– Josephine & Lucy

Last updated: October 7, 2026

This Privacy Policy explains how Josephine & Lucy, a store operated by SWJ ecom, collects, uses and protects your personal information when you visit josephineandlucy.com or place an order with us.

Information we collect

Information you give us. When you place an order or contact us, we collect your name, email address, shipping and billing address, your phone number if you enter one at checkout, and the details of your order. Card details are entered directly with our payment provider and are never stored by us.

Information collected automatically. When you visit our website, we collect device and browsing information such as your IP address, browser type, operating system and the pages you view. This happens through cookies and similar technologies, as described in our Cookie Policy.

How we use your information

To process, ship and deliver your order, including order confirmations and tracking updates
To answer your questions and provide customer service
To handle returns and refunds
To detect and prevent fraud
To improve our website and our service
To send you marketing emails, only if you have signed up for them
To meet our legal, tax and accounting obligations

Legal bases

We process your information to perform our agreement with you (handling and delivering your order), based on your consent (marketing emails and non-essential cookies), for our legitimate interests (fraud prevention and improving our store), and to comply with legal obligations (accounting and tax records).

Who we share your information with

Shopify, which hosts our store and checkout
Shopify Payments, which processes your payment
Fulfillment and shipping partners, to pack and deliver your order
Google and Microsoft Clarity, for advertising and website analytics, where you have consented to those cookies
Email and customer service tools, to send order emails and answer your messages

We do not sell your personal information. We may share information when required by law, or to protect our rights and the safety of others.

International transfers

Josephine & Lucy is operated by SWJ ecom, a company registered in the Netherlands, and some of our service providers are located outside your country. When personal information is transferred internationally, we rely on appropriate safeguards, such as the European Commission's standard contractual clauses.

How long we keep your information

We keep order and payment records for as long as required by tax and accounting law. Customer service messages are kept for as long as needed to handle your request and for a reasonable period afterwards. Marketing data is kept until you unsubscribe.

Your rights

You can ask us to access, correct or delete the personal information we hold about you, to restrict or object to its use, to receive a copy in a portable format, and to withdraw your consent at any time. To use any of these rights, email us at support@josephineandlucy.com. We respond within 30 days.

Depending on where you live, you may also have the right to opt out of the sharing of your personal information for targeted advertising. You can do this on our Your Privacy Choices page.

Marketing emails

We only send marketing emails to people who have signed up for them. Every marketing email contains an unsubscribe link, and you can also ask us by email to remove you. Unsubscribing does not affect emails about orders you have placed.

Security

We use appropriate technical and organizational measures to protect your personal information, including encrypted connections and limited access to order data. No method of transmission over the internet is completely secure, but we take reasonable steps to protect your information against loss, misuse and unauthorized access.

Children

Our website is not intended for children under 16, and we do not knowingly collect information from children. If you believe a child has given us personal information, please contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy when our practices or the law change. The updated version is published on this page with a new date.

Contact and complaints

Questions about this policy or about your personal information? Email us at support@josephineandlucy.com. We respond within 24 hours on business days. If you believe we have not handled your information properly, you also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).