Privacy policy
Last updated: May 8, 2026
This Privacy Policy describes how Zofia Atelier (the "Site", "we", "us", or "our"), a brand owned and operated by Lovedink Holdings LLC, collects, uses, discloses, and protects your personal information when you visit, use, or make a purchase from our services. For the purpose of applicable data protection laws — including the EU General Data Protection Regulation (GDPR), the Spanish Organic Law 3/2018 (LOPDGDD), and other applicable national implementations — Lovedink Holdings LLC is the data controller of your personal information.
1. Who We Are
| Company | Lovedink Holdings LLC |
| Trading as | Zofia Atelier |
| Registered address | 30 N Gould St, STE R, Sheridan, WY 82801, United States |
| Website | zofiaatelier.com and any regional or market-specific domains operated under the Zofia Atelier brand |
| Contact (Europe) | info@zofiaatelier.com |
| Corporate / Legal | info@lovedink.com |
| Phone Number | +1 (307) 374 6030 (not for Customer Service, just to companies). |
| EU Representative (Art. 27 GDPR) | [In process of designation — interim contact: info@zofiaatelier.com] |
Lovedink Holdings LLC is incorporated in Wyoming, USA, and has no physical establishment in the European Union. As we systematically offer goods to consumers in the EU/EEA, we are subject to the GDPR pursuant to Article 3(2).
2. Personal Information We Collect
We collect personal information that identifies or can reasonably be linked to you. This includes:
2.1 Information you provide directly
- Contact and identity details: Name, shipping and billing address, phone number, and email address.
- Financial information: Payment card and transaction details. Zofia Atelier does not store card data — all payment processing is handled by PCI-DSS certified gateways (Shopify Payments, Stripe).
- Account information: Username, password, and account settings if you create an account.
- Communications: Messages, queries, and information you include in support interactions or contact forms.
- Newsletter subscription: Your email address when you voluntarily subscribe to marketing communications.
2.2 Information collected automatically
- IP address and approximate geolocation.
- Device type, browser, and operating system.
- Pages visited, time on site, clicks, cart activity, and browsing behaviour.
- Server log data: when you visit our site, our servers automatically record technical information including the URL requested, referring page, date and time of visit, browser type, and bytes transferred. This data is processed on the basis of our legitimate interest in maintaining site stability and security (Art. 6(1)(f) GDPR) and is not used to identify you personally.
- Cookies and similar tracking technologies (see Section 8 — Cookie Policy).
2.3 Information from third parties
We may receive data when you interact with our advertisements on platforms such as Meta (Facebook and Instagram) or Google, subject to their own privacy policies and your consent settings on those platforms.
3. Legal Bases and Purposes of Processing
Under the GDPR, we must have a lawful basis for processing your personal data. The table below sets out each purpose, the legal basis we rely on, and how long we retain the data.
| Purpose | Legal basis (Art. 6 GDPR) | Retention period |
|---|---|---|
| Processing and fulfilling your order (payment, shipping, invoicing) | Performance of contract — Art. 6(1)(b) | Duration of contract + 5 years (civil obligations) |
| Customer support, returns, and after-sales service | Performance of contract — Art. 6(1)(b) | 3 years from last interaction |
| Compliance with legal obligations (tax, accounting, anti-fraud) | Legal obligation — Art. 6(1)(c) | 10 years (applicable fiscal legislation) |
| Responding to contact form and email enquiries | Legitimate interest — Art. 6(1)(f); Performance of contract — Art. 6(1)(b) where applicable | Until the matter is fully resolved, then deleted unless a longer period is required |
| Sending marketing emails and newsletters (subscribers) | Consent — Art. 6(1)(a) — revocable at any time | Until consent is withdrawn or unsubscribe requested |
| Sending product-related offers to existing customers | Legitimate interest — Art. 6(1)(f) (soft opt-in for similar products) | Until objection or unsubscribe |
| Website analytics and performance improvement (Google Analytics 4) | Consent — Art. 6(1)(a) | 26 months (GA4 configuration) |
| Personalised advertising and campaign measurement (Meta Pixel) | Consent — Art. 6(1)(a) | Until consent is withdrawn |
| Server log data — site stability and security | Legitimate interest — Art. 6(1)(f) | 30 days, unless required for investigation of unlawful activity |
| Fraud detection and security | Legitimate interest — Art. 6(1)(f) | 1 year from incident |
4. How We Disclose Personal Information
We only share your data with third parties where necessary to provide our services, under data processing agreements that ensure adequate protection:
| Provider | Role | Location | Transfer safeguard |
|---|---|---|---|
| Shopify Inc. | E-commerce platform, payment processing, checkout | Canada / USA | Standard Contractual Clauses (SCCs); Canada adequacy decision |
| Logistics and fulfilment provider(s) | Order fulfilment and logistics | May include non-EEA countries (including China) | SCCs; minimum data transferred (name, delivery address, product) |
| Meta Platforms Ireland Ltd. | Advertising and tracking pixel (with consent only) | Ireland (EU) | Established in the EU; own DPA |
| Google LLC | Website analytics — Google Analytics 4 (with consent only) | USA | SCCs; IP anonymisation enabled |
| Klaviyo Inc. | Email marketing and automation (subscribers only) | USA | SCCs; EU-US Data Privacy Framework certification |
We do not sell, rent, or trade your personal information to third parties for their own commercial purposes.
We may also share information within our corporate group (specifically with Lovedink Holdings LLC as the parent entity) and may disclose data where required by law, court order, or to protect our legal rights.
5. Third-Party Links
Our Services may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their individual privacy policies before providing any personal information.
6. International Data Transfers
As Lovedink Holdings LLC is established in the United States, processing your order involves transfers of personal data outside the European Economic Area (EEA). These transfers are carried out under the following safeguards:
- Standard Contractual Clauses (SCCs) adopted by the European Commission (Implementing Decision 2021/914), applied in our agreements with all non-EEA processors.
- Data minimisation: only data strictly necessary for each purpose is transferred (e.g., name and address to the logistics provider, with no payment data).
You may request a copy of the specific safeguards applied to any transfer by contacting us at info@zofiaatelier.com.
7. Children's Data
Zofia Atelier is not directed at children. We do not knowingly collect personal data from individuals under the age of 14 (or under the applicable age of digital consent in your country of residence). If you believe a minor has provided us with personal data without appropriate consent, please contact us so we can delete it promptly.
8. Cookie Policy
8.1 What are cookies?
Cookies are small text files placed on your device when you visit a website. They allow the site to remember your preferences, analyse traffic, and serve relevant advertising.
8.2 Cookies we use
| Category | Cookie / Technology | Purpose | Duration | Consent required |
|---|---|---|---|---|
| Strictly necessary | _shopify_session, cart, secure_session | Shopping cart, user session, security | Session / 1 year | No — essential to function |
| Preferences | locale, currency | Remember language and currency selection | 1 year | No — functional |
| Analytics | _ga, _ga_*, _gid (Google Analytics 4) | Anonymous visit statistics — pages viewed, traffic sources, session duration. IP anonymised. | 26 months | Yes |
| Marketing | _fbp, _fbc (Meta Pixel) | Personalised advertising on Facebook and Instagram; campaign measurement and retargeting | 90 days | Yes |
8.3 Managing your cookie preferences
When you first visit this website, a cookie consent banner will allow you to:
- Accept all: enables analytics and marketing cookies.
- Reject all: only strictly necessary cookies are loaded. The store functions normally.
- Manage preferences: choose category by category.
You can review and change your preferences at any time by clicking "Manage cookie preferences" in the footer of this site.
8.4 Browser-level cookie controls
You may also block or delete cookies via your browser settings. Note that disabling certain cookies may affect store functionality (e.g., the shopping cart):
- Chrome: Settings → Privacy and security → Cookies
- Firefox: Options → Privacy & Security → Cookies
- Safari: Preferences → Privacy
- Edge: Settings → Privacy, search and services
9. Security and Data Retention
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or destruction — including TLS/HTTPS encryption on all communications and access controls restricting who can access personal data internally.
No system is completely impenetrable. In the event of a data breach that poses a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by law.
We retain personal data only for as long as necessary for the purposes set out in Section 3, unless a longer retention period is required by applicable law.
10. Your Rights
Depending on your country of residence, you have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR): Obtain confirmation that we process your data and receive a copy.
- Right to rectification (Art. 16 GDPR): Correct inaccurate or incomplete data.
- Right to erasure / "right to be forgotten" (Art. 17 GDPR): Request deletion of your data when it is no longer necessary for the original purpose.
- Right to restriction of processing (Art. 18 GDPR): Ask us to pause processing in certain circumstances.
- Right to data portability (Art. 20 GDPR): Receive your data in a structured, machine-readable format.
- Right to object (Art. 21 GDPR): Object to processing based on legitimate interest or to direct marketing at any time.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
- Rights under LOPDGDD (Spain): In addition to the above, residents in Spain benefit from the rights established under Organic Law 3/2018, including the right to digital erasure and the right not to be subject to automated individual decisions.
How to exercise your rights: Send a written request to info@zofiaatelier.com, stating your name, the right you wish to exercise, and sufficient identifying information. We will respond within 30 calendar days.
11. Complaints and Supervisory Authorities
If you believe we have not handled your personal data in compliance with applicable law, you have the right to lodge a complaint with the supervisory authority in your country of residence:
- Spain: Agencia Española de Protección de Datos (AEPD) — www.aepd.es
- Poland: Urząd Ochrony Danych Osobowych (UODO) — uodo.gov.pl
- Portugal: Comissão Nacional de Proteção de Dados (CNPD) — www.cnpd.pt
- Netherlands: Autoriteit Persoonsgegevens (AP) — autoriteitpersoonsgegevens.nl
- Other EU/EEA countries: The supervisory authority of the Member State where you reside, work, or where the alleged infringement took place.
We encourage you to contact us first so we can try to resolve your concern directly.
12. Changes to This Policy
We may update this Privacy and Cookie Policy to reflect legal changes or changes to our practices. The "Last updated" date at the top of this document indicates when the most recent changes were made. We will notify registered customers of material changes by email.
13. Contact
- European enquiries: info@zofiaatelier.com
- Corporate / Legal: info@lovedink.com
- Postal address: Lovedink Holdings LLC, 30 N Gould St, STE R, Sheridan, WY 82801, USA
- Phone number: +1 (307) 374 6030 (We currently do not offer customer support via phone. This phone is for companies only.)
Frequently Asked Questions
How much does shipping cost?
For items where shipping is not included, the cost is calculated based on your location and the items in your order. You will always see the final shipping price before you complete your purchase. Where Free Shipping is indicated on our site, you will see a shipping cost of zero at checkout — no hidden fees, ever.
What is the return policy?
Your satisfaction is our top priority. We want you to be completely happy with your Zofia Atelier pieces. If your order does not meet your expectations, please reach out to our team at info@zofiaatelier.com within 30 days of delivery. Our dedicated support team will work closely with you to find the best possible resolution. EU/EEA customers also benefit from the statutory 14-day right of withdrawal — see our Terms of Service for full details.
How long will it take to receive my order?
Once you place an order, please allow 1–3 business days for processing (quality checks and packaging). After processing, standard shipping typically takes 5–14 business days. Delivery times may vary slightly during peak seasons or due to local customs procedures. You will receive a tracking number by email as soon as your order ships.
Where do my products ship from?
We pride ourselves on offering a curated selection of global trends. Products are fulfilled through our logistics partner and may ship from warehouses in Asia or within the EU, depending on stock availability at the time of your order.
How can I manage or delete my data?
Email us at info@zofiaatelier.com with your request. We will respond within 30 days. You can also unsubscribe from marketing emails at any time using the link at the bottom of any email we send you.