Privacy policy

Privacy Policy

1. Information About Data Collection and Contact Details of the Controller

1.1 Welcome to Dorothy Margaret New York. We are delighted that you are visiting our website, and we thank you sincerely for your interest in our products and services. Below, we provide detailed information regarding how personal data is collected, processed, and safeguarded when you interact with our website. For purposes of this policy, "personal data" refers to any information relating to an identified or identifiable natural person — that is, any data that could reasonably be used, alone or in combination with other information, to identify you.

1.2 The controller responsible for the processing of personal data on this website, within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection laws, is Dorothy Margaret New York. Under data protection law, the "controller" is defined as the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. In this case, Dorothy Margaret New York makes these determinations with respect to all data processed through this website.

1.3 To protect your data during transmission, this website employs SSL or TLS encryption technology. This ensures that sensitive information — such as order details, payment information, or inquiries submitted to us — is transmitted securely and cannot be easily intercepted by unauthorized third parties. You can verify that a connection is encrypted by checking for "https://" at the beginning of the web address, along with a small padlock icon displayed in your browser's address bar. We take the security of your information seriously and continuously monitor our systems to maintain appropriate technical and organizational safeguards.

2. Data Collected When Visiting Our Website

When you access our website solely for informational purposes — that is, without registering an account, making a purchase, or otherwise voluntarily submitting information to us — we automatically collect a limited set of technical data that your browser transmits to our server. This information is commonly referred to as "server log files" and is necessary to ensure that our website functions correctly and securely.

Specifically, the following categories of data are collected each time you visit our website:

• The specific page or pages visited
• The date and time of your access
• The volume of data transmitted, measured in bytes
• The referring website or source from which you accessed our page
• The type and version of browser used
• The operating system used by your device
• Your IP address, which may be anonymized or shortened depending on the context

This data is processed on the legal basis of Article 6(1)(f) of the GDPR, reflecting our legitimate interest in ensuring the technical stability, security, and optimal functionality of our website. Under normal circumstances, this data is not shared with third parties, sold, or used for any purpose beyond what is described here. However, we reserve the right to review these log files retroactively should there be concrete evidence suggesting unlawful activity, attempted security breaches, or misuse of our website's systems.

3. Cookies

In order to make your experience on our website as pleasant, efficient, and personalized as possible, we use various types of cookies across different pages of our site. Cookies are small text files that are stored on your device — whether a computer, tablet, or smartphone — when you visit a website.

We distinguish between two primary categories of cookies:

• Session cookies, which are temporary and automatically deleted once you close your browser at the end of your visit.
• Persistent cookies, which remain stored on your device for a longer, predefined period. These allow our website (or, in some cases, our trusted partners) to recognize your browser on subsequent visits, enabling a more seamless and personalized browsing experience.

Some cookies serve purely functional purposes, such as remembering the contents of your shopping cart between visits or storing your preferred language and display settings. Where such cookies involve the processing of personal data, this is carried out either under Article 6(1)(b) of the GDPR — where necessary for the performance of a contract — or under Article 6(1)(f) of the GDPR, based on our legitimate interest in delivering a functional, user-friendly, and efficient website experience.

In certain cases, we may collaborate with trusted advertising or analytics partners to enhance the relevance of the content and offers presented to you. As a result, cookies originating from these third-party partners — commonly referred to as "third-party cookies" — may also be stored on your device during your visit. Where such partnerships exist, you will be separately and clearly informed of the scope, purpose, and nature of the data collected through these third-party cookies.

You retain full control over your cookie preferences. Most modern browsers allow you to configure settings so that you are notified whenever a cookie is about to be set, giving you the opportunity to accept or decline it on a case-by-case basis. Alternatively, you may choose to disable cookies altogether, either for specific websites or universally across your browsing activity. Please be aware, however, that disabling cookies entirely may limit or disable certain features and functionalities of our website, potentially affecting your overall shopping experience.

For detailed, browser-specific instructions on managing cookie settings, please consult the following official resources:

• Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
• Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
• Chrome: https://support.google.com/chrome/answer/95647?hl=en
• Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac
• Opera: https://help.opera.com/en/latest/web-preferences/#cookies

4. Contacting Us

Whenever you choose to contact us — whether through our website's contact form, by email, or through any other means of direct communication — we will necessarily collect certain personal data from you in order to process and respond to your inquiry. The exact categories of data collected will depend on the specific fields and information requested in the relevant contact form or communication channel used.

The data collected through this process is used exclusively for the purpose of responding to your inquiry and handling any associated administrative tasks. The legal basis for this processing is our legitimate interest in providing timely and effective customer service, in accordance with Article 6(1)(f) of the GDPR. Where your inquiry relates to the potential conclusion or execution of a contract — for example, a question about a pending order — the processing of your data will additionally be based on Article 6(1)(b) of the GDPR.

Once your inquiry has been fully resolved and there is no further need to retain the associated data, it will be securely deleted, unless a legal obligation requires us to retain it for a longer period, such as for tax, accounting, or regulatory compliance purposes.

5. Data Processing for Customer Accounts and Contract Fulfillment

When you choose to create a customer account with us, or when you provide personal information in the course of completing a purchase, we collect and process this data on the legal basis of Article 6(1)(b) of the GDPR — namely, that such processing is necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into such a contract.

The specific categories of personal data collected will vary depending on the particular forms and fields you complete during the account creation or checkout process, but may typically include your name, shipping address, billing address, email address, and phone number.

You have the right to request the deletion of your customer account at any time. To do so, simply send a message to our data controller using the contact details provided at the end of this policy.

Please note that even after a contract has been fully executed, or after you have requested deletion of your account, certain data may need to be retained for a limited period in order to comply with applicable tax and accounting retention requirements under commercial law. Once these legally mandated retention periods have expired, your data will be permanently deleted, unless you have separately and explicitly consented to further processing, or unless further retention is otherwise required or permitted by applicable law.

6. Use of Your Data for Direct Marketing Purposes

6.1 Newsletter Subscription

Should you choose to subscribe to our email newsletter, you will receive periodic communications from us regarding new arrivals, promotions, seasonal collections, and other offers that may be of interest to you. The only mandatory piece of information required to subscribe is a valid email address; any additional information you choose to provide, such as your first name, is entirely voluntary and is used solely to personalize the communications you receive.

To ensure that newsletters are only sent to individuals who have genuinely consented to receive them, we employ a double opt-in procedure. This means that after you submit your email address, you will receive a confirmation email containing a unique link. Only once you click this link to actively confirm your subscription will you begin receiving our newsletter. Your consent for this processing is given under Article 6(1)(a) of the GDPR.

At the time of subscription, we also store the IP address from which the registration was made, along with the precise date and time of registration. This information is retained specifically to help us demonstrate compliance with legal requirements and to protect against any potential misuse of the email address in question.

The data collected in connection with your newsletter subscription is used exclusively for the purpose of sending you marketing communications via this channel. You may withdraw your consent and unsubscribe at any time, either by clicking the unsubscribe link included in every newsletter email, or by directly contacting our data controller. Once you unsubscribe, your email address will be promptly and permanently removed from our active mailing list, unless you have separately consented to further use of your data, or unless further processing is otherwise permitted under applicable law.

6.2 Marketing Communications to Existing Customers

If you have previously made a purchase from us and provided your email address in that context, we reserve the right — without requiring separate, additional consent — to occasionally send you marketing communications regarding products or services similar to those you have previously purchased. This form of direct marketing is based solely on our legitimate interest in maintaining an ongoing relationship with our existing customers, pursuant to Article 6(1)(f) of the GDPR.

You retain the right to object to this use of your email address for marketing purposes at any time, free of charge (beyond standard transmission costs), by contacting our data controller as described in this policy. Upon receiving your objection, we will immediately and permanently cease using your email address for this specific purpose.

7. Data Processing for Order Fulfillment

7.1 Delivery and Payment Processing

In order to fulfill your order, certain categories of personal data must necessarily be shared with third parties involved in the fulfillment process. Specifically, we share relevant data with the shipping and logistics companies responsible for delivering your order, to the extent strictly necessary to ensure successful delivery. Similarly, your payment information may be transmitted to the relevant financial institution or payment service provider in order to process your payment.

The legal basis for these data transfers is Article 6(1)(b) of the GDPR, reflecting the necessity of such processing for the performance of our contract with you.

7.2 Use of Payment Service Providers

PayPal

Should you choose to pay via PayPal — including options such as credit card payment via PayPal, direct debit via PayPal, or, where available, deferred or installment payment via PayPal — your relevant payment data will be transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., located at 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). This transmission occurs strictly to the extent necessary for the processing of your payment, under the legal basis of Article 6(1)(b) of the GDPR.

Please note that PayPal reserves the right, particularly in connection with certain payment methods such as credit card payment, direct debit, or deferred payment options, to conduct a creditworthiness check. For this purpose, your relevant payment data may be shared with credit reporting agencies, based on PayPal's own legitimate interest in assessing creditworthiness prior to offering these particular payment methods, pursuant to Article 6(1)(f) of the GDPR. The outcome of any such credit check, including any resulting score, may influence PayPal's decision as to which payment methods are made available to you.

For further information regarding PayPal's data protection practices, including details of the credit reporting agencies it works with, please consult PayPal's own privacy policy at: https://www.paypal.com/en/webapps/mpp/ua/privacy-full

You retain the right to object to this specific form of data processing at any time by contacting PayPal directly.

SOFORT / Klarna

If you select "SOFORT" as your chosen payment method, your payment will be processed by SOFORT GmbH, located at Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"). As part of this process, relevant order and payment-related data will be transmitted to SOFORT strictly for the purpose of completing your payment, under the legal basis of Article 6(1)(b) of the GDPR.

For further details regarding SOFORT's data handling practices, please refer to their privacy policy at: https://www.klarna.com/sofort/datenschutz

8. Review Request Communications

Where you have provided explicit consent during or following the completion of your order, we may send you a single follow-up email inviting you to submit a review of your purchase through our designated review platform. This processing is based on your explicit consent under Article 6(1)(a) of the GDPR. You may withdraw this consent at any time by contacting our data controller directly.

9. Use of Social Media Plugins

9.1 Facebook

Our website incorporates social media plugins from Facebook, operated by Meta Platforms, Inc., located at 1 Hacker Way, Menlo Park, CA 94025, USA (hereinafter "Facebook"). In order to enhance the protection of your personal data while browsing our website, these plugins are not embedded as fully functional, direct integrations. Instead, they are implemented as simple HTML links.

This method of integration means that no connection is established between your browser and Facebook's servers merely by visiting a page containing such a button. Only if you actively click the relevant button will a new browser window open, directing you to Facebook's own platform, where you may then choose to interact with the plugin, potentially after logging into your Facebook account.

For further information regarding the purpose, scope, and further use of data collected by Facebook, as well as your associated rights and privacy settings, please refer to Facebook's privacy policy at: https://www.facebook.com/policy.php

9.2 Instagram

Similarly, our website features social media plugins from Instagram, operated by Instagram LLC, located at 1601 Willow Rd, Menlo Park, CA 94025, USA (hereinafter "Instagram"). As with our Facebook integration, these buttons are implemented solely as HTML links rather than fully embedded plugins, meaning that no direct connection to Instagram's servers is established unless you actively choose to click the relevant button.

For more detailed information regarding Instagram's data practices, please consult their privacy policy at: https://help.instagram.com/155833707900388/

10. Online Marketing Tools

10.1 Google DoubleClick

Our website utilizes the online marketing tool DoubleClick, provided by Google LLC, located at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). DoubleClick uses cookies to display advertisements relevant to individual users, to improve the accuracy of campaign performance reporting, and to help prevent users from being shown the same advertisement repeatedly.

Google assigns a unique cookie identifier to track which advertisements have been displayed within a given browser, thereby helping to avoid excessive repetition of the same ad. This processing is carried out on the basis of our legitimate interest in the effective and optimal marketing of our website and offerings, pursuant to Article 6(1)(f) of the GDPR.

According to information provided by Google, DoubleClick cookies do not themselves contain personally identifiable information. However, due to the nature of these marketing tools, your browser will automatically establish a direct connection with Google's servers. We have no control over, and limited insight into, the full extent of data subsequently collected and processed by Google through this tool.

If you wish to object to this form of tracking, you may configure your browser to block cookies originating from the domain www.googleadservices.com. Please note that this setting will be reset if you subsequently clear your browser's cookies. Additionally, you may visit the Digital Advertising Alliance's website at www.aboutads.info for further information regarding cookie preferences and available opt-out mechanisms.

10.2 Google Ads Conversion Tracking

We additionally make use of Google's advertising platform, "Google Ads," to promote our products and offerings on external websites. This allows us to evaluate the effectiveness of our advertising campaigns by analyzing conversion-related data associated with specific advertisements.

When a user clicks on one of our Google Ads advertisements, a conversion tracking cookie is set on their device. These cookies are small text files and typically expire after approximately 30 days; they are not designed or used for the purpose of personally identifying individual users.

Should a user subsequently visit certain designated pages of our website while this cookie remains active, both Google and Dorothy Margaret New York are able to recognize that the user previously clicked on one of our advertisements and was subsequently directed to our website. Each individual Google Ads customer is assigned a distinct cookie, meaning that cookies cannot be tracked or cross-referenced across the websites of different Google Ads customers.

The resulting conversion statistics allow us to better understand overall advertising performance without providing us with any information that could be used to personally identify individual users. This processing is based on our legitimate interest in effective, targeted advertising, in accordance with Article 6(1)(f) of the GDPR.

Should you prefer not to participate in this form of tracking, you may disable the relevant Google Conversion Tracking cookie via your browser's privacy settings, which will exclude you from future conversion tracking statistics.

11. Web Analytics: Google Analytics

Our website makes use of Google Analytics, a web analytics service provided by Google LLC, located at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics similarly relies on cookies — small text files stored on your device — that enable a detailed analysis of how you use and interact with our website.

The information generated by these cookies regarding your use of our website, including a shortened form of your IP address, is generally transmitted to and stored on Google's servers located in the United States. However, our specific implementation of Google Analytics includes the "_anonymizeIp()" extension, which ensures that your IP address is shortened, and therefore anonymized, prior to any transmission taking place. This extension effectively removes any direct personal reference contained within the data.

Within the European Union and other states party to the Agreement on the European Economic Area, your IP address will be shortened by Google prior to transmission. Only in rare, exceptional circumstances will the complete, unshortened IP address be transmitted to a Google server in the United States, where it will then be shortened upon receipt. In these limited circumstances, this processing occurs under Article 6(1)(f) of the GDPR, based on our legitimate interest in conducting statistical analysis of user behavior for website optimization and marketing purposes.

On our behalf, Google uses this information to help us understand website usage patterns, generate reports on website activity, and provide additional insights related to website and internet usage more broadly. Importantly, the IP address transmitted by your browser as part of this process is not combined or merged with any other data held by Google.

You may prevent the storage of these cookies at any time by adjusting the relevant settings within your browser software; please be aware, however, that doing so may limit your ability to use certain features of our website to their fullest extent. Additionally, you may prevent Google from collecting and processing data generated by the cookie in relation to your use of our website — including your IP address — by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en

Our website may additionally use Google Analytics' cross-device tracking capabilities, which rely on a unique, anonymized user identifier assigned upon your first visit. This identifier is not, in itself, personal data, but does allow interaction data to be linked across multiple devices and browsing sessions belonging to the same user.

For more detailed information regarding Google Analytics, please visit: https://support.google.com/analytics/answer/2838718

12. Retargeting, Remarketing, and Referral Advertising

12.1 Meta/Facebook Custom Audiences via Pixel

Our website makes use of the Meta Pixel, a tool provided by Meta Platforms, Inc. and/or Meta Platforms Ireland Limited, depending on your specific geographic location. With your explicit, prior consent, this tool allows us to track certain user behaviors following the viewing or clicking of a Facebook advertisement, in order to statistically evaluate advertising effectiveness and support future marketing optimization efforts.

While the data collected through this process is anonymized from our perspective — meaning we are unable to draw any conclusions regarding the specific identity of individual users — this same data may nonetheless be stored and further processed by Meta in a manner that allows it to be associated with a specific user profile on their end. Meta may subsequently use this data for its own independent advertising purposes, in accordance with its own data usage policy, available at: https://www.facebook.com/about/privacy/

Depending on your settings, you may allow Meta and its advertising partners to display advertisements both within and outside of the Facebook platform. This processing takes place only where explicit consent has been provided, in accordance with Article 6(1)(a) of the GDPR.

Please note that consent for the use of the Meta Pixel may only be validly given by individuals aged 13 or older. If you are younger than this age threshold, please ensure that consent is obtained from a parent or legal guardian prior to providing any such consent.

You may disable the use of these cookies at any time via your browser's privacy settings, or by visiting the Digital Advertising Alliance's opt-out page at: https://www.aboutads.info/choices/

12.2 Google Ads Remarketing

Our website additionally utilizes Google Ads Remarketing, a service that allows us to display targeted advertisements for our website across Google's search results and partner websites. This service is provided by Google LLC, located at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

As part of this service, Google places a cookie on your device that generates a pseudonymous identifier based on the pages you have previously visited on our website, allowing for the display of interest-based advertising. This processing is carried out based on our legitimate interest in the effective marketing of our products and website, pursuant to Article 6(1)(f) of the GDPR.

Additional forms of data processing will only occur if you have separately informed us of your consent, and if you have similarly agreed to allow Google to associate your browsing history — across both websites and mobile applications — with your personal Google account, for the purpose of delivering personalized advertising based on your specific interests. If you are logged into your Google account while browsing our website, Google may combine this data with Google Analytics data to generate and define cross-device remarketing audiences.

You may permanently disable this form of ad personalization by downloading and installing the relevant browser plug-in, available at: https://www.google.com/settings/ads/onweb/

Alternatively, you may contact the Digital Advertising Alliance directly via www.aboutads.info for further information regarding your available choices.

For further details regarding Google's advertising-related data protection practices, please visit: https://www.google.com/policies/technologies/ads/

13. Your Rights as a Data Subject

13.1 Summary of Applicable Rights

Applicable data protection legislation grants you a broad and comprehensive set of rights with respect to the processing of your personal data by Dorothy Margaret New York. These rights are summarized in detail below.

Right of Access (Article 15 GDPR)
You are entitled to request confirmation as to whether we are processing personal data concerning you, and if so, to obtain detailed information regarding such processing. This includes, among other things: the specific purposes of processing; the categories of personal data involved; the recipients or categories of recipients to whom your data has been or will be disclosed; the anticipated storage period, or the criteria used to determine such a period; the existence of your rights to rectification, erasure, or restriction of processing, as well as your right to object; your right to lodge a complaint with a relevant supervisory authority; the source of your data, where it was not collected directly from you; and information regarding any automated decision-making, including profiling, along with meaningful details regarding the underlying logic, significance, and intended consequences of such processing.

Right to Rectification (Article 16 GDPR)
You have the right to request the prompt correction of any inaccurate personal data concerning you, as well as the completion of incomplete personal data, taking into account the purposes of the relevant processing.

Right to Erasure (Article 17 GDPR)
Under certain circumstances specified in Article 17(1) of the GDPR, you have the right to request the erasure of your personal data. This right is not absolute, however, and does not apply where processing remains necessary — for example, to comply with a legal obligation, to exercise the right of freedom of expression and information, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.

Right to Restriction of Processing (Article 18 GDPR)
Under certain conditions, you have the right to request the restriction of processing of your personal data — for example, where you contest the accuracy of the data, where you have objected to processing pending verification of our legitimate grounds, or where processing is unlawful but you oppose erasure and instead request restricted use.

Right to Notification (Article 19 GDPR)
Where you have exercised your right to rectification, erasure, or restriction of processing, we are obligated to notify all recipients to whom your personal data has been disclosed of any such rectification, erasure, or restriction, unless doing so proves impossible or would involve disproportionate effort. You additionally have the right to be informed of these specific recipients upon request.

Right to Data Portability (Article 20 GDPR)
You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to transmit this data to another controller without hindrance from us, where technically feasible.

Right to Withdraw Consent (Article 7(3) GDPR)
Where processing is based on your consent, you retain the right to withdraw that consent at any time, with future effect. Upon withdrawal, we are obligated to promptly delete the relevant data, unless further processing can be justified on an alternative legal basis. The withdrawal of consent does not affect the lawfulness of any processing carried out prior to such withdrawal.

Right to Lodge a Complaint (Article 77 GDPR)
Should you believe that our processing of your personal data violates applicable data protection law, you retain the right to lodge a complaint with a competent supervisory authority — in particular, within the member state of your habitual residence, place of work, or the place of the alleged infringement — without prejudice to any other available administrative or judicial remedy.

13.2 Right to Object

Where we process your personal data on the basis of our legitimate interest, as part of an overall balancing of interests, you retain the right to object to such processing at any time, for reasons arising from your particular situation. Upon receiving such an objection, we will cease the relevant processing unless we are able to demonstrate compelling, legitimate grounds for continued processing that override your interests, rights, and freedoms, or where such processing remains necessary for the establishment, exercise, or defense of legal claims.

You additionally retain the unconditional right to object, at any time and without providing any specific reason, to the processing of your personal data for the purposes of direct marketing. Upon exercising this right, we will immediately and permanently cease processing your data for this specific purpose.

14. Duration of Data Storage

The specific duration for which personal data is retained depends on the applicable legal retention obligations relevant to the type of data in question — for example, statutory retention periods under commercial and tax law. Once these applicable retention periods have expired, the corresponding data will be routinely and securely deleted, provided that such data is no longer required for the fulfillment or conclusion of a contract, and provided that no other legitimate interest justifies its continued retention.

15. Contact Information

Should you have any questions regarding this Privacy Policy, or regarding how your personal data is collected, processed, or otherwise handled by us, please do not hesitate to contact us using the details provided below:

Dorothy Margaret New York
Website: dorothy-margaret.com
Email: info@dorothy-margaret.com