepted the relevant cookies;
  • professional advisers and authorities, where required by law.

5. International transfers

Some of our service providers are based outside the UK, for example in the European Economic Area, Canada or the United States. Where your data is transferred outside the UK, we make sure it is protected by appropriate safeguards, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

6. How long we keep your data

  • Order and customer records: 6 years after your last order, for tax and accounting purposes.
  • Customer service messages: up to 2 years after the issue is resolved.
  • Marketing data: until you unsubscribe or withdraw your consent.
  • Cookie data: for the duration of each cookie (see section 8).

7. Marketing

We only send you marketing emails or texts if you have opted in. You can unsubscribe at any time using the link in any email, by replying STOP to a text, or by emailing us.

8. Cookies

Cookies are small files stored on your device. We use:

  • strictly necessary cookies, which make the basket, checkout and security work. These do not need your consent;
  • analytics cookies, which help us understand how visitors use our website;
  • advertising cookies, such as the Meta Pixel, which measure the performance of our adverts and show relevant adverts to people who have visited our website.

We only use analytics and advertising cookies if you accept them in our cookie banner. You can change your choice at any time through the cookie settings on our website or your browser settings.

9. Your rights

Under UK data protection law, you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased, unless we must keep it by law;
  • restrict or object to how we use your data, including for direct marketing;
  • receive your data in a portable format;
  • withdraw your consent at any time, without affecting processing carried out before.

To exercise any of these rights, email us. We will reply within one month. We may ask you to confirm your identity first.

10. Complaints

If you are unhappy with how we handle your data, please contact us first so we can try to put it right. You also have the right to complain to the UK Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113.

11. Security

Our website and checkout use encrypted (HTTPS) connections, and payments are processed by PCI DSS-compliant providers. Access to your data is limited to the people and service providers who need it.

12. Children

Our website is not intended for children, and we do not knowingly collect personal data from anyone under 16.

13. Changes to this policy

We may update this policy from time to time. The latest version is always available on this page, with the date it was last updated.