Privacy Policy

vaïvae is a luxury fashion house operating vaivae.com. This policy explains what personal information we collect, why, who receives it, and the rights you hold over it. We collect little, we sell nothing, and everything below is written to be read.

What we collect

Information you give us

When you place an order or create an account: your name, email address, shipping address, and phone number. When you subscribe to the editorial: your email address and your consent. When you write to us: whatever your message contains.

Payment information

Payments are processed by Stripe. Your card details go directly to Stripe over an encrypted connection — we never receive or store full card numbers.

Information collected automatically

Technical data needed to run the site securely — IP address, browser type, and request logs — and a record of your cookie choices under an anonymous identifier. With your permission, analytics and advertising identifiers as described in our Cookie Policy.

Why we use it

To fulfil your order — processing payment, shipping worldwide with duties prepaid, sending order and delivery emails, and handling returns. This is necessary to perform our contract with you.

To run your account and support — sign-in, order history, saved details, and answering your messages.

To keep the site secure and working — fraud prevention, abuse protection, and error monitoring. This is our legitimate interest in operating a safe store.

With your consent — the editorial newsletter, site analytics, and advertising measurement. Each of these is optional, and each can be withdrawn as easily as it was given.

Who receives your data

We share personal information only with service providers who process it on our instructions, and only what each needs:

Stripe — payment processing and fraud prevention.

Medusa Cloud — hosting of our commerce platform, where orders and accounts live.

Cloudflare — site hosting, security, and cookieless performance measurement.

Sanity — hosting of the site's editorial content.

Sentry — error monitoring, with personal details scrubbed before reports are stored.

PostHog — site analytics, only when you have consented to analytics cookies.

Klaviyo — the editorial newsletter and transactional email preferences.

Meta Platforms — advertising measurement, only when you have consented to advertising cookies. Identifiers such as your email are hashed (irreversibly encoded) before they are sent.

Shipping carriers — your name, address, and phone number, for delivery and customs clearance.

We do not sell personal information, and no one else receives it except where the law requires.

International transfers

Our providers operate in the United States and Europe. We apply the same GDPR-standard safeguards to every visitor, wherever you shop from.

How long we keep it

Order records: 7 years, as commercial and tax law requires. Accounts: until you delete yours, or after 3 years of inactivity. Newsletter data: removed within 30 days of unsubscribing. Records of your cookie choices: kept as evidence of the choice you made.

Your rights

You can ask for a copy of your data, have it corrected or deleted, object to processing, and withdraw any consent at any time — cookie choices via Cookie preferences in the footer, the newsletter via the unsubscribe link in every email. Write to privacy@vaivae.com and we will respond within 30 days. If you believe we have fallen short, you may also complain to your local data protection authority.

Changes to this policy

When this policy changes materially, we will update it here and revise the date shown above.