Privacy policy

The controller of your personal data is IMPRESJA Magdalena Mazur, registered at ul. Jana III Sobieskiego 10, 35-002 Rzeszów, Poland, tax number (NIP) 8131692474 — owner of the Lulu Madeline brand and of the lulumadeline.com website.

For anything concerning personal data, write to kontakt@lulumadeline.com. We reply within one month at the latest.

Contact form. We collect your name, e-mail address, optionally a phone number and the content of your message. We use them solely to answer your enquiry and correspond with you. Legal basis: your consent (art. 6 (1)(a) GDPR) and our legitimate interest in handling enquiries (art. 6 (1)(f) GDPR).

Server logs. Our hosting provider records technical data for every visit — IP address, browser type, the page visited, date and time. These serve security and diagnostics only. Legal basis: legitimate interest (art. 6 (1)(f) GDPR).

Visit statistics. We count page views to learn which collections you look at most. The tool (Vercel Analytics) sets no cookies, builds no profile or user identifier and does not follow you across other websites — it collects aggregate, anonymous numbers only. Legal basis: legitimate interest (art. 6 (1)(f) GDPR).

What we do NOT do. We do not profile, show ads, build marketing databases, sell or share data for marketing purposes. We take no automated decisions.

Correspondence from the contact form is kept for as long as handling the matter requires, and then for up to 12 months — in case you come back to the subject. You may withdraw your consent at any time, and we will erase the data without undue delay.

Server logs are kept for the period set by our hosting provider and deleted automatically.

We work with trusted providers who process data only on our instructions:

• Vercel Inc. — website hosting (server logs) and anonymous visit statistics.
• Resend — delivery of contact form messages to our inbox.
• Sanity — the content management system for the site (photographs and descriptions of dresses; no contact form data goes there).

Some of these providers are based outside the European Economic Area. Transfers take place under standard contractual clauses approved by the European Commission. We also disclose data to public authorities where the law requires it.

The site uses no analytics or marketing cookies. Our visit statistics work without cookies, so we show no consent banner — there is nothing to consent to.

The only cookie we may set is the technical wstep cookie — it appears when the site runs in closed mode and you enter the access password. It lasts 30 days and exists only so that you are not asked for the password on every visit. You can delete it in your browser settings.

You have the right to: access your data, rectify it, erase it, restrict processing, data portability, object to processing based on our legitimate interest, and withdraw consent at any time (withdrawal does not affect the lawfulness of processing before it).

To exercise any of these rights, an e-mail to kontakt@lulumadeline.com is enough.

If you believe we process data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.

Providing data is voluntary, but without it we cannot answer an enquiry sent through the form.

The site links to our shop lulumadeline.shop, to social media profiles and to the websites of partner salons. Each of these has its own privacy policy — we are not responsible for how they process data.

If we change the way we process data, we will update this page and the date at the top. The version published here is always the one in force.