Privacy Policy

1. Who is responsible for your information?

That Divine Feminine is the brand responsible for its customer information. Contact support@thatdivinefeminine.com. The supplied business address is Crown House, NW10 7PN, United Kingdom. The full legal identity and complete street address and town/city still need to be verified before publication. A separate data protection contact has not been supplied; use our support email for privacy enquiries.

2. Information we use

For orders, enquiries and related services, information may include your name, email address, billing and delivery addresses, telephone number where provided, order history, payment transaction information and customer-service communications. We collect only what is needed for the relevant purpose.

The shopping basket is operated through Shopify. Basket creation and updates send the chosen variants and quantities to Shopify. If you proceed to Shopify checkout, it collects the information needed to process your order and payment under its checkout privacy arrangements.

• Contract: processing an order, delivery, order updates, returns and refunds.
• Legal obligation: accounting, tax and consumer-law records where required.
• Legitimate interests: responding to enquiries, securing our services, preventing fraud and improving the shopping experience, where balanced against your rights.
• Consent: marketing where you explicitly choose to receive it. Buying a product does not automatically subscribe you.

3. Newsletter and marketing

Our newsletter provider is not currently connected. First name and email entered in the form are used temporarily to validate your submission but are not saved or sent to a mailing list. An unsuccessful submission is not a subscription and no marketing emails are sent from this form.

Before collection is enabled, we will identify the provider and confirm retention arrangements here. Joining requires a first name, email and an unticked consent box that you actively select. When marketing is enabled you may receive offers, product launches, early access, brand updates and wellness content, and you can withdraw consent using the unsubscribe link or contacting us.

4. Payments and service providers

Payments are handled by the services actually offered at Shopify checkout. We do not store complete card details on this website. Payment processors handle payment information under their own privacy and security arrangements.

Shopify receives shopping and checkout information; Lovable hosts the website and provides the analytics described below. Where needed to fulfil an order, we may share necessary information with the chosen payment, delivery and fulfilment services. We will identify an email marketing provider before activating one. We do not sell your personal information.

The website loads its typeface from Google Fonts; your browser contacts Google to fetch the font, which may disclose your IP address and browser request information to Google. Photographs load from our hosted asset service. There are no embedded Instagram or TikTok feeds, advertising pixels or customer sign-in service in the current site code.

5. Website analytics

On our published site, Lovable records page visits, where visitors came from, their country, browser, operating system and device type, how long they stay, how fast pages load, errors and clicks on buttons and links. Click tracking is enabled. The editor preview is not counted.

With the current site configuration, these records are collected for every visitor without a cookie-consent banner. Lovable’s analytics uses no cookies, stores nothing on your device, does not keep IP addresses and does not identify visitors or recognise returning visitors. It identifies clicks by their location on the page, not the text of the button or link. Our code does not send additional custom analytics events.

Detailed data is kept for 90 days, and daily summaries for one year. Lovable collects this data for us. Lovable’s privacy policy explains how it handles it: https://lovable.dev/privacy

6. Browser storage

The website stores Shopify-returned basket information in your browser under tdf-shopify-cart to restore and synchronise the basket. This can include a cart identifier, selected items, quantities and checkout link. It is not a store of complete payment-card details.

A separate tdf-welcome-preference entry remembers when the welcome invitation was dismissed, so it stays closed for seven days. A confirmed subscriber flag can prevent future automatic invitations after a connected provider confirms subscription. These preferences do not contain your name or email address. You can remove them using your browser’s site-data controls; doing so may reset your basket or welcome invitation.

7. Retention

Order and enquiry records are kept only as long as needed for fulfilment, support, legal, accounting and regulatory requirements. The exact customer-record retention schedule must be confirmed before trading; we do not claim a fixed period that has not been established. Newsletter personal data is not retained by the unconnected form. Analytics retention is specified above.

8. Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction, portability or object to processing. Where we rely on consent, you may withdraw it without affecting the lawfulness of earlier processing. Some rights are subject to exceptions, such as records we must keep by law.

Email support@thatdivinefeminine.com to make a request. We may need proportionate information to verify your identity. You can complain to the Information Commissioner’s Office at https://ico.org.uk; you do not have to contact us first.

9. Security and international transfers

We use appropriate technical and organisational measures to protect information, but no online system can guarantee complete security. Our service providers may process information outside the UK. Where legally required, an appropriate lawful transfer mechanism and safeguards must be used. Provider locations and transfer arrangements will be confirmed before additional services are activated.

10. Policy updates

We may update this policy when our services or obligations change. The last updated date appears above. Significant changes to how information is used will be communicated where required.