Privacy Policy

Netta BenShabu Elite Couture ("Netta BenShabu," "we," "our," or "us") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect when you visit nettabenshabu.com (the "Site"), how we use and protect it, and the rights and choices available to you.

This policy applies to all visitors to the Site, including residents of the United States (including California), the European Union, the United Kingdom, and all other jurisdictions. By using the Site, you acknowledge that you have read and understood this Privacy Policy.

Who We Are

Netta BenShabu Elite Couture is an American bridal haute couture fashion house based in the State of California, United States. For the purposes of applicable data protection laws, we are the data controller of personal information collected through this Site.

info@nettabenshabu.com

Information We Collect

We collect only the information reasonably necessary to respond to your inquiries, fulfill your requests, and improve your experience on the Site.

Information You Provide Directly

• Contact form submissions. When you reach out through our contact form, we collect your name, email address, phone number (if provided), and the message content you choose to share.
• Trunk show registrations. When you register for a trunk show, we collect your name, email address, phone number, preferred event or city, and wedding date (which you may provide optionally).
• Retailer inquiries. If you submit a "Become a Retailer" inquiry, we collect your name, business name, email address, phone number, and any details about your boutique that you choose to share.
• Boutique appointment requests. When you request an appointment through our boutique partners, we collect your name, email, phone number, country, wedding date, price point, style interests, and any additional notes you provide.
• Shop orders. When you buy a piece from our Prêt-à-Porter shop, you are taken to a checkout hosted by Shopify. Shopify collects your name, email address, billing and shipping address, phone number, and payment details, and shares the order information — including your name and delivery address — with us so that we can make and send your piece. Your full card number is handled by Shopify and its payment processors and is never sent to us or stored on this Site.

Information Collected Automatically

• Usage and analytics data. Like most websites, we collect anonymized data about how the Site is used, including pages visited, time spent on the Site, device and browser type, operating system, approximate geographic region (country or city level), and performance metrics. This data is collected through Vercel Analytics and Vercel Speed Insights and does not personally identify you.
• Cookies and local storage.This site sets no cookies of its own. Your shopping bag is held in your browser’s local storage so it survives a reload; it stays on your device and is never transmitted to us. Analytics are collected without cookies via Vercel Analytics. Our checkout is hosted by Shopify on a separate domain, which does set its own cookies — see the Cookies section below.

Information We Do Not Collect

We do not collect or store card numbers or other payment credentials ourselves — shop payments are taken by Shopify at its hosted checkout, and we receive only the order record and the details needed to fulfil it. We do not collect government ID numbers or other sensitive identification data. Bridal gowns are not sold through the Site; to commission one, please contact us or an authorized boutique.

How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiries, questions, and appointment requests;
• To confirm trunk show registrations and communicate about upcoming events;
• To evaluate retailer partnership inquiries;
• To take, produce, ship, and support shop orders, and to communicate with you about them (order confirmations, production status, delivery and any after-sales enquiry);
• To improve the design, content, accessibility, and performance of the Site;
• To protect the security and integrity of the Site;
• To comply with applicable legal obligations and enforce our Terms of Service;
• To protect the rights, property, or safety of Netta BenShabu, our clients, or others.

We do not sell, rent, or trade your personal information to any third party. We do not use your personal information for targeted advertising or behavioral profiling.

Legal Basis for Processing (GDPR — EU/UK Visitors)

If you are located in the European Union or United Kingdom, we process your personal information on the following legal bases under the General Data Protection Regulation (GDPR) and UK GDPR:

• Legitimate interests — We process usage analytics and operate our contact forms based on our legitimate interest in understanding how our Site is used and responding to visitor inquiries, provided such interests are not overridden by your rights.
• Performance of a contract — When you place an order in the shop, processing your name, contact details, delivery address and order details is necessary to perform the contract of sale with you, and to meet the record-keeping obligations that follow from it.
• Performance of a pre-contractual relationship — When you register for a trunk show or submit a retailer inquiry, processing your information is necessary to take steps at your request prior to any appointment or business engagement.
• Consent — Where we rely on your consent, you have the right to withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.
• Legal obligation — We may process information where required to comply with applicable law.

Service Providers

We rely on a small number of trusted third-party service providers to operate the Site. These providers act as data processors and process your information only on our behalf, only for the purposes described in this policy, and subject to appropriate contractual protections:

• Formspree — Handles delivery of contact form and registration submissions to our team's inbox. Formspree processes data in accordance with their privacy policy.
• Vercel — Hosts the Site and provides anonymized analytics and performance metrics. Vercel processes data in accordance with their privacy policy.
• Sanity — Manages editorial content, including collection imagery and trunk show listings. Sanity does not receive personal information about Site visitors.
• Shopify — Provides the shop's hosted checkout and order management, and processes payments through its payment providers. If you place an order, Shopify collects and processes your name, contact details, billing and shipping address, and payment information. Shopify processes data in accordance with its privacy policy.
• DHL Express — Carries shop orders. We pass DHL the recipient name, delivery address, and contact details needed to deliver your parcel and, where applicable, to clear it through customs. DHL acts as an independent controller for that carriage and handles data in accordance with its own privacy notice.

We do not authorize our service providers to use your information for their own independent marketing or advertising purposes.

Other Disclosures of Your Information

In addition to sharing with service providers described above, we may disclose your personal information in the following limited circumstances:

Legal Requirements and Law Enforcement. We may disclose your information if required to do so by law, regulation, court order, or government authority, or if we believe in good faith that such disclosure is necessary to: (a) comply with applicable legal obligations; (b) protect and defend the rights or property of Netta BenShabu; (c) prevent or investigate possible wrongdoing in connection with the Site; (d) protect the personal safety of users of the Site or the public; or (e) protect against legal liability.

Business Transfers. If Netta BenShabu Elite Couture undergoes a merger, acquisition, reorganization, sale of all or substantially all of its assets, or bankruptcy or insolvency proceeding, your personal information may be transferred as part of that transaction. We will make reasonable efforts to notify you before your personal information becomes subject to a materially different privacy policy.

Fraud Prevention. We may share information with fraud detection agencies and similar partners for the purpose of securing transactions and protecting against fraud, unauthorized activity, or other illegal conduct.

Cookies

On this site.We set no cookies of our own. The only thing we store on your device is your shopping bag, kept in your browser’s local storage so that it survives a page reload. It is strictly necessary to provide the bag you asked for, it never leaves your device, and clearing your browser data removes it. We use no advertising, retargeting, or third-party profiling technologies on this site.

For analytics, we use Vercel Analytics and Vercel Speed Insights, cookieless, privacy-preserving services that measure aggregated usage without placing cookies on your device or storing any personally identifiable information.

At checkout. When you place an order you are taken to a checkout hosted by Shopify on a separate domain (maisondenetta.com). That domain sets its own cookies: essential ones needed to hold your cart, keep you signed in to the checkout and process your order, and analytics and marketing cookies Shopify uses to measure and attribute orders. Where consent is required for the non-essential ones — including for visitors in the European Economic Area and the United Kingdom — Shopify’s consent banner is shown at checkout so you can accept or decline them before they are set, and you can change your choice there at any time.

You may also manage or disable cookies through your browser settings at any time. Blocking the essential checkout cookies will prevent an order from completing.

International Data Transfers

The Site is operated from the United States. If you are visiting from the European Union, United Kingdom, or another jurisdiction with data protection laws that differ from U.S. law, please be aware that your information will be transferred to and processed in the United States.

For transfers of personal data from the EU or UK to the United States, we rely on appropriate safeguards as required by applicable law, including Standard Contractual Clauses where applicable.

Shop orders are made and dispatched from our atelier in Israel, so order details — including the recipient name and delivery address — are transferred there, and to the carrier in the destination country. Israel is recognised by the European Commission as providing an adequate level of data protection. Our checkout and order records are held by Shopify, which processes data in the United States and Canada under the safeguards described in its privacy policy.

Direct Marketing Communications

If you register for a trunk show or submit an inquiry through the Site, we may from time to time send you communications about upcoming collections, trunk shows, and brand news that we believe may be of interest to you. These communications are based on our legitimate interest in keeping you informed about events relevant to your inquiry.

You have the right to opt out of marketing communications at any time by contacting us at info@nettabenshabu.com with the subject line "Unsubscribe," or by following the unsubscribe instructions included in any marketing email. Opting out will not affect our ability to contact you regarding a specific inquiry or registration you have submitted.

Automated Decision-Making

We do not use automated decision-making processes, including profiling, that produce legal effects or that otherwise significantly affect you, as contemplated by Article 22 of the GDPR. Our Site does not use algorithms or automated systems to make decisions about you based on your personal data.

Data Retention

We retain personal information only for as long as is reasonably necessary for the purposes described in this policy:

• Contact and inquiry submissions — retained for up to 24 months from the date of your last communication with us, unless a longer retention period is required by law.
• Trunk show registrations — retained for up to 12 months following the event date.
• Retailer inquiries — retained for up to 36 months to support ongoing business relationship evaluation.
• Shop orders — order, invoice, and delivery records are retained for as long as required by applicable tax and commercial-record law (generally seven years from the end of the relevant financial year), and thereafter deleted.
• Anonymized analytics data — retained according to the policies of Vercel (currently up to 90 days for Vercel Analytics).

We will delete or anonymize personal information when it is no longer necessary, or upon your verified request.

Your Privacy Rights

All Visitors

Regardless of where you are located, you may contact us at any time to:

• Request access to the personal information we hold about you;
• Request correction of inaccurate information;
• Request deletion of your information, subject to applicable legal requirements;
• Withdraw consent where processing is based on consent.

California Residents — Your Rights Under CCPA/CPRA

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

Right to Know. You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, our business or commercial purpose for collecting the information, and the categories of third parties with whom we share it.

Right to Delete. You have the right to request that we delete personal information we have collected from you, subject to certain exceptions permitted by law.

Right to Correct. You have the right to request that we correct inaccurate personal information we maintain about you.

Right to Opt-Out of Sale or Sharing. We do not sell or share your personal information for cross-context behavioral advertising as defined under the CPRA. You are not required to opt out, but if you have any questions, please contact us.

Right to Limit Use of Sensitive Personal Information. We do not collect or use "sensitive personal information" as defined under the CPRA (such as precise geolocation, financial account details, health data, or biometric data).

Right to Non-Discrimination. We will not discriminate against you for exercising any of your CCPA/CPRA rights.

How to Submit a Request. To exercise any of the above rights, please contact us at info@nettabenshabu.com with the subject line "California Privacy Request." We will respond within 45 days of receiving a verifiable consumer request.

EU and UK Residents — Your Rights Under GDPR / UK GDPR

If you are located in the European Union or United Kingdom, you have the following rights under the GDPR and UK GDPR:

• Right of access — to obtain a copy of your personal data;
• Right to rectification — to have inaccurate data corrected;
• Right to erasure ("right to be forgotten") — to request deletion of your data under certain conditions;
• Right to restriction of processing — to limit how we use your data in certain circumstances;
• Right to data portability — to receive your data in a structured, machine-readable format;
• Right to object — to object to processing based on legitimate interests;
• Right to withdraw consent — where processing is based on consent, to withdraw it at any time without affecting prior lawful processing;
• Right to lodge a complaint — with your local data protection supervisory authority. In the UK, this is the Information Commissioner's Office (ico.org.uk). In the EU, you may contact your national data protection authority.

To exercise any of these rights, please contact us at info@nettabenshabu.com. We will respond to verified EU/UK rights requests within 30 days (with possible extension to 60 days for complex requests).

Do Not Sell or Share My Personal Information

Netta BenShabu does not sell, rent, or share your personal information with third parties for monetary or other valuable consideration, and does not share your information for cross-context behavioral advertising purposes.

If you have questions about this or wish to confirm your opt-out status, please contact us at info@nettabenshabu.com with the subject line "Do Not Sell Request."

Children's Privacy

The Site is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe that we have inadvertently collected personal information from a child under 16, please contact us immediately at info@nettabenshabu.com and we will take steps to delete that information promptly.

Security

We take reasonable and appropriate technical and organizational measures to protect the personal information we collect against unauthorized access, disclosure, alteration, or destruction. However, no transmission over the internet or electronic storage system is completely secure, and we cannot guarantee absolute security. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the Site. The "Last updated" date at the top of this page reflects the most recent revision. If we make material changes, we will post a notice on the Site. Your continued use of the Site after the effective date of any updated policy constitutes your acknowledgment and acceptance of the changes.

Contact Us

For any privacy-related questions, requests, or concerns, please contact us at:

Netta BenShabu Elite Couture
info@nettabenshabu.com — subject line: "Privacy Request"