Privacy Policy

Last updated: 12 November 2026

1. Who We Are

This policy explains how devines (“we”, “us”) handles your personal data when you use devines.store. We are responsible for your data (the “controller”). Contact for anything about your data: info@devines.store.

2. What We Collect

• Sign-in and chat: your email address (and name, if you give it) when you sign in with an email code to chat, make an offer or see your orders.

• Orders: name, shipping and billing address, phone number, email, what you bought and what you paid. Card and payment details go directly to the payment provider; we never see or store full card numbers.

• Messages: what you write and the photos you send to us in the chat, by email or about an offer.

• Newsletter: your email address, when and where you signed up (the footer form or the box at checkout), and when you unsubscribed.

• Bag reminder: if you tick the newsletter box at checkout and leave without ordering, we keep your email address and the pieces in your bag, to send you one reminder.

• Saved pieces: the pieces you save with ♡. They are kept in your browser; if you are signed in, also on our server, so you see them on your other devices.

• Technical data: our server keeps standard logs (IP address, browser type, pages visited, time of visit) to keep the site secure and working. These logs are deleted after 14 days. To show popular pieces first, we count how often each piece is viewed, saved or added to a bag; these counts are not linked to you.

3. Why We Use It, and the Legal Basis

• To take, ship and support your order, and to answer your messages and offers: needed to fulfil our contract with you.

• To keep records for tax and accounting: required by law.

• To keep the shop secure and prevent fraud: our legitimate interest in a safe shop. Our payment providers also run their own fraud checks on payments.

• To send you the newsletter and the bag reminder: only if you sign up in the footer or tick the box at checkout (your consent). Every one of these emails has an unsubscribe link, and unsubscribing stops both. Emails about your orders and chats are not affected.

• Personal recommendations: only if you click Accept in our cookie notice (see section 7).

We never sell your personal data, and we don’t use it for advertising profiles.

4. Who We Share It With

Only with service providers that help us run the shop, and only what each one needs:

• Website hosting: Oracle Cloud (servers in Frankfurt, Germany).

• Backups: Cloudflare (R2 storage) keeps encrypted daily copies of the shop’s data, so the shop can be restored if something goes wrong.

• Payments: Stripe (cards, Apple Pay, Google Pay, Link and Klarna) and PayPal receive the details needed to take your payment: your name, email, billing address, the amount and your payment details. If you pay with Klarna, Klarna also receives the details it needs for that payment. Each of them handles this under its own privacy policy.

• Emails: Resend sends our emails for us (order updates, chat messages, sign-in codes, the newsletter and the bag reminder).

• Shipping: the courier delivering your parcel receives your name, address and phone number.

• Authorities: only when the law requires it.

When we add a provider, we list it here before it is used.

5. Transfers Outside the EU/EEA

We serve customers worldwide and ship from Hong Kong, so some data (for example your shipping details) is processed outside the EU/EEA. Some of our providers (Stripe, PayPal, Resend, Cloudflare) are based in the United States. Where data leaves the EU/EEA, we use the safeguards the law requires, such as the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses, or the transfer is necessary to deliver your order.

6. How Long We Keep It

• Orders and invoices: as long as tax law requires (usually up to 10 years, depending on the country).

• Chats, messages and saved pieces: until you ask us to delete them; then deleted within 30 days (except what we must keep by law).

• Newsletter: until you unsubscribe. We keep a note that you unsubscribed, so we don’t email you again by mistake.

• Bag reminder: if no reminder is sent, the pieces in your bag are deleted within 2 days. If one is sent, they are kept 7 days so its “Back to your bag” link works, then deleted.

• Server logs: 14 days.

• Backups: daily copies of the shop’s data are deleted after 30 days. Photos you sent in the chat are removed from the backup the day after we delete them.

7. Cookies and Storage on Your Device

• Essential cookies (always on): keep your shopping bag, sign-in and checkout working, remember the currency you chose so prices show in it (12 months), and remember your cookie choice (12 months). The chat sign-in lasts 90 days or until you log out.

• Personal recommendations (only if you click Accept): your browser remembers the designers, categories, sizes and price range you look at, and sends a short summary as a cookie (6 months) so the “Recommended” order shows those first. It is never used for ads or shared.

• Preferences on your device: recently viewed pieces, recent searches, grid size, Day/Night mode and your saved pieces are stored in your own browser.

• Analytics cookies: we currently use none. If we add any, they are listed here and only load after you click Accept.

You can change your choice at any time with the Cookie settings link at the bottom of every page.

8. Your Rights

You can ask us to:

• see the personal data we hold about you and get a copy;

• correct it;

• delete it;

• limit how we use it, or object to a use based on our legitimate interest;

• send it to you or another company in a common format;

• withdraw a consent you gave (this doesn’t affect anything done before).

Email info@devines.store; we reply within one month. If you think we handle your data wrongly, you can also complain to the data protection authority in your country.

9. Age

Our shop is for people aged 18 and over. We don’t knowingly collect data from anyone younger.

10. Changes

If we change this policy, we update the date at the top. Important changes are announced on the site.