PRIVACY POLICY

Last updated: August, 2026

1. Data Controller

The data controller responsible for the personal data collected through this website is:

Trade name: Undimmed Fashion
Website: www.undimmedfashion.com
Email: help@undimmedfashion.com

Hereinafter, the data controller will be referred to as “Undimmed Fashion,” “we,” “us,” “our,” or “the Store.”

This Privacy Policy explains how we collect, use, store, share, and protect the personal data of individuals who visit our website, make a purchase, create an account, subscribe to our communications, or contact us.

2. Personal Data We May Collect

Depending on how you interact with the Store, we may process the following categories of personal data:

2.1. Identification and Contact Information

We may collect your first and last name, billing address, shipping address, ZIP or postal code, city, country, phone number, and email address.

2.2. Order and Purchase Information

We may process information about the products purchased, sizes, colors, quantities, order amount, discounts used, order number, shipping status, returns, exchanges, refunds, issues, and communications related to your purchase.

2.3. Payment and Billing Information

Payments may be processed by banks, payment gateways, or other specialized service providers. Depending on the payment method selected, these providers may collect and process the information required to authorize and manage the payment.

Undimmed Fashion may receive information such as payment confirmation, the transaction ID, the payment method used, and certain limited information needed to manage the order, prevent fraud, or process a refund.

2.4. Customer Account Information

When customer account creation is available, we may process your login credentials, order history, saved addresses, preferences, and other information associated with your profile.

2.5. Technical and Browsing Information

When you visit the website, we may automatically collect information such as:

• IP address.

• Device type.

• Operating system.

• Browser used.

• Device identifiers.

• Language and time zone.

• Pages visited.

• Products viewed.

• Date, time, and duration of the visit.

• Interactions with the website.

• Information related to cookies and similar technologies.

• Information about website errors, security, and performance.

2.6. Communications and Customer Support

We may process the information you include in emails, forms, messages, return requests, complaints, inquiries, reviews, or communications with our customer support team.

2.7. Marketing Preferences

When you have agreed to receive marketing communications, we may process your email address, phone number, preferences, history of interactions with our communications, and records of the consent you provided.

2.8. Fraud Prevention and Security Information

We may process technical data, transaction data, approximate location, IP address, order history, and risk indicators to detect fraudulent transactions, unauthorized access, abuse, or unlawful activity.

We do not ordinarily request special categories of personal data, such as information about health, racial or ethnic origin, religious beliefs, political opinions, sexual orientation, or biometric data. We recommend that you do not provide this type of information to us.

3. How We Obtain Your Data

We may obtain your personal data:

1. Directly from you when you make a purchase, register, complete a form, contact us, request a return, or subscribe to our communications.

2. Automatically through cookies, tags, pixels, server logs, and similar technologies.

3. Through Shopify and services you use during the purchasing process, such as Shop, Shop Pay, or other related services.

4. Through payment providers, shipping carriers, customer support platforms, applications installed on the Store, or other providers needed to manage your order.

5. Through social media when you voluntarily contact or interact with our profiles.

When you provide personal data relating to another person, such as the details of a recipient who is different from the purchaser, you represent that you are authorized to provide that information and that you have informed the individual about how their data will be processed.

4. Purposes and Legal Bases for Processing

4.1. Managing Purchases and Orders

We use your data to:

• Process and confirm your order.

• Collect the applicable payment.

• Prepare and ship the products.

• Update you on the status of your order.

• Manage exchanges, returns, and refunds.

• Issue invoices and receipts.

• Address issues related to your purchase.

The legal basis for this processing is the performance of the purchase agreement and taking steps at the customer’s request before entering into a contract.

4.2. Managing Your Customer Account

When you create an account, we use your data to manage your profile, make future purchases easier, display your order history, and allow you to update your preferences.

The legal basis for this processing is the performance of our contractual relationship and provision of the requested service.

4.3. Customer Support

We use your data to respond to inquiries, resolve problems, manage complaints, and provide assistance before, during, and after a purchase.

The legal basis may be the performance of a contract, taking steps before entering into a contract, or our legitimate interest in providing appropriate customer support and maintaining a satisfactory relationship with our customers.

4.4. Compliance With Legal Obligations

We may process and retain certain data to comply with tax, accounting, commercial, consumer protection, data protection, fraud prevention, and other legally applicable obligations.

The legal basis for this processing is compliance with a legal obligation.

4.5. Security and Fraud Prevention

We may use technical and transactional data to verify orders, protect accounts, prevent fraudulent payments, detect suspicious activity, and maintain the security of the Store.

The legal basis for this processing is our legitimate interest in protecting our business, customers, and service providers, as well as compliance with any applicable legal obligations.

4.6. Marketing Communications

When you have provided your consent, we may send you news, promotions, discounts, product launches, recommendations, and other marketing communications related to Undimmed Fashion.

The legal basis for this processing is your consent.

You may withdraw your consent at any time by using the unsubscribe link included in our communications or by emailing help@undimmedfashion.com. Withdrawing your consent will not affect the lawfulness of any processing carried out before the withdrawal.

4.7. Abandoned Cart and Incomplete Checkout Reminders

When you have authorized the applicable communications or another valid legal basis exists, we may send you reminders about products added to your cart or checkout processes that were not completed.

You may stop receiving these reminders at any time.

4.8. Analytics, Personalization, and Advertising

When you have provided your consent through the cookie settings panel, we may use measurement, analytics, personalization, and advertising technologies to:

• Understand how the website is used.

• Generate statistics.

• Improve the browsing experience.

• Measure campaign performance.

• Personalize content and recommendations.

• Display advertising related to your interests.

• Limit how often advertisements are shown.

The legal basis for this processing is your consent, which you may withdraw or modify through the cookie settings panel.

4.9. Publishing and Managing Reviews

When you voluntarily submit a review, we may use the information provided to verify, moderate, and publish it in accordance with the terms disclosed when the review is submitted.

We will publish your name, initial, alias, or other identifying information only when you have been informed that we will do so.

4.10. Establishing, Exercising, or Defending Claims

We may retain and use certain data when necessary to establish, exercise, or defend administrative, judicial, or out-of-court claims.

The legal basis for this processing is our legitimate interest in protecting our rights and interests.

5. Required Information

Fields marked as required during checkout or on forms are necessary to process the applicable request.

If you do not provide the required information, we may be unable to process your order, complete delivery, issue an invoice, manage a return, or properly respond to your inquiry.

6. Recipients of Personal Data

We may share your personal data, only when necessary, with the following categories of recipients:

• Shopify and hosting or technology infrastructure providers.

• Banks and payment service providers.

• Shipping carriers, courier services, logistics providers, and return-management providers.

• Email and communications service providers.

• Customer support platforms.

• Security, fraud prevention, and risk-control providers.

• Information technology, storage, and maintenance providers.

• Analytics, measurement, advertising, or social media tools when you have provided the required consent.

• Legal, tax, and accounting advisors and auditors.

• Government authorities, regulatory agencies, law enforcement authorities, courts, and tribunals when required by law or a valid request.

Service providers that process data on behalf of Undimmed Fashion must use the information solely to provide the contracted services and are subject to confidentiality, security, and data protection obligations.

We will not disclose your personal data to third parties for their own purposes unrelated to those described in this policy unless you have provided your consent or the disclosure is required or otherwise authorized by law.

7. Shopify

Our Store is hosted and operated through the Shopify ecommerce platform.

When providing the platform’s core services, Shopify may process personal data on behalf of Undimmed Fashion to enable operation of the website, shopping cart, checkout process, order management, fraud prevention, and other contracted features.

For certain services in which the customer has a direct relationship with Shopify, such as Shop, Shop Pay, or other additional or enhanced services, Shopify may process certain information as an independent data controller in accordance with its own terms and privacy policies.

More information is available in the consumer privacy policy on Shopify’s official website.

8. International Data Transfers

Some of our technology providers may be located outside the European Economic Area or may process personal data outside the European Economic Area.

In particular, Shopify operates internationally and may process or transfer information to group companies and service providers located in countries such as Canada or the United States.

When international data transfers take place, the safeguards required by applicable law will be used. These safeguards may include:

• Adequacy decisions issued by the European Commission.

• Standard Contractual Clauses.

• Binding Corporate Rules.

• Additional contractual, technical, and organizational measures.

• Other mechanisms recognized under applicable law.

You may request additional information about the safeguards used by emailing help@undimmedfashion.com.

9. Data Retention Periods

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected.

In particular:

• Order, billing, and payment information will be retained throughout the contractual relationship and afterward for the periods required by applicable tax, accounting, commercial, consumer protection, and fraud prevention laws.

• Information related to inquiries, returns, issues, or complaints will be retained until the matter is resolved and for any additional period during which liability may arise.

• Account information will be retained while the account remains active. When you request deletion, the information will be deleted or anonymized, except for information that must be retained to comply with a legal obligation.

• Information used for marketing communications will be retained until you withdraw your consent, object to the processing, or unsubscribe.

• Records of consent, unsubscribe requests, and objections may be retained for as long as necessary to demonstrate compliance with our obligations and prevent further unauthorized communications.

• Information collected through cookies will be retained for the periods described in our Cookie Policy.

After the applicable retention periods end, the data may be securely restricted and used only to address potential legal liabilities. It will then be deleted or anonymized.

10. Cookies and Similar Technologies

The website uses cookies and similar technologies to enable its operation, maintain security, remember products in your cart, and facilitate the checkout process.

Strictly necessary cookies may be used without consent when they are essential to provide the service you requested.

Analytics, personalization, advertising, or tracking cookies will be used only when you have provided your consent, where consent is legally required.

You may accept, reject, or configure nonessential cookies through the settings panel available on the website. Withdrawing consent will not affect the lawfulness of processing carried out before the withdrawal.

For detailed information about the cookies used, their providers, purposes, and duration, please review our Cookie Policy.

11. Marketing Communications

We will not use your data to send marketing communications by email, SMS, or other electronic means without a valid legal basis.

When these communications are based on your consent:

• Subscribing will be voluntary.

• You may withdraw your consent at any time.

• Each communication will include a simple, free method for unsubscribing.

• Unsubscribing will not affect communications necessary to manage orders, payments, deliveries, returns, or security matters.

Communications directly related to a purchase are not considered promotional when they are necessary to fulfill the order or provide the requested service.

12. Your Data Protection Rights

You may exercise the following rights regarding your personal data:

Right of Access

You may request confirmation as to whether we process your data and obtain information about that processing.

Right to Rectification

You may request correction of inaccurate data or completion of incomplete data.

Right to Erasure

You may request deletion of your data when, among other reasons, it is no longer necessary for the purposes for which it was collected.

Right to Object

You may object to processing based on our legitimate interests, taking into account the circumstances of your particular situation.

You may also object at any time to the use of your data for marketing communications.

Right to Restriction of Processing

You may request that we temporarily restrict the processing of your data in the circumstances provided by applicable law.

Right to Data Portability

When applicable, you may request to receive the data you provided to us in a structured, commonly used, and machine-readable format, or request that it be transmitted to another data controller.

Right to Withdraw Consent

You may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

Right Not to Be Subject to Solely Automated Decisions

You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you, except where permitted by law and subject to the appropriate safeguards.

13. How to Exercise Your Rights

You may exercise your rights by sending a request to:

Email: help@undimmedfashion.com
Recommended subject line: “Data Protection – Rights Request”

Your request should include:

• Your first and last name.

• The right you wish to exercise.

• The information needed to identify your account, order, or relationship with the Store.

• A clear description of your request.

• The address or method through which you would like to receive our response.

When we have reasonable doubts about your identity, we may request additional information that is strictly necessary to verify it and protect your data from fraudulent requests.

Exercising these rights is generally free of charge. We will respond within the period required by applicable law.

14. Complaints to a Supervisory Authority

If you believe that the processing of your personal data violates applicable law, you may file a complaint with the appropriate data protection authority.

In Spain, the competent authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos, or AEPD).

Before filing a complaint related to the exercise of your rights, you may contact us at help@undimmedfashion.com so that we can review and address your request.

15. Children and Minors

The website is not specifically directed to children under 14 years of age, and we do not knowingly collect personal data from children under that age without the legally required authorization.

If we learn that a child’s data has been provided without the required authorization, we will take reasonable steps to delete it.

Purchases made by minors must involve or be authorized by their parents, guardians, or legal representatives when legally required.

16. Automated Decision-Making and Fraud Prevention

We may use automated risk-analysis systems to identify potentially fraudulent orders, protect payment methods, and prevent unlawful activity.

When a decision based solely on automated processing may produce legal effects or significantly affect an individual, the safeguards required by applicable law will apply, including, where appropriate, the right to request human intervention, express the individual’s point of view, and contest the decision.

17. Information Security

We use reasonable technical and organizational measures to protect personal data against:

• Unauthorized access.

• Accidental loss or destruction.

• Improper alteration.

• Unauthorized disclosure.

• Fraudulent use.

• Unlawful processing.

These measures may include access controls, credential management, encryption, backups, security monitoring, internal restrictions, and confidentiality agreements.

However, no system for transmitting or storing information over the Internet can guarantee absolute security. If we identify a security breach affecting your personal data, we will take the measures required by applicable law.

18. Third-Party Links and Services

The website may contain links to websites, applications, social media platforms, or services operated by third parties.

Undimmed Fashion does not control the privacy practices of these third parties. We recommend reviewing their respective privacy policies before providing personal data to them.

19. Changes to This Privacy Policy

We may update this Privacy Policy to reflect legal, technical, operational, or service-related changes.

When we make a change, we will update the date shown at the beginning of this policy. If the change is material, we may provide notice on the website or through other appropriate means.

We recommend reviewing this page periodically.

20. Contact Us

For questions about this Privacy Policy, the processing of your personal data, or the exercise of your rights, please contact us at:

Undimmed Fashion
Email: help@undimmedfashion.com
Website: www.undimmedfashion.com