Privacy Policy & Cookie Policy

Privacy Policy for Ballet Skirts By Lucinda
Last updated: 2 August 2026

This Privacy Policy explains how Ballet Skirts By Lucinda (“we”, “us”, “our”) collects, uses, stores, and protects your personal data in accordance with the UK GDPR, including the 2026 updates introduced by the Data (Use and Access) Act 2025 (DUAA).
We are committed to protecting your privacy and ensuring transparency in how your information is used.

1. Who We Are
Ballet Skirts By Lucinda

38 West Park Road, London, Surrey TW9 4DA

United Kingdom

Email: balletskirtsbylucinda@gmail.com 

Instagram: @balletskirts_by_lucinda

We operate as a small independent business selling handmade ballet skirts and accessories.

2. Personal Data We Collect
A. Information you provide directly

• Name

• Email address

• Phone number

• Postal address (for shipping)

• Order details

• Custom measurements for bespoke skirts

• Messages sent via email or contact forms

​

B. Automatically collected data

• Device information

• IP address

• Basic analytics (page views, clicks, browsing behaviour)

• Cookies (essential and non‑essential)

We do not collect or process special category data.

3. How We Use Your Data
We use your personal data to:

• Process and deliver orders

• Manage custom skirt orders

• Respond to enquiries

• Send updates or newsletters (only with your consent)

• Improve our website and customer experience

• Prevent fraud and maintain security

We do not sell personal data.

4. Lawful Bases for Processing (DUAA‑Aligned)
A. Contract
To fulfil your order or respond to enquiries.

B. Consent
For:

• Mailing list subscriptions

• Marketing emails

• Non‑essential cookies (analytics, marketing, functionality)

You may withdraw consent at any time.

C. Recognised Legitimate Interests (RLI)
Introduced under DUAA 2025, used for:

• Fraud prevention

• Website security

• Essential operational cookies

• Preventing misuse of our services

These purposes do not require a balancing test under DUAA.

5. Data Sharing
We may share your data with:

• Payment processors (e.g., PayPal)

• Delivery carriers

• Website hosting and analytics providers

• Third‑party apps installed on our Wix website

We do not sell or rent personal data.

International Transfers (DUAA Standard)
Some third‑party apps may process data outside the UK. All transfers meet the DUAA requirement of “not materially lower” protection than UK GDPR.

6. Data Retention
We retain:

• Order records: 6 years (legal requirement)

• Mailing list data: until you unsubscribe

• Enquiry emails: up to 24 months

• Cookie data: according to cookie type and browser settings

​

7. Your Rights Under UK GDPR (2026 Update)
You have the right to:

• Access your personal data

• Request correction or deletion

• Object to certain processing

• Withdraw consent

• Request data portability

• Understand any automated decision‑making (we do not use ADM involving special category data)

DSAR timing rule (DUAA update):

The one‑month response period begins after your identity is confirmed. We may “stop the clock” while awaiting clarification.

8. Cookies and Tracking Technologies
Our website is hosted on Wix, which automatically sets certain cookies to ensure the site functions securely and correctly. Additional cookies may be set by third‑party apps installed on our Wix site.

A. Essential Cookies (Strictly Necessary)
These cookies are required for the website to function and are permitted under Recognised Legitimate Interests (RLI).
Examples include:

• XSRF‑TOKEN

• hs

• svSession

• SSR‑caching

• _wixCIDX

• _wix_browser_sess

• consent‑policy

• bSession

• fedops.logger.sessionId

• TS* security cookies

These cookies support security, stability, fraud prevention, and core site operations.

B. Non‑Essential Cookies (Require Consent)
These cookies are only activated if you give consent through our cookie banner.
Examples include:

• Analytics cookies (e.g., Google Analytics)

• Marketing cookies (e.g., Meta Pixel, Google Ads)

• Functionality cookies (e.g., preference storage)

• A/B testing cookies

• Performance measurement cookies

You can withdraw consent at any time.

​

9. Third‑Party Apps and Integrations
Our website uses several third‑party apps and integrations to provide essential services such as payment processing, analytics, and marketing tools. These services may set non‑essential cookies, process personal data, or collect device information. All non‑essential cookies are blocked until you give consent through our cookie banner.
Some third‑party providers may process data outside the UK. All international transfers meet the DUAA requirement of “not materially lower” protection than UK GDPR.
Below is a list of the third‑party apps currently used on our website, including their purpose, cookie behaviour, and lawful bases.

App Name: Google Tag (Google Tag Manager)
Purpose: Manages and deploys marketing and analytics tags on the website. Allows us to control tracking tools such as Google Analytics and Meta Pixel without editing site code. Cookies support tag loading, debugging, and performance measurement.
Cookies set: This integration may set non‑essential cookies related to tag management, performance tracking, and debugging. These cookies are controlled by Google and are only activated after consent.
Lawful basis: Consent — Non‑essential cookies are blocked until accepted.
International transfers: Google may process data outside the UK. All transfers meet the DUAA requirement of “not materially lower” protection.
App Name: Facebook Pixel (Meta Pixel)
Purpose: Tracks visitor interactions for advertising performance, conversion measurement, and remarketing. Helps us understand how visitors engage with our site and supports advertising campaigns on Facebook and Instagram.
Cookies set: This integration may set non‑essential cookies such as advertising identifiers and interaction tracking cookies. These cookies are controlled by Meta and are only activated after consent.
Lawful basis: Consent — Non‑essential cookies are blocked until accepted.
International transfers: Meta may process data outside the UK. All transfers meet the DUAA requirement of “not materially lower” protection.
App Name: PayPal
Purpose: Processes secure customer payments during checkout. PayPal collects payment information, billing details, device data, and fraud‑prevention signals to complete transactions. Cookies support secure payment processing, fraud detection, and session management.
Cookies set: This integration may set cookies related to fraud prevention, secure checkout, and session tracking. These cookies are controlled by PayPal and may activate when a visitor interacts with the payment system.
Lawful basis: Contract — Payment processing is necessary to fulfil customer orders. Consent — Non‑essential cookies are blocked until accepted.
International transfers: PayPal may process data outside the UK. All transfers meet the DUAA requirement of “not materially lower” protection.
App Name: Stripe
Purpose: Provides secure card payment processing for online orders. Stripe collects payment details, billing information, device identifiers, and fraud‑prevention data. Cookies support secure checkout, fraud detection, and session continuity.
Cookies set: This integration may set cookies related to fraud prevention, device identification, and secure payment sessions. These cookies are controlled by Stripe and may activate during checkout.
Lawful basis: Contract — Payment processing is necessary to fulfil customer orders. Consent — Non‑essential cookies are blocked until accepted.
International transfers: Stripe may process data outside the UK. All transfers meet the DUAA requirement of “not materially lower” protection.
App Name: Google Analytics
Purpose: Collects anonymised visitor behaviour data to help us understand how users interact with the website. Supports performance measurement, page‑view tracking, and user‑journey analysis. Cookies store analytics identifiers and usage information.
Cookies set: This integration may set non‑essential analytics cookies such as session identifiers and usage tracking cookies. These cookies are controlled by Google and are only activated after consent.
Lawful basis: Consent — Non‑essential cookies are blocked until accepted.
International transfers: Google may process data outside the UK. All transfers meet the DUAA requirement of "not materially lower" protection.

10. Managing Cookies
You can manage your cookie preferences through:

• The cookie banner on our website

• Your browser settings

• Third‑party opt‑out tools

Blocking essential cookies may affect how the site functions.

11. Contact Us
For privacy questions or data requests, email: balletskirtsbylucinda@gmail.com

Cookie Policy for Ballet Skirts By Lucinda
Last updated: 2 August 2026
This Cookie Policy explains how Ballet Skirts By Lucinda uses cookies and similar technologies on our website hosted on the Wix platform. It also explains your choices under the UK GDPR and DUAA 2025.
 

1. What Are Cookies?
Cookies are small text files placed on your device when you visit a website. They help the site function properly, improve performance, and allow us to understand how visitors interact with our pages.
Cookies may be:

• Session cookies (deleted when you close your browser)

• Persistent cookies (remain until they expire or are deleted)

• First‑party cookies (set by Wix or us)

• Third‑party cookies (set by external services we use)

 

2. Cookies We Use
A. Strictly Necessary Cookies (Essential)
These cookies are required for the Wix website to operate and cannot be switched off. They do not store personally identifiable information.
Examples include:

• XSRF‑TOKEN

• hs

• svSession

• SSR‑caching

• _wixCIDX

• _wix_browser_sess

• consent‑policy

• bSession

• fedops.logger.sessionId

• TS* security cookies

Legal basis: Recognised Legitimate Interests (RLI)
 

B. Performance & Analytics Cookies (Optional)
If enabled, these cookies help us understand how visitors use our pages.
Examples include:

• Google Analytics cookies (_ga, _gid, _gat)

• Wix Analytics cookies

• A/B testing cookies

Legal basis: Consent

C. Functionality Cookies (Optional)
These cookies allow the site to remember your preferences.
Legal basis: Consent

D. Marketing & Advertising Cookies (Optional)
These cookies help us or Wix show relevant ads or promotions.
Examples include:

• Meta Pixel cookies (_fbp, _fbc)

• Google Ads cookies (_gcl_au)

• Microsoft Ads cookies (_uetsid, _uetvid)

Legal basis: Consent

3. Third‑Party Apps and Their Cookies
Our website may use third‑party apps that set additional cookies. These cookies are non‑essential and are blocked until you give consent through our cookie banner.

App Name: Google Tag (Google Tag Manager)

Purpose: Manages and deploys marketing and analytics tags on the website. Allows us to control tracking tools such as Google Analytics and Meta Pixel without editing site code. Cookies support tag loading, debugging, and performance measurement.

Cookies set: This integration may set non‑essential cookies related to tag management, performance tracking, and debugging. These cookies are controlled by Google and are only activated after consent.

Lawful basis: Consent — Non‑essential cookies are blocked until accepted.

International transfers: Google may process data outside the UK. All transfers meet the DUAA requirement of “not materially lower” protection.

App Name: Facebook Pixel (Meta Pixel)

Purpose: Tracks visitor interactions for advertising performance, conversion measurement, and remarketing. Helps us understand how visitors engage with our site and supports advertising campaigns on Facebook and Instagram.

Cookies set: This integration may set non‑essential cookies such as advertising identifiers and interaction tracking cookies. These cookies are controlled by Meta and are only activated after consent.

Lawful basis: Consent — Non‑essential cookies are blocked until accepted.

International transfers: Meta may process data outside the UK. All transfers meet the DUAA requirement of “not materially lower” protection.

App Name: PayPal

Purpose: Processes secure customer payments during checkout. PayPal collects payment information, billing details, device data, and fraud‑prevention signals to complete transactions. Cookies support secure payment processing, fraud detection, and session management.

Cookies set: This integration may set cookies related to fraud prevention, secure checkout, and session tracking. These cookies are controlled by PayPal and may activate when a visitor interacts with the payment system.

Lawful basis: Contract — Payment processing is necessary to fulfil customer orders. Consent — Non‑essential cookies are blocked until accepted.

International transfers: PayPal may process data outside the UK. All transfers meet the DUAA requirement of “not materially lower” protection.

App Name: Stripe

Purpose: Provides secure card payment processing for online orders. Stripe collects payment details, billing information, device identifiers, and fraud‑prevention data. Cookies support secure checkout, fraud detection, and session continuity.

Cookies set: This integration may set cookies related to fraud prevention, device identification, and secure payment sessions. These cookies are controlled by Stripe and may activate during checkout.

Lawful basis: Contract — Payment processing is necessary to fulfil customer orders. Consent — Non‑essential cookies are blocked until accepted.

International transfers: Stripe may process data outside the UK. All transfers meet the DUAA requirement of “not materially lower” protection.

App Name: Google Analytics

Purpose: Collects anonymised visitor behaviour data to help us understand how users interact with the website. Supports performance measurement, page‑view tracking, and user‑journey analysis. Cookies store analytics identifiers and usage information.

Cookies set: This integration may set non‑essential analytics cookies such as session identifiers and usage tracking cookies. These cookies are controlled by Google and are only activated after consent.

Lawful basis: Consent — Non‑essential cookies are blocked until accepted.

International transfers: Google may process data outside the UK. All transfers meet the DUAA requirement of "not materially lower" protection.

4. International Transfers (DUAA Standard)
Some third‑party apps may process data outside the UK. All transfers meet the DUAA requirement of “not materially lower” protection.

5. Managing Cookies
You can manage your cookie preferences through:

• The cookie banner on our website

• Your browser settings

• Third‑party opt‑out tools

Blocking essential cookies may affect how the site functions.

6. Contact Us
For cookie‑related questions, email: balletskirtsbylucinda@gmail.com