Privacy Policy
Last updated: October 15, 2025
1. Introduction
Welcome to the storytime.lu online store! We take your privacy seriously and are committed to protecting your personal data. This Privacy Policy explains how Storytime (hereinafter referred to as "we", "us", or "our"), the owner of the storytime.lu website, collects, uses, discloses, and protects your information.
This policy applies when you visit our website, make purchases, subscribe to our newsletter, or otherwise interact with us.
The controller of your personal data is:
Storytime
Bakulina Olesia (Commerçant personne physique)
Registration number: A45673
Legal address: 79A Route du Vin, 6841 Machtum Luxembourg
Email: info@storytime.lu
2. What personal data we process
We may collect and process the following categories of data:
- Identification data: Name, surname.
- Contact data: Shipping address, email address, phone number.
- Order data: Purchase history, information about purchased goods, order details.
- Financial data: We do not store your full payment card details. Transactions are processed by our third-party payment providers. We may process information about transactions and the chosen payment method.
- Technical data: IP address, browser type and version, time zone settings, browser plug-in types and versions, operating system and platform.
- Usage data: Information about how you use our website, products, and services.
- Marketing and communication data: Your preferences in receiving marketing materials from us and your communication preferences.
3. Purposes and legal bases for data processing
We use your personal data for the following purposes and on the following legal bases:
| Purpose | Data type | Legal basis (GDPR) |
|---|---|---|
| Processing and delivering your orders. | Identification, Contact, Order data | Performance of a contract (Article 6(1)(b)) |
| Communicating with you on customer service matters. | Identification, Contact, Order data | Performance of a contract and our legitimate interests (Article 6(1)(b), 6(1)(f)) |
| Compliance with legal obligations (e.g., invoicing). | Identification, Contact, Financial | Compliance with a legal obligation (Article 6(1)(c)) |
| Improving our website, products, and services. | Technical, Usage data | Our legitimate interests (Article 6(1)(f)) |
| Sending marketing communications and newsletters. | Identification, Contact, Marketing | Your consent (Article 6(1)(a)) |
| Displaying personalized content and advertising. | Technical, Usage, Marketing | Your consent (Article 6(1)(a)) |
4. Use of Cookies
Our website uses cookies to improve your experience. Cookies are small text files that are stored on your device. We use them to ensure the site works, to analyze traffic, and to personalize content.
On your first visit to the site, we ask for your consent to use non-essential cookies through our cookie banner. You can manage your preferences at any time.
We use the following categories of cookies:
- Necessary: These cookies are essential for the proper functioning of the site (e.g., for the shopping cart and checkout process to work). They cannot be disabled.
- Preferences (Functional): These cookies allow the site to remember choices you have made (e.g., your language or region) to provide more personalized features.
- Statistics (Analytical): These cookies help us understand how visitors interact with the site by collecting and reporting information anonymously. We use them to analyze and improve our site.
- Marketing: These cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user.
5. Data transfer to third parties
We do not sell your personal data. However, we may transfer it to trusted third parties to ensure our operations:
- Payment service providers to process your payments.
- Delivery and logistics companies to deliver your orders.
- IT service and hosting providers who ensure the operation of our site.
- Analytical and marketing platforms based on your consent.
- Government authorities, if required by law.
We ensure that all third parties we work with comply with GDPR requirements. Data transfer outside the European Economic Area (EEA) is carried out only with adequate data protection guarantees.
6. Data retention period
We store your personal data for no longer than is necessary for the purposes for which it was collected.
- Order data is stored for the period required by accounting legislation (usually up to 10 years).
- Data collected based on your consent (e.g., for marketing) is stored until you withdraw your consent.
- Customer account data is stored until you delete your account.
7. Your rights
Under the GDPR, you have the following rights with respect to your personal data:
- Right of access: You can request a copy of the data we hold about you.
- Right to rectification: You can request the correction of inaccurate or incomplete data.
- Right to erasure (‘right to be forgotten’): You can request the deletion of your data if there is no longer a legal basis for storing it.
- Right to restriction of processing: You can request to restrict the processing of your data under certain circumstances.
- Right to data portability: You can request the transfer of your data to another controller in a structured, commonly used format.
- Right to object: You can object to the processing of your data if it is based on our legitimate interests.
- Right to withdraw consent: If processing is based on your consent, you can withdraw it at any time.
- Right to lodge a complaint: You have the right to lodge a complaint with the data protection supervisory authority in your country.
To exercise these rights, please contact us by email: info@storytime.lu
8. Data protection
We take all necessary technical and organizational measures to protect your personal data from accidental or unlawful loss, alteration, disclosure, or access. Access to your data is restricted to a limited number of authorized employees.
9. Changes to the privacy policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting a new version on this page. We recommend that you review this page regularly for the latest information.
10. Contact information
If you have any questions about this Privacy Policy or the processing of your data, please contact us:
Olesia Bakulina (Storytime)
Address: 79A Route du Vin, 6841 Machtum Luxembourg
Email: info@storytime.lu