Privacy Policy Last updated: June 4, 2026

This privacy policy applies to all services of Susan & Laura, reachable via contact@susanandlaura.com and located in Wyoming, USA. We respect the privacy of our customers and treat the personal information you provide us confidentially and in accordance with applicable privacy laws including the GDPR.

1. What data we collect We collect personal data that you provide us when placing an order, creating an account, or contacting our customer service, including:

• Full name
• Shipping and billing address
• Email address
• Phone number
• Payment details (processed via our payment providers, not stored on our servers)
• IP address and device/browser data
• Order and transaction history
• Data about your activity and behavior on our website (via cookies)

2. Purposes of processing

• Processing, shipping, and invoicing your orders
• Providing customer service and support
• Sending order updates, tracking information, and relevant communications
• Improving our services, website, and product range
• Preventing and detecting fraud and misuse
• Sending marketing communications, only when you have given consent

3. Legal basis We process your data based on the performance of a contract (your order), your consent (e.g. marketing), a legal obligation (such as tax administration), and our legitimate interest (such as fraud prevention and improving our services).

4. Sharing data with third parties Your data is only shared with third parties to the extent necessary for our services, including:

• Our payment providers: Shopify Payments, PayPal, Apple Pay, Google Pay
• Our shipping and delivery partners: UPS
• Our supplier(s) for processing and shipping your order
• Analytics and marketing service providers (where applicable and subject to your cookie preferences)

Where required, data processing agreements have been concluded with all these parties. We never sell your data to third parties. As part of our shipping process may originate directly from a supplier outside the EEA, a transfer outside the EEA may occur; we take appropriate safeguards in this regard.

5. Retention period We do not retain your data longer than necessary for the purposes for which it was collected, or as long as legally required (such as a statutory retention obligation for records of 7 years).

6. Cookies Our website uses cookies to improve functionality, analyze visitor behavior, and support marketing. You can always adjust your preferences via the cookie banner or your browser settings.

7. Security We take appropriate technical and organizational measures to protect your data against loss, misuse, and unauthorized access. All payments are processed via a secure SSL connection.

8. Your rights You have the right to access, correct, delete, or restrict your personal data. You can also object to processing, withdraw your consent, and submit a request for data portability. Please contact us at contact@susanandlaura.com. You also have the right to file a complaint with the relevant supervisory authority.

9. Contact Susan & Laura — Wyoming, USA — contact@susanandlaura.com