Privacy Policy

1. Who we are

SANTCARA ("we", "us", "our") is a sustainable women's lingerie brand. We are the data controller responsible for the personal information collected through this website. Protecting your privacy is part of how we do business, and this policy explains — in plain language — what we collect, why, and the choices you have. This policy is written to align with the principles of the EU/UK General Data Protection Regulation (GDPR) and applicable consumer-protection law.

2. Information we collect

We only collect what we need to run our shop and serve you well. This includes:

• Information you give us: your name, email address, delivery and billing address, phone number (if provided), and the contents of any message you send us through our contact form or by email.
• Order information: the products you buy, order value and history, and returns or exchanges. Note that payment card details are processed directly by our payment providers and are never stored on our servers.
• Account & preference information: items saved to your wishlist or bag (stored on your own device), sizing preferences, and marketing choices.
• Technical information collected automatically: IP address, browser type, device type, pages viewed, and referring website, gathered through cookies and similar technologies (see section 5).

3. How we use your information

We use your personal information to:

• Process, fulfil and deliver your orders, and handle returns, exchanges and refunds.
• Provide customer care and respond to your enquiries.
• Send you order confirmations, shipping updates and other service messages.
• Send you marketing emails where you have opted in, including offers, new arrivals and fit guides — you can unsubscribe at any time.
• Personalise your experience, remember your bag and wishlist, and recommend relevant products.
• Improve our website, products and service, and keep our shop secure and free from fraud.
• Comply with our legal and tax obligations.

4. Legal bases for processing

Where GDPR applies, we rely on the following legal bases: contract (to fulfil your order), consent (for marketing emails and non-essential cookies), legitimate interests (to improve and secure our service, in a way that does not override your rights), and legal obligation (for example, keeping records for tax).

5. Cookies & tracking

We use cookies and similar technologies to make the site work, remember your bag and preferences, and understand how the site is used. You can control non-essential cookies through our cookie banner and your browser settings. For full detail, please read our Cookie Policy.

6. Sharing your information

We never sell your personal information. We share it only with trusted partners who help us run our business, and only to the extent needed:

• Payment providers to process transactions securely.
• Shipping and logistics partners to deliver your order.
• Technology providers who host our website and email systems.
• Professional advisers and authorities where required by law.

All partners are bound by contract to protect your data and use it only for the purposes we specify.

7. Data retention

We keep your personal information only for as long as necessary: order and transaction records for as long as required by tax and accounting law (typically six to seven years), and marketing data until you unsubscribe or ask us to delete it. When data is no longer needed, we securely delete or anonymise it.

8. Your rights

Depending on where you live, you have the right to: access the personal data we hold about you; correct inaccurate data; delete your data ("right to be forgotten"); restrict or object to certain processing; data portability; and to withdraw consent at any time. To exercise any of these, email [email protected] and we will respond within one month. You also have the right to complain to your local data-protection authority.

9. How we protect your data

We use industry-standard measures including encryption in transit (HTTPS), access controls, and vetted, security-certified partners. No method of transmission is perfectly secure, but we take reasonable steps to protect your information and to notify you and the relevant authority in the unlikely event of a breach that affects your rights.

10. International transfers

Where your data is transferred outside your home country or the European Economic Area, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses, so your information remains protected to the same standard.

11. Children's privacy

Our website and products are intended for adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with data, please contact us and we will delete it.

12. Changes & contact

We may update this policy from time to time; the "last updated" date above reflects the latest version, and significant changes will be highlighted on this page. For any privacy question or request, contact our team at [email protected].