Privacy policy
Draft privacy notice for the leame shop, covering checkout, device storage and visitor analytics.
Draft — pending seller approval. Bracketed items must be completed before launch.
Who is responsible
This notice is prepared for leame, Calle Altamirano 33, 28008 Madrid, Spain. Privacy contact: leamebeautyzone@gmail.com. [The legal identity of the data controller and NIF/CIF must be supplied and approved before launch.]
Checkout and order information
Checkout asks for your name, email address, optional phone number and optional order notes. The shop uses order items, totals, payment status and Stripe payment references to process and check orders. These records are handled through the shop’s Lovable Cloud service. Avoid including sensitive personal information in order notes. [The controller must approve the purposes, legal bases, recipients and retention periods for these records.]
Stripe payments
Payment takes place on Stripe’s hosted checkout. The shop sends Stripe the customer email, purchase items and order references needed for checkout. Stripe receives the payment details entered on its page and returns payment status and references to the shop. Stripe’s privacy policy explains its processing: https://stripe.com/privacy. [The controller must confirm the applicable Stripe entity, role and any international-transfer information.]
Storage in your browser
The shop saves cart items in localStorage under bf-campaign-cart-v1 so the cart can survive a page reload. It also saves payment-event markers to avoid reporting the same payment outcome repeatedly. These entries remain until removed by the shop or by clearing browser storage; they have no configured automatic expiry. This storage is separate from Lovable’s visitor analytics.
Visitor analytics
On the published site, page visits, clicks and the shop’s payment-start, purchase-confirmed and failed-transaction events are recorded for every visitor; there is currently no consent banner connected to analytics. Page visits, time on page, page speed and errors are recorded without cookies and without identifying anyone. Lovable’s analytics uses no cookies, stores nothing on the visitor’s device, does not keep IP addresses and does not identify visitors. It records pages visited, where visitors came from, country, browser, operating system, device type, time spent, page-load speed, errors and clicks. Shop payment events include currency and purchase amount. Detailed data is kept for 90 days and daily summaries for a year.
Lovable collects this data for us. Lovable’s privacy policy explains how it handles it.
Other services
The pages load fonts from Google Fonts, which receives network requests needed to provide the fonts. Instagram opens only when you follow the external link; there is no embedded Instagram feed. The public shop offers guest checkout rather than customer account registration. [The controller must approve the complete provider, legal-basis and international-transfer disclosures before launch.]
Privacy requests and unresolved terms
Send privacy questions to leamebeautyzone@gmail.com. [The controller must supply the applicable access, correction, erasure, restriction, objection and portability procedures, the relevant supervisory-authority information, and retention and transfer terms. This draft is not a statement of legal compliance.]