Legal
Privacy Policy
What personal data LINEVESSA collects, why, who it is shared with, how long we keep it and your rights, including under the GDPR and US state privacy laws.
This policy explains what personal information LINEVESSA collects when you visit linevessa.shop or buy from us, why we use it, who we share it with, how long we keep it and what rights you have. It covers the EU and UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the CPRA, and the privacy laws of other US states.
1. Who is responsible
The controller of your personal data is MUG LIFE STUDIOS LLC (trading as LINEVESSA), 4310 W Whitewater Ave, Weston, FL 33332, United States. Email support@linevessa.shop, telephone +1 6851661438.
2. What we collect
| Category | Examples | Source |
|---|---|---|
| Identifiers and contact details | Name, email address, telephone number, billing and delivery address | You, at checkout or when you contact us |
| Order information | Items bought, prices, currency, order number, delivery and return information | Your order |
| Payment information | Payment method, the last digits of a card, payment status | Our payment providers (we never receive full card numbers) |
| Account information | Email address and password (stored encrypted), order history | You, if you create an account |
| Messages | What you write to us by email, phone or the contact and withdrawal forms | You |
| Technical data | IP address, browser type, device, pages requested, the country derived from your IP address | Your browser, server logs |
We do not collect sensitive personal information, we do not use analytics or advertising trackers, and we do not create profiles about you.
3. Why we use it and our legal bases (GDPR)
- To take, deliver and support your order, process returns and withdrawals, and answer your questions — performance of a contract (Art. 6(1)(b) GDPR).
- To show prices in your currency and the shop in your language, based on your country and choice — our legitimate interest in running a usable international shop (Art. 6(1)(f)).
- To keep the shop secure and prevent fraud, including payment fraud — legitimate interest (Art. 6(1)(f)).
- To meet legal obligations, such as tax and accounting records — legal obligation (Art. 6(1)(c)).
We do not send marketing emails. Order and service emails are not marketing.
4. Who we share it with
We share personal information only with service providers who help us run the shop and who may use it only on our instructions:
- our website hosting provider (Hostinger), which stores the shop and its database;
- payment providers that process your payment, such as card payment processors and PayPal where offered at checkout — they act as independent controllers for fraud prevention and their legal duties;
- carriers and fulfilment partners, which receive your name, delivery address and, where needed for delivery or customs, your phone number and email;
- our email provider, for order and service emails.
We may also disclose information where the law requires it. We do not sell your personal information and we do not share it for cross-context behavioural advertising.
5. International transfers
We are based in the United States, so your data is processed in the United States and in the countries where our service providers operate. Where data from the EU or the UK is transferred to a country without an adequacy decision, we rely on the European Commission’s Standard Contractual Clauses (and the UK addendum) or another lawful transfer mechanism. You can ask us for a copy of the safeguards.
6. How long we keep it
- Order, payment and invoice records: as long as tax and accounting laws require, generally up to 7 years.
- Customer account: until you delete it or ask us to; inactive accounts are deleted after 3 years.
- Messages and withdrawal requests: up to 3 years after the matter is closed.
- Server logs: up to 30 days.
7. Your rights
EU and UK residents have the right to access, correct and delete their data, to restrict or object to processing, and to data portability. Where we rely on legitimate interests, you can object at any time. You can also complain to the data protection authority in your country — for example the Danish Datatilsynet, a German state data protection authority, or the UK Information Commissioner’s Office.
US residents (including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon and other states with privacy laws) have the right to know what personal information we collect, use and disclose; to access and obtain a copy of it; to correct it; to delete it; and to opt out of the sale or sharing of personal information, targeted advertising and profiling. We do none of these, but you can still use the opt-out on our Do Not Sell or Share page.
How to exercise your rights: email support@linevessa.shop, call +1 6851661438, or use the contact form. You do not need an account. We may ask for information to verify your identity, such as the email address and an order number. You can use an authorised agent. We reply within one month (GDPR) or 45 days (US state laws), and tell you if we need an extension. If we decline a request, you can appeal by replying to our answer; we respond to appeals within 60 days.
No discrimination: we will never charge you a different price, give you a different level of service or refuse service because you exercised a privacy right.
8. Global Privacy Control
We treat a Global Privacy Control (GPC) signal from your browser as a valid request to opt out of the sale and sharing of your personal information for that browser.
9. Cookies
We use only the cookies the shop needs to work, such as the cart, your language and your country for prices. Details are in our Cookie Policy.
10. Children
Our shop is meant for adults. We do not knowingly collect personal information from children under 16. If you believe a child has given us personal information, contact us and we will delete it.
11. Security
The shop uses an encrypted HTTPS connection. Card data is entered with our PCI DSS-compliant payment providers and never passes through or is stored on our servers. Access to customer data is limited to the people who need it to serve you.
12. Changes
If we change this policy, we update the date on this page. Significant changes are announced on the site.