Privacy Policy for Luxe Without Labels

Luxe Without Labels ("we," "our," or "us") values your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you use our website and services. It is designed to comply with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

1. Who We Are

Luxe Without Labels is a curated editorial platform that showcases affordable alternatives to premium activewear brands, primarily through Amazon affiliate links.

For any privacy-related questions, please contact us at:

2. Data We Collect

When you use our website, we may collect the following personal data:

• IP addresses (via server logs and analytics)
• Browsing behavior (pages visited, clicks, time spent)
• Affiliate click tracking (outbound clicks on Amazon links)
• Email addresses (only if you subscribe to our newsletter)

We also use cookies and tracking tools:

• Google Analytics (site usage tracking)
• Amazon Associates affiliate tracking cookies
• Standard session cookies for site functionality

3. How We Use Your Data

We process your data for the following purposes:

• To improve website performance, content, and user experience (analytics).
• To track outbound affiliate clicks (essential for earning commissions).
• To send newsletters or marketing communications (only with your consent).
• To ensure site security and prevent misuse.

4. Legal Basis for Processing

Under GDPR, we rely on the following legal bases:

• Consent: for newsletter subscriptions and cookie/tracking technologies.
• Legitimate interests: for analytics, affiliate tracking, and site security.
• Legal obligations: for compliance with applicable laws and regulations.

5. User Rights

As a user under GDPR, you have the right to:

• Access your personal data
• Correct inaccuracies in your data
• Request deletion of your data
• Withdraw consent at any time (unsubscribe or adjust cookie settings)
• Restrict or object to certain processing activities
• Data portability (receive a copy of your data in a structured format)

To exercise any of these rights, contact us at bengrace9@gmail.com.

6. Sharing Your Data

We do not sell personal data. We only share it with trusted third parties when necessary:

• Amazon Associates – affiliate tracking and commissions
• Google Analytics – site usage analytics
• Vercel – hosting provider
• Supabase – database and API backend
• Email marketing provider – for newsletters (only with consent)

All third parties process data in accordance with GDPR and their own privacy policies.

7. Data Retention

We keep personal data only as long as necessary for the purposes described:

• Analytics logs: up to 26 months (Google default)
• Affiliate click tracking: as long as required for reporting
• Newsletter emails: until you unsubscribe or request deletion
• Server logs: 30–90 days for security purposes

8. International Data Transfers

Some of our service providers (Vercel, Supabase, Google) may process data outside the EU/EEA (e.g., in the U.S.).

In such cases, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs)
• GDPR-compliant data processing agreements

9. Security Measures

We take appropriate steps to keep your data safe, including:

• SSL/TLS encryption (HTTPS)
• Restricted database access with role-based permissions
• Data encryption at rest and in transit
• Regular monitoring and updates of hosting infrastructure

10. Cookies

When you first visit our site, you will see a cookie banner allowing you to accept or reject tracking cookies.

You can change your cookie preferences at any time through your browser settings.

11. Updates to This Policy

We may update this Privacy Policy from time to time. If changes are significant, we will:

• Post a notice on our website, and/or
• Notify newsletter subscribers via email

12. Contact Us

If you have questions or requests regarding your data, please contact: