Privacy Policy

1. Data controller

The data controller is Tillila (the store operating on https://tillila.com/). For privacy questions, contact: tillila.contact@gmail.com.

If you operate through Shopify, Shopify may act as a data processor for the store (hosting and checkout tools).

2. Personal data we collect

• Order details: name, billing/shipping address, email, phone (if provided), items purchased.
• Payment info: payments are processed securely by payment providers; we do not store full card details.
• Account data (if you create one): login and order history.
• Customer support: messages and details you share when contacting us.
• Device/usage data: IP address, browser type, pages visited (via analytics/cookies when enabled).

3. Why we use your data

• To process and deliver your order (confirmation, shipping, returns).
• To communicate with you about your purchase and customer support requests.
• To prevent fraud and secure our website.
• To improve our store experience (performance, analytics) when cookies are accepted.
• To send marketing emails only if you consented (you can unsubscribe anytime).

4. Legal basis (GDPR)

• Contract: to fulfill your order and provide customer service.
• Legal obligation: accounting and compliance requirements.
• Legitimate interest: website security and fraud prevention.
• Consent: for marketing communications and certain cookies/analytics (where required).

5. Who we share data with

We share only what is necessary to operate the store and fulfill orders. Typical recipients include:

• Payment providers (to process payments securely).
• Shipping carriers (to deliver your order).
• Shop platform/hosting (e.g., Shopify) to run the store.
• Service providers for analytics, email sending, or support tools (only when needed).

We do not sell your personal data.

6. Cookies

Cookies help our website function and improve your experience. Some cookies are necessary for the website and checkout to work. Others (analytics/marketing) are optional and depend on your consent where required.

• Essential cookies: cart, checkout, security.
• Analytics cookies (optional): understand traffic and improve performance.
• Marketing cookies (optional): show relevant ads and measure campaigns.

You can manage cookie preferences using the cookie banner (when available) or your browser settings.

7. Data retention

• Order and invoicing data may be kept for the period required by law (accounting obligations).
• Support messages are kept only as long as needed to handle your request and follow-up.
• Marketing data is kept until you unsubscribe or withdraw consent.

8. Your rights

Under GDPR, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion (where applicable)
• Object to certain processing
• Withdraw consent at any time (for consent-based processing)
• Request data portability (where applicable)

To exercise your rights, contact us at tillila.contact@gmail.com.

9. Security

We use reasonable technical and organizational measures to protect your data. However, no online service can be guaranteed 100% secure.