Flavia di Luce

Privacy and cookies

Here we explain how personal data is processed when you visit Flavia di Luce, purchase a piece or contact customer service.

Controller and contact details

The data controller is Drive for Me, the business operating the Flavia di Luce brand, based at Schipbeekstraat 18-2, 1078 BL Amsterdam, Netherlands. KvK 72871911; VAT number NL002391403B97. For privacy questions or to exercise your rights, write to info@flaviadiluce.com
Telephone: +31 6 8466 1406. Your customer service contact is Giulia Moretti.

Data, purposes and legal bases

  • Purchases and assistance: your name, contact details, addresses, ordered items, transaction information and messages are used to respond to requests and manage the purchase, delivery, returns and refunds. The legal basis is the contract or your request for pre-contractual measures.
  • Compliance: order and billing data are used to meet accounting and tax obligations and binding requests from authorities. The legal basis is compliance with a legal obligation.
  • Newsletter: if you choose to subscribe, we use your email address to send new arrivals and style inspiration. The legal basis is your consent. You can unsubscribe using the link in the emails or by writing to customer service.
  • Protection of rights: relevant information may be used to establish, exercise or defend a right, based on the legitimate interest in protecting the business while taking your rights into account.

We receive data directly from you and payment and shipping updates from the services involved in the order. The platform also collects technical data when the website is used. Without essential information, we cannot complete a purchase or fulfil a request. Optional consent is not required to make a purchase.

Shopify and recipients

The store is hosted on Shopify, which processes data to provide the platform and associated services. Shopify Network Intelligence may also use information about interactions with other stores and Shopify for enhanced services, including personalisation, improvement and advertising, depending on the services used and applicable choices. For this processing, read Shopify's privacy policy and its privacy portal.

Orders are fulfilled through CJdropshipping, with shipments from China. The data necessary for the order and delivery is shared with fulfilment and transport services. Payment services and authorities, where required by law, may also receive relevant data.

Processing outside the European Economic Area

Logistics through CJdropshipping involves sharing data with China. Shopify services may also involve processing outside the European Economic Area. Shopify describes the safeguards and mechanisms applied to its transfers in its data processing agreement. You can contact us for information about the recipients of your data and the safeguards relating to transfers that affect you.

Retention

The period depends on the purpose: managing the order and any subsequent requests, obligations to retain accounting and tax records, the need to handle disputes and the applicable periods for protecting rights. For account data, the duration of the relationship and a closure request are relevant. Deleting an account does not remove documents that must be retained by law.

Cookies are small files used by your browser. Strictly necessary technologies enable functions such as sessions, the shopping bag and security. For optional analytics or advertising tools that require consent, you have the right to choose freely and withdraw that choice. Continuing to browse does not amount to consent.

You can also manage and delete cookies in your browser settings; blocking necessary cookies may prevent some functions. For assistance with your choices, write to info@flaviadiluce.com.

Your rights

In the cases provided by the GDPR, you can request access, rectification, erasure, restriction and portability, or object to processing. You can withdraw consent without affecting the lawfulness of earlier processing. We respond within one month, subject to extensions that are permitted and communicated. You can complain to the authority where you live or work, or where the alleged infringement took place; in Italy, the Garante per la protezione dei dati personali.

Do not send passwords or full card details. You can also contact us through the Contact page.

Last updated: 20 September 2026.