Privacy Policy
Effective date
09.10.2025
Inquiries
Privacy Policy
This Privacy Policy describes how Gigi Montrose Moto Couture (“we”, “us”, or “our”) collects, uses, and protects your personal information when you visit or make a purchase from [www.gigimontrose.com] (the “Site”).
By using our Site, you consent to the collection and use of your information in accordance with this policy.
Information We Collect
We collect personal information to provide you with the best shopping experience possible. This includes:
A. Personal Information You Provide
When you make a purchase or attempt to make a purchase through the Site, we collect:
Contact details: name, billing address, shipping address, email address, and phone number.
Payment details: credit card numbers or other payment information (processed securely via Shopify and our payment partners; we do not store full card details).
Account information: if you create an account, we collect login credentials and preferences.
Communications: any messages or emails you send to
B. Automatically Collected Information
When you visit our Site, Shopify automatically collects:
Device information: including your web browser, IP address, time zone, and cookies.
Browsing behaviour: the individual pages or products viewed, referring websites, and how you interact with the Site.
This information is collected using cookies, log files, web beacons, tags, and pixels.
This information is collected using cookies, log files, web beacons, tags, and pixels.
2. How We Use Your Information (Legal Basis for UK/EU)
We use your personal information for the following purposes, based on the corresponding legal justification required by GDPR and UK data protection law:
Purpose of Use
Process and fulfil your orders, including shipping, returns, and confirmations.
Communicate with you about your order, products, or account.
Screen orders for potential fraud or security issues.
Provide customer support and respond to enquiries.
Send marketing communications (only if you've opted in).
Improve our products, services, and website experience (e.g., using analytics).
Legal Basis (GDPR/UK)
Contractual Necessity (To perform the sales contract with you.)
Contractual Necessity (Essential for fulfilling the terms of sale.)
Legitimate Interest (Protecting our business and customers from financial loss.)
Contractual Necessity (For order-related support) / Legitimate Interest (For general enquiries, improving service.)
Consent (You must have given clear, explicit permission.)
Legitimate Interest (Analyzing and enhancing our offerings and Site performance.)
3. Sharing Your Information and International Transfers
We share your information with trusted third parties to help us operate our business. We may also share your information to comply with applicable laws and regulations, respond to a lawful request, or protect our rights.
Service Providers: We share necessary data with:
Shopify, our e-commerce platform provider.
Framer, to host and provide the front-end user experience of the Site.
Payment processors: such as Shopify Payments, PayPal, or Klarna, to process transactions securely.
Shipping providers to deliver your orders.
Email Marketing: Mailchimp (or similar service) to manage and send marketing communications (based on your consent).
Analytics and marketing services: such as Google Analytics or Meta (Facebook/Instagram) Ads, to understand visitor behaviour and improve our marketing.
International Data Transfers (UK/EU)
Your personal data may be transferred to and stored in the United States and other countries outside of the European Economic Area (EEA) and the UK. When transferring data outside of these regions, we take steps to ensure that your data is protected by implementing appropriate safeguards, such as entering into Standard Contractual Clauses (SCCs) approved by the European Commission or the UK government with our third-party service providers.
4. Cookies
Cookies are small data files that are placed on your device. We use them to:
Keep your shopping cart active.
Remember your preferences and login details.
Analyse website traffic and improve performance.
You can manage or delete cookies through your browser settings. However, disabling cookies may affect your experience on our Site
5. Data Retention
We retain your personal information for as long as necessary to provide our services or comply with legal obligations.
We apply the following retention criteria (as required by CPRA):
Order information (Contact and Payment details) is generally retained for at least 6 years for accounting and tax purposes.
Account information is retained until you request account deletion.
Automatically Collected Information (Browsing behaviour) is retained for up to 26 months for analytical purposes, unless a shorter period is required by law.
If you wish for your information to be deleted sooner, please contact us (see Section 7).
6. Your Rights
A. UK and EU Data Rights (GDPR/UK Data Protection Act 2018)
Under GDPR and the UK Data Protection Act 2018, you have the right to:
Access the personal data we hold about you.
Request correction or deletion of your data.
Object to processing or request data portability.
Withdraw consent to marketing at any time.
If you are based in the EU or UK and believe your data has been misused, you can lodge a complaint with your local data protection authority.
B. California Consumer Rights (CCPA/CPRA)
If you are a California resident, you have the following additional rights regarding your Personal Information:
Right to Know: You have the right to request information about the categories and specific pieces of Personal Information we have collected, as well as the sources, purposes for collecting, and categories of third parties with whom we share the information.
Right to Opt-Out of Sale or Sharing: You have the right to direct us not to "sell" or "share" your personal information, where "sharing" means disclosing information for cross-context behavioural advertising.
We share data with third parties (e.g., Meta/Google) for advertising purposes, which may be considered a "sale" or "sharing" under CCPA/CPRA.
To exercise this right, please click the following link: [DO NOT SELL OR SHARE MY PERSONAL INFORMATION] or contact us using the details below.
Right to Limit Use of Sensitive Personal Information (SPI): You have the right to limit the use of Sensitive Personal Information. We do not generally collect or process SPI for purposes that would trigger this right.
Right to Deletion: You have the right to request the deletion of your personal information, subject to certain exceptions.
To exercise any of these rights, contact us at info@gigimontrose.com
7. Security and Third-Party Links
Security: We use Shopify's secure hosting and SSL encryption to protect your information. All payments are processed through PCI-DSS compliant gateways. While no online system is 100% secure, we take all reasonable precautions to safeguard your data.
Third-Party Links: Our Site may include links to other websites. We are not responsible for the privacy practices or content of these third-party sites.
8. Changes to This Policy
We may update this Privacy Policy occasionally to reflect changes to our practices or for operational, legal, or regulatory reasons. Updates will be posted on this page with a new "last updated" date.
9. Contact Us
For more information about our privacy practices, questions, or complaints, please contact us at:
Email: info@gigimontrose.com