Privacy policy

Last Updated: 07/02/2026

1. Introduction

DISTELLE LLC ("DISTELLE," "we," "us," or "our") is the data controller of your personal information. DISTELLE LLC is incorporated in the State of Delaware, United States, with its registered office at 254 Chapman Rd, STE 208 #17288, Newark, Delaware 19702.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have in relation to it. Our Website and Services are strictly intended for individuals aged 18 and over.

For any privacy-related questions or requests, contact us at: support@distelle.net

Third-Party Websites: Our Website may contain links to websites operated by Partner boutiques, retailers, brands, or affiliates. This Privacy Policy does not apply to those websites. We recommend reviewing their privacy policies before submitting any personal information.

By continuing to use our Website or Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please discontinue use immediately.

2. Information Collection

We collect personal data about you in the following ways:

a) Information You Provide Directly When you place an order, create an account, fill out forms, subscribe to our newsletter, submit a review, or contact us, you may provide details such as your name, postal address, email address, phone number, date of birth, gender, and payment information. We do not store credit or debit card details — payment card data is processed directly by our payment providers.

If you refer someone to our Website, you are solely responsible for obtaining their consent before sharing their contact information with us.

b) Information From Third-Party Sources We may receive information about you from third-party sources, including social media platforms where you have made information publicly available, analytics and advertising partners, and fraud prevention services. We will only combine such information with data we already hold about you where we have a lawful basis to do so under applicable law, and we will handle it in accordance with this Privacy Policy.

c) Information Collected Automatically When you visit our Website, certain technical data is collected automatically through the Shopify platform, which processes this data on our behalf. This includes your IP address, browser type and version, device identifiers, operating system, pages visited, time spent on pages, and referring URLs. For details on how Shopify handles this data, please refer to Shopify's Privacy Policy at https://www.shopify.com/legal/privacy.

d) Sensitive Personal Data We do not intentionally collect sensitive categories of personal data, including information relating to health, race, religion, political opinions, or biometric data. Please do not submit such information through our Website or Services.

3. Purposes of information Usage

We collect and process your personal data only for the following purposes:

a) Providing Our Services and Processing Orders We use your information to operate the Website, facilitate transactions between you and our Partner boutiques and brands, process and manage your orders, coordinate delivery, and provide customer support. This processing is necessary for the performance of our contract with you.

b) Personalization and Recommendations We use your browsing behavior, purchase history, and preferences to offer personalized product recommendations and a tailored shopping experience. This processing is based on our legitimate interest in improving your experience on the platform.

c) Marketing and Promotional Communications We may use your information to send you promotional communications about our products and services and those of our Partner boutiques, subject to your marketing preferences. You may opt out at any time by contacting us at support@distelle.net or by using the unsubscribe link in any marketing email. This processing is based on your consent, or our legitimate interest where permitted by applicable law.

d) Fraud Prevention, Security, and Legal Compliance We use your information for identity verification, fraud detection, and to comply with our legal obligations. This processing is based on our legitimate interests in protecting the platform and our customers, and on our legal obligations under applicable law.

e) Analytics and Service Improvement We analyze usage data to understand how our platform is used, identify areas for improvement, and optimize our marketing. This processing is based on our legitimate interest in developing and improving our services.

f) Automated Decision-Making and Profiling Where we use automated processing — including profiling — that produces legal or similarly significant effects on you, we will only do so where: (i) it is necessary for the performance of a contract with you; (ii) it is authorized by applicable law; or (iii) you have given your explicit consent. In all such cases, you have the right to request human review of any automated decision, to express your point of view, and to contest the decision. To exercise this right, contact us at support@distelle.net.

g) Customer Feedback and Communications We collect and process information shared through reviews, surveys, and direct communications. This processing is based on your consent where required, or our legitimate interest in improving service quality.

4. Information Usage

We will only use your personal data as described in this Privacy Policy, or where you have provided specific consent for another purpose. Your information may be used in the following ways:

a) Service Delivery and Order Processing We use your personal data to respond to your inquiries, process your orders, coordinate with our Partner boutiques and brands, and deliver the services you have requested.

b) Communications We may use your personal data to send you service-related communications and, where you have consented, promotional communications. We will not share your personal data with third parties for them to contact you directly, except as described in this Privacy Policy or with your explicit consent.

c) Third-Party Service Providers We share your personal data with carefully selected third-party service providers who assist us in operating our platform and delivering our services. These include Elastic Email for transactional and marketing emails, Shopify for platform hosting and order management, and other providers for payment processing, logistics, and analytics. All third-party providers act as data processors on our behalf and are contractually required to handle your data securely and in accordance with applicable law.

d) Legal Disclosures We may disclose your personal data where required by law, legal process, or regulatory authority, or where necessary to investigate suspected fraud or violations of our Terms and Conditions.

e) Business Transfers In the event of a sale, merger, acquisition, or change of control of DISTELLE, your personal data may be transferred to the relevant successor entity. You will be notified of any such transfer in accordance with applicable law.

f) Affiliates We may share your personal data with affiliates within the DISTELLE corporate family, provided their privacy practices are substantially equivalent to ours.

g) Aggregate and Anonymized Data We may combine your information with that of other users to create anonymized datasets for analytical and business purposes. Such data will not identify you individually and may be shared with third parties in accordance with applicable law.

5. Disclosure of Information

We only share your personal data with third parties in the circumstances described below. In all cases, we require that third parties handle your data securely and in accordance with applicable law.

a) Partner Boutiques and Brands When you place an order, we share your name, contact information, and purchase details with the relevant Partner solely for the purpose of fulfilling your order and coordinating delivery. We will only share your information with Partners for their own marketing purposes where you have given your explicit consent to this.

b) Third-Party Service Providers We work with carefully selected third-party providers to operate our platform and deliver our services. These include courier companies, payment processors, fraud prevention providers, analytics providers, marketing tool providers, and review management services. All providers are contractually bound to process your data only for the purposes we specify and in accordance with applicable law.

c) Advertising and Social Media Partners We may share your information with advertising and social media partners to serve relevant advertisements about our products and those of our Partners. We will not share your mobile phone number with any third party for marketing or promotional purposes.

d) Legal Requests We may disclose your personal data to regulators, law enforcement agencies, or other authorities where required by law or legal process. We will only disclose the minimum information necessary to comply with such requests and, where legally permitted, will notify you before doing so.

e) Business Transfers In the event of a sale, merger, acquisition, or change of control of DISTELLE, your personal data may be transferred to the relevant successor entity as part of that transaction. You will be notified of any such transfer in accordance with applicable law.

6. Cookies and Similar Technologies

Our Website uses cookies and similar tracking technologies to store your preferences, analyze usage, and deliver relevant advertising. Cookies are small data files placed on your device when you visit a website.

a) How We Use Cookies We and our third-party service providers use cookies, web beacons, pixel tags, and similar technologies to customize your experience, analyze platform usage, and serve relevant advertising. Our advertising and analytics partners may also place cookies on your device when you use our Website.

b) Types of Cookies We Use

Strictly Necessary Cookies: Essential for the Website to function, including maintaining your shopping basket and protecting against fraud. These cannot be disabled as they are required for the platform to operate.
Performance Cookies: Collect anonymous data about how visitors use our Website to help us improve navigation and the shopping experience. You may enable or disable these in your browser settings.
Functionality Cookies: Store your preferences such as language and search parameters to enhance your experience. Data collected is anonymized and cannot be used to track your activity on other websites. You may enable or disable these in your browser settings.
Targeting and Advertising Cookies: Gather information about your browsing habits to deliver more relevant advertising and control the frequency of ads shown to you. This data may be shared with third-party advertising partners. You may opt out of these cookies via your browser settings or our cookie management tool.

c) Cookie Consent Where required by applicable law, including the EU ePrivacy Directive and GDPR, we will request your consent before placing non-essential cookies on your device. You may withdraw your consent at any time by adjusting your preferences via the cookie management tool available on our Website.

d) Managing Cookies You may withdraw your consent at any time by adjusting your browser settings as described in Section 6d. Please note that disabling certain cookies may affect the functionality of our Website. We do not use cookies to automatically retrieve your personal data without your knowledge.

7. Analytics and Conversion Tracking

We use analytics services to understand how visitors interact with our Website and to improve our services and marketing effectiveness.

a) Information Collected Analytics services use cookies, JavaScript, and similar technologies to collect information about your use of our Website, including a truncated or anonymized version of your IP address, operating system, browser type, pages visited, and referring URLs. This information is used to compile reports on Website activity and usage trends and does not identify you individually.

b) Google Analytics We use Google Analytics, provided by Google LLC. Google Analytics collects usage data anonymously and reports website trends without identifying individual visitors. For more information on how Google uses your data, please refer to Google's Privacy Policy at https://policies.google.com/privacy. To opt out of Google Analytics tracking across all websites, please visit https://tools.google.com/dlpage/gaoptout.

c) Conversion Tracking We use Google conversion tracking and similar tools to measure how users interact with our marketing campaigns and to assess their effectiveness. This helps us allocate our marketing budget responsibly and show you more relevant advertising.

d) International Data Transfers Analytics data may be transferred to and stored on servers located in the United States. Where required by applicable law, we ensure that appropriate safeguards are in place for such transfers, including where relevant the use of Standard Contractual Clauses approved by the European Commission.

8. Automatically Collected information

When you access our Website or open one of our HTML emails, certain information is automatically recorded through the Shopify platform and other tracking technologies. This may include:

Your IP address, which may constitute personal data depending on the laws of your country of residence
Device type and identifiers
Browser type, version, and language
Operating system and platform
Referring and exit pages
Pages accessed, number of clicks, and time spent on pages
Dates and times of visits
Email interaction data, such as open rates and click-through rates

This information is collected for system administration, security monitoring, and to compile statistical reports on user behavior. It does not identify you individually unless combined with other information we hold about you. Where your IP address constitutes personal data under applicable law, it will be handled in accordance with this Privacy Policy and applicable data protection legislation.

9. Security

The security of your personal data is important to us. We have implemented reasonable physical, electronic, and organizational measures to protect your data from unauthorized access, loss, misuse, alteration, or destruction.

a) Access Controls Access to your personal data is restricted to employees, contractors, and third-party service providers who require it to perform their duties and who are bound by confidentiality obligations. We regularly review who has access to your data and on what basis.

b) Platform Security Our Website is hosted and operated by Shopify Inc., which maintains its own robust security infrastructure. For details on Shopify's security practices, please refer to Shopify's Privacy Policy at https://www.shopify.com/legal/privacy.

c) Limitations Due to the inherent nature of the internet, we cannot guarantee that your personal data will be entirely free from unauthorized access by third parties. Your use of our Website constitutes your acknowledgment of this risk. We encourage you to use strong passwords, keep your devices secure, and notify us immediately at support@distelle.net if you suspect any unauthorized access to your account.

d) Data Breach Notification In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authorities within 72 hours of becoming aware of the breach, where required by applicable law including GDPR. Where the breach is likely to result in a high risk to you personally, we will notify you directly without undue delay.

e) Data Minimization We collect only the personal data that is necessary for the purposes described in this Privacy Policy. We do not retain data in a form that identifies you for longer than is necessary for those purposes.

f) Further Information For more information on protecting your personal data online, please refer to the relevant authority for your country of residence. A full list of national data protection authorities is provided at the end of this Privacy Policy.

10. Social Media and Public Disclosures

a) Public Information Any personal data you voluntarily share in publicly accessible spaces — including social media platforms, public forums, surveys, or review sections on our Website — may be viewed and used by others without restriction. We are unable to control how third parties use information you choose to make publicly available. By using our Service you acknowledge and assume this risk.

b) Social Media Integration Our Website may include links, buttons, or widgets connecting to third-party social media platforms such as Facebook, Instagram, X (formerly Twitter), and others. If you interact with these features, certain information — such as your username, the fact that your interaction originated from our Website, and relevant usage data — may be shared with the relevant platform. Once shared, your information will be subject to that platform's own privacy policy and this Privacy Policy will no longer apply to that data.

c) Disclaimer DISTELLE is not responsible for the privacy practices of any third-party social media platform. We strongly recommend reviewing the privacy policy of any third-party platform before interacting with it through our Website.

11. Protection of Minors

Our Website and Services are strictly intended for individuals aged 18 and over, consistent with our Terms and Conditions. We do not knowingly collect, use, or store personal data from any person under the age of 18, regardless of their country of residence.

a) Underage Access If we become aware that personal data has been collected from an individual under the age of 18, we will take immediate steps to delete such information from our records and terminate that individual's access to our platform. This applies globally and without exception.

b) Applicable Law Our minimum age requirement of 18 meets or exceeds the thresholds set by applicable child protection legislation in all jurisdictions in which we operate, including the Children's Online Privacy Protection Act ("COPPA") in the United States and Article 8 of the General Data Protection Regulation ("GDPR") in the European Union.

c) Reporting Concerns If you are a parent or guardian and believe that an individual under the age of 18 has accessed our platform or provided personal data to us, please contact us immediately at support@distelle.net. We will investigate and take all reasonable steps to delete the relevant data and restrict access promptly.

12. Changes to this Privacy Policy

We reserve the right to modify, update, or amend this Privacy Policy at any time. Any changes will be posted on this page with an updated "Last Updated" date at the top.

a) Material Changes Where we plan to make material changes to this Privacy Policy — including changes to how we use your personal data, the types of data we collect, or the third parties with whom we share your data — we will provide you with at least 30 days' prior notice by posting a prominent notice on our Website and, where required by applicable law, by notifying you directly via email at the address associated with your account.

b) Your Acceptance Your continued use of our Website and Services following the posting of any changes constitutes your acknowledgment of those changes. If you do not agree with any changes, you should discontinue use of our Website and Services and may exercise your rights as outlined in the Your Rights section of this Privacy Policy.

c) Archived Versions Previous versions of this Privacy Policy are available upon request by contacting us at support@distelle.net.

13. Opt-Out Process

a) Marketing Communications You may opt out of receiving marketing communications from us at any time by:

Clicking the "unsubscribe" link at the bottom of any marketing email you receive from us; or
Contacting us directly at support@distelle.net

We will process your opt-out request within 10 business days of receipt. Please note that even after opting out of marketing communications, you will continue to receive essential transactional communications related to your orders, returns, and updates to our Terms and Conditions or Privacy Policy.

b) Third-Party Marketing Where your personal data has previously been shared with third parties in accordance with this Privacy Policy or your consent, we are not responsible for removing your data from their marketing lists. You should contact such third parties directly to exercise your opt-out rights with them.

c) Updating Your Personal Data If you would like to update or correct any personal data we hold about you, please contact us at support@distelle.net. We will verify your identity and process your request within 30 days of receipt, consistent with our obligations under applicable data protection law.

d) Broader Data Rights For a full overview of your rights regarding your personal data, including the right to erasure, restriction of processing, and data portability, please refer to the Your Rights section of this Privacy Policy.

14. Communications with DISTELLE

a) General Communications We will only contact you through the channels you provide where you have actively opted in to receive such communications, or where we have another lawful basis to do so under applicable law. We will not use your contact details for marketing purposes without your explicit consent. We may use these channels to send information you have requested, or to inform you about products or services we offer. We will not share your contact information with third parties for them to market their products or services directly to you without your consent, except as described in this Privacy Policy.

b) SMS and Phone Communications By providing your phone number, you consent to receiving calls and text messages from us. We will not share your phone number with third parties for marketing purposes without your explicit consent. Please note that your wireless carrier may charge you for data, text, or call usage, and standard message and data rates may apply. You are solely responsible for any such charges.

15. No Rights of Third Parties

This Privacy Policy does not create rights enforceable by third parties, nor does it require disclosure of any personal information relating to users of the Service.

16. Site Terms of Use

Use of this Website and Services is governed by our Terms and Conditions, which are incorporated into this Privacy Policy by reference. Your use of, or access to, the Website and Services constitutes your agreement to be bound by those Terms and Conditions.

IF YOU DO NOT AGREE TO OUR TERMS AND CONDITIONS OR THIS PRIVACY POLICY, YOU MAY NOT ACCESS OR USE THE WEBSITE OR SERVICES

17. Servers

Our Website is hosted and operated by Shopify Inc. As a result, your personal data is stored and processed on Shopify's servers, which are maintained in the United States. You understand that data stored in the United States may be subject to lawful requests by courts or law enforcement authorities in the United States.

For details on Shopify's server infrastructure and data storage practices, please refer to Shopify's Privacy Policy at https://www.shopify.com/legal/privacy.

18. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. Specifically:

Account data is retained for as long as your account remains active
Order and transaction data is retained for a minimum of 7 years to comply with applicable tax and accounting obligations
Marketing data is retained until you opt out or withdraw your consent, after which it is deleted within 30 days
Fraud prevention data may be retained for up to 5 years where necessary to protect against fraudulent activity

Following the expiry of the applicable retention period, your data will be securely deleted or anonymized. Where anonymized, it may be retained indefinitely for analytical purposes as it will no longer identify you.

If you wish to request early deletion of your data, please refer to section 20 of this Privacy Policy.

19. Governing Law

This Privacy Policy and our data protection obligations are subject to the laws of the State of Delaware, United States. You consent to the exclusive jurisdiction of the state and federal courts located in New Castle County, Delaware, in all disputes arising out of or relating to this Privacy Policy.

Notwithstanding the above, nothing in this clause limits or excludes any rights you may have under the laws of your country of residence, including the GDPR, UK GDPR, or other applicable data protection legislation, which apply regardless of this choice-of-law clause.

20. Your Rights

Depending on your country of residence, you may have the following rights regarding your personal data. To exercise any of these rights, please contact us at support@distelle.net. We will verify your identity and respond within 30 days of receipt. We will never discriminate against you for exercising any of these rights.

a) Right of Access You have the right to request confirmation of whether we hold personal data about you, and to obtain a copy of that data. We will provide one copy free of charge; additional copies may be subject to a reasonable fee.

b) Right to Rectification You have the right to request correction of any inaccurate or incomplete personal data we hold about you.

c) Right to Erasure You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent, or where you believe it has been unlawfully processed.

d) Right to Restriction of Processing You have the right to request that we restrict the processing of your personal data where you believe it is inaccurate, unlawfully processed, or where you require it to be retained for legal reasons.

e) Right to Data Portability You have the right to receive a copy of the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to request that we transmit it directly to another controller where technically feasible.

f) Right to Object You have the right to object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on our legitimate interests, in which case we will review your request and may suspend processing while we assess it.

g) Right to Withdraw Consent Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

h) Right Against Automated Decision-Making You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects on you. Where such processing occurs, you may request human review by contacting us at support@distelle.net.

i) California Residents — CCPA/CPRA Rights If you are a California resident, you have additional rights under the California Consumer Privacy Act and California Privacy Rights Act, including the right to know what personal information is collected, sold, or shared, the right to delete your personal information, the right to correct inaccurate personal information, the right to opt out of the sale or sharing of your personal information, and the right to limit the use of sensitive personal information. To exercise these rights, please contact us at support@distelle.net.

j) Do Not Sell or Share My Personal Information We do not sell your personal information. However, certain sharing of your data with advertising partners may constitute "sharing" under the CPRA. California residents may opt out of such sharing at any time by contacting us at support@distelle.net.

21. Your Rights By Region

While Section 20 outlines your rights in general, the specific rights available to you and how they are enforced may vary depending on your country of residence. Below is a summary of the key regional frameworks that apply to our users.

a) European Union and European Economic Area — GDPR If you are located in the EU or EEA, your rights are governed by the General Data Protection Regulation (GDPR). You have all the rights listed in Section 20 above. You also have the right to lodge a complaint with your local data protection authority. A full list of EU data protection authorities is available at www.edpb.europa.eu.

b) United Kingdom — UK GDPR If you are located in the United Kingdom, your rights are governed by the UK GDPR and the Data Protection Act 2018. You have all the rights listed in Section 20 above. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.

c) United States — Federal and State Laws If you are located in the United States, your rights vary by state. California residents have specific rights under the CCPA and CPRA as outlined in Section 20i and 20j. Other states including Virginia, Colorado, Connecticut, and Texas have enacted similar privacy laws. To exercise any of your rights under applicable US state law, please contact us at support@distelle.net.

d) Canada — PIPEDA If you are located in Canada, your rights are governed by the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to access, correct, and request deletion of your personal data. To lodge a complaint, please contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.

e) Other Jurisdictions If you are located in another country, you may have rights under your local data protection laws. For a full list of national data protection authorities, please refer to the Appendix at the end of this Privacy Policy.

22. Appendix: Data Protection Authorities and Advertising tools

If you wish to lodge a complaint about how we handle your personal data, you may contact the relevant data protection authority for your country of residence:

North America