Privacy Policy

Cindy Coutour

Last updated: 26/08/2026 Effective from: 26/08/2026

1. Introduction

This Privacy Policy explains how Cindy Coutour (“we”, “us”, “our”) collects, uses, shares and protects personal data when you visit https://cindycoutour.com (the “Site”), buy from us, create an account, sign up to our emails, attend our events, or otherwise interact with us.

We are committed to protecting your privacy and handling your data in line with the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Acts 1988–2018.

Please read this policy alongside our [Terms and Conditions] and [Cookie Policy].

2. Who we are (Data Controller)

For the purposes of data protection law, the data controller is:

Email:info@cindycoutour.com

Phone:+353 89 485 9342

If you have any questions about this policy or how we handle your data, contact us at info@cindycoutour.com.

3. The personal data we collect

3.1 Information you give us

Account details — name, email address, username, password (stored in encrypted form), and account preferences when you register at cindycoutour.com/my-account.
Order and delivery details — billing address, shipping address, phone number, order history, sizing and fit preferences, and any special instructions.
Made-to-measure and bespoke details — where you order tailored or custom pieces, we may collect body measurements, fitting notes, fabric and design preferences, and event dates.
Payment information — payments are processed by our payment providers. We receive confirmation of payment and limited details (such as the last four digits of a card and the card type), but we do not store full card numbers on our systems.
Communications — the content of emails, contact form submissions, WhatsApp, phone calls and social media messages you send us.
Marketing sign-ups — your email address and, where given, your name and preferences.
Wishlist and compare lists — the products you save.
Reviews and blog comments — your name, email address and the content you submit.
Event bookings — where you register for one of our events (for example through Eventbrite), we may receive your name, email address and ticket details from the ticketing provider.

3.2 Information we collect automatically

Technical data — IP address, browser type and version, device type, operating system, screen size, time zone and language settings.
Usage data — pages viewed, products viewed, time spent on pages, referring website, search terms used on the Site, and clicks.
Cookies and similar technologies — see Section 6.

3.3 Information from third parties

Payment providers — transaction confirmations and fraud-screening results.
Delivery partners — delivery status and tracking updates.
Social media platforms — where you interact with our Facebook or Instagram pages, or use a social login, we may receive limited profile information in line with your settings on those platforms.
Analytics and advertising providers — aggregated and pseudonymised audience data.

3.4 Sensitive data

We do not seek to collect special category data (such as health, religious or ethnic data). Where you voluntarily provide information in the course of a bespoke commission (for example, a note about mobility needs at a fitting), we use it only to provide the service you requested.

4. How we use your data and our legal bases

What we use it for	Data used	Legal basis under GDPR
Processing and delivering your orders, and providing customer service	Identity, contact, order, payment, delivery data	Contract — necessary to perform our contract with you
Managing your account and login	Identity, contact, account data	Contract
Taking measurements and producing bespoke garments	Identity, contact, measurement and preference data	Contract
Taking payment and preventing fraud	Payment, transaction, technical data	Contract; Legitimate interests (preventing fraud); Legal obligation
Handling returns, exchanges, refunds and complaints	Identity, contact, order data	Contract; Legal obligation (consumer law)
Sending marketing emails and news about collections, events and offers	Contact, marketing preference data	Consent; or Legitimate interests where you are an existing customer and we are marketing similar products (soft opt-in), subject to your right to object at any time
Improving the Site, our products and customer experience	Usage, technical data	Legitimate interests (running and improving our business)
Analytics and advertising cookies	Usage, technical, cookie data	Consent
Displaying and moderating reviews and blog comments	Identity, contact, content data	Consent; Legitimate interests (site integrity)
Managing event registrations and attendance	Identity, contact, ticket data	Contract; Legitimate interests
Keeping accounting and tax records	Identity, order, payment data	Legal obligation (Irish tax and company law)
Establishing, exercising or defending legal claims	As relevant	Legitimate interests; Legal obligation

Where we rely on legitimate interests, we have assessed that our interests do not override your rights and freedoms. You can ask us for details of that assessment at any time.

5. Marketing communications

If you have consented, or are an existing customer buying similar products, we may send you emails about new collections, restocks, events and promotions.

You can opt out at any time by:

clicking unsubscribe at the bottom of any marketing email;
changing your preferences in your account; or
emailing info@cindycoutour.com.

Opting out of marketing does not stop us sending service messages relating to your orders (for example, order confirmations, dispatch notices and returns correspondence).

6. Cookies and similar technologies

The Site uses cookies and similar technologies. When you first visit, our consent banner lets you accept, reject or customise non-essential cookies. You can change your choices at any time using the cookie settings link on the Site.

We use the following categories:

Strictly necessary cookies — required for the Site to work: logging in, keeping items in your basket, checkout, security and remembering your cookie choices. These do not require consent.
Functional cookies — remember preferences such as language, currency, wishlist and compare lists, and enable social sharing and third-party tools.
Analytical cookies — help us understand visitor numbers, traffic sources, bounce rate and how people use the Site.
Advertising cookies — used to deliver relevant ads and measure campaign performance, including on Meta (Facebook and Instagram) and other platforms.

Analytical, functional and advertising cookies are only set with your consent.

Most browsers also allow you to block or delete cookies through their settings, though blocking strictly necessary cookies may stop parts of the Site from working.

A full list of the cookies we use, their providers and their durations is available in our [Cookie Policy / cookie settings panel].

7. Who we share your data with

We never sell your personal data. We share it only with the following categories of recipient, and only as far as necessary:

Website hosting and infrastructure providers — Kwasathost
Payment processors — Stripe, PayPal, Revolut Business. These providers act as independent controllers for payment data and have their own privacy notices.
Delivery and logistics partners — An Post, DPD, Fastway, DHL
Email marketing platform — e.g. Mailchimp, Brevo
Analytics providers — e.g. Google Analytics 4
Advertising and social media platforms — Meta, Google Ads,
Ticketing providers for our events —Eventbrite
Professional advisers — accountants, auditors, insurers and lawyers, where necessary
Manufacturing or tailoring partners, where a garment is produced to your measurements —
Public authorities and regulators, where we are legally required to disclose information
A buyer or successor, if we sell or restructure all or part of our business

All processors acting on our behalf are bound by written contracts requiring them to keep your data secure and to process it only on our instructions.

8. International transfers

Some of our providers are based outside the European Economic Area (EEA), including in the United States. Where your data is transferred outside the EEA, we make sure appropriate safeguards are in place, such as:

an adequacy decision by the European Commission (including certification under the EU–US Data Privacy Framework, where applicable); or
the European Commission’s Standard Contractual Clauses, together with any supplementary measures required.

You can request a copy of the safeguards we rely on by emailing info@cindycoutour.com.

9. How long we keep your data

We keep personal data only for as long as necessary for the purposes we collected it for.

Data	Retention period
Order, invoice and tax records	6 years after the end of the relevant tax year (Irish tax law)
Customer account data	For as long as your account is active, and for [2] years after your last interaction, after which it is deleted or anonymised
Measurement and bespoke commission records	[3] years after the order, so we can service repeat and alteration requests — or sooner on request
Marketing contact data	Until you unsubscribe, and then a minimal suppression record kept indefinitely so we do not contact you again
Contact form and email enquiries	[2] years from the last correspondence
Reviews and blog comments	Until removed by you or by us
Cookie and analytics data	As set out in our Cookie Policy, typically up to [14] months
CCTV, if used at premises or events	[30] days

Where data is no longer needed, we securely delete it or irreversibly anonymise it.

10. How we protect your data

We use appropriate technical and organisational measures, including:

TLS/SSL encryption across the Site, including checkout and login;
password hashing and access controls, with access limited to staff who need it;
regular software, plugin and platform updates;
secure, reputable payment providers so that card data does not touch our servers;
backups and, where appropriate, staff training on data protection.

No transmission over the internet is completely secure. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Data Protection Commission within 72 hours where required, and we will notify you directly where the risk is high.

11. Your rights

Under GDPR you have the right to:

Access — obtain a copy of the personal data we hold about you;
Rectification — have inaccurate or incomplete data corrected;
Erasure — have your data deleted where there is no ongoing lawful reason for us to keep it;
Restriction — ask us to limit how we use your data in certain circumstances;
Data portability — receive data you gave us in a structured, machine-readable format, or have it transmitted to another controller;
Object — object to processing based on legitimate interests, and to object to direct marketing at any time, absolutely;
Withdraw consent — where we rely on consent, withdraw it at any time (this does not affect processing carried out before withdrawal);
Not be subject to automated decision-making that produces legal or similarly significant effects.

To exercise any of these rights, email info@cindycoutour.com. We may ask you to verify your identity. We will respond within one month, which can be extended by a further two months for complex requests — we will tell you if that applies. There is normally no charge.

Complaints

We would ask you to contact us first so we can try to resolve the matter. You also have the right to lodge a complaint with the Irish supervisory authority:

Data Protection Commission 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland Website: www.dataprotection.ie Phone: +353 (0)1 765 0100 / 1800 437 737

If you live in another EU/EEA country, you may also complain to your local data protection authority.

12. Children

The Site is not directed at children. We do not knowingly collect personal data from anyone under 16, which is the digital age of consent in Ireland. If you believe a child has provided us with personal data, contact info@cindycoutour.com and we will delete it.

13. Automated decision-making and profiling

We do not make decisions that produce legal or similarly significant effects about you using automated processing alone. We may use limited profiling for marketing purposes — for example, showing you products similar to ones you have viewed — which you can object to at any time.

14. Third-party websites

The Site contains links to third-party sites and platforms, including Facebook, Instagram, X, Pinterest, LinkedIn, Telegram and our ticketing provider. We are not responsible for their privacy practices. We recommend you read the privacy notice of any site you visit.

15. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The “Last updated” date at the top shows when it was last revised. Where changes are significant, we will notify you by email or by a prominent notice on the Site.

16. Contact us

Cindy Coutour Email: info@cindycoutour.com Phone: +353 89 485 9342