Privacy Policy
PRIVACY POLICY
Last updated: August 22, 2026
This Privacy Policy describes how Ella Monterey collects, uses, shares and protects your personal information when you visit or make a purchase from ellamonterey.com.
WHO WE ARE
Ella Monterey is a trade name of a sole proprietorship established in the Netherlands and is the controller responsible for your personal information.
Ella Monterey
Email: info@ellamonterey.com
Because we are based in the European Union and sell to customers in the United States, both European data protection law (the GDPR) and applicable United States privacy laws are relevant to how we handle your information. Where these give you different rights, you may rely on whichever protects you more.
INFORMATION WE COLLECT
Information you give us:
- Name
- Email address
- Phone number, where provided
- Billing address
- Shipping address
- Order details and purchase history
- Messages you send to customer support, including any photos you attach
Information collected automatically when you visit our site:
- Device and browser information
- IP address and approximate location derived from it
- Pages viewed, products viewed, items added to cart
- Referring website and how you arrived at our store
- Cookie and similar identifiers
Information from payment providers:
- Confirmation that a payment succeeded or failed
- The payment method type and the last four digits of a card
We never receive or store your full card number, expiry date or security code.
We collect only what is reasonably necessary to run our store, fulfill orders, provide support, protect against fraud and meet our legal obligations.
HOW WE USE YOUR INFORMATION AND WHY WE ARE ALLOWED TO
To process, fulfill and deliver your order, send order confirmations and shipping updates, and handle returns, refunds and exchanges. We need this to perform our contract with you.
To respond to customer service requests. We need this to perform our contract with you and because we have a legitimate interest in supporting our customers.
To detect, prevent and investigate fraud, abuse and security incidents, and to protect our business. We have a legitimate interest in doing this.
To improve our website, understand how our store is used and measure the effectiveness of our advertising. We rely on your consent where this involves non-essential cookies or similar technologies, and otherwise on our legitimate interest.
To send marketing emails about new arrivals, offers and store news. We do this only where you have subscribed, or where permitted by law for existing customers, and you can opt out at any time.
To comply with legal, accounting and tax obligations, including retaining invoices for the periods required by Dutch law.
HOW OUR STORE IS HOSTED
Our store is hosted on Shopify, which provides the e-commerce platform that lets us sell to you. Your information may be stored in Shopify's data storage, databases and applications. Shopify processes this information on our instructions.
PAYMENTS
Payments are processed by trusted third-party payment providers, which may include Shopify Payments, credit and debit card networks, PayPal, Apple Pay, Google Pay or Shop Pay, depending on the method you choose at checkout.
Your payment details are transmitted directly to the payment provider and are handled under their own privacy policies and under the Payment Card Industry Data Security Standard. Ella Monterey does not store full card details.
WHO WE SHARE YOUR INFORMATION WITH
We share personal information only where it is needed to run our business or where the law requires it. Categories of recipients:
- Shopify, as our e-commerce platform
- Payment processors
- Shipping carriers and logistics providers
- Manufacturing and fulfillment partners who ship your order
- Customer support tools
- Email marketing platforms, if you have subscribed
- Analytics and advertising platforms, subject to your cookie choices
- Professional advisers, and authorities where we are legally required to disclose
We do not sell your personal information for money.
FULFILLMENT PARTNERS AND INTERNATIONAL TRANSFERS
Because many orders ship directly from our manufacturing and fulfillment partners, we share the details needed for delivery with them. This typically includes your name, shipping address, contact details and the items ordered. Some of these partners are located outside the European Economic Area, including in China.
We also work with providers located in the United States. Where we transfer personal information outside the European Economic Area, we do so on the basis of an adequacy decision where one applies, or under the European Commission's Standard Contractual Clauses together with appropriate additional safeguards.
You can request more information about these transfers by emailing info@ellamonterey.com.
COOKIES AND TRACKING
We use cookies and similar technologies to keep your cart and checkout working, remember your preferences, understand how our store is used and measure our advertising.
Some cookies are strictly necessary for the website to function and cannot be switched off. For all others, we ask for your choice through our cookie banner, and you can change that choice at any time through the cookie settings on our website or through your browser settings.
If you have enabled a Global Privacy Control signal in your browser, we treat it as a valid opt-out request for targeted advertising where applicable law requires us to.
MARKETING EMAILS
If you subscribe, we may send you updates about new arrivals, offers, sale events and store news. Every email contains an unsubscribe link, and you can also unsubscribe by emailing info@ellamonterey.com. Unsubscribing from marketing does not stop transactional messages such as order confirmations and shipping updates.
DATA RETENTION
We keep your personal information only as long as needed for the purpose we collected it:
- Order and invoice records: seven years, as required by Dutch tax law
- Customer support correspondence: up to three years after your last contact with us
- Marketing subscriptions: until you unsubscribe, and a suppression record afterwards so we do not email you again
- Website analytics data: as configured in the tools we use, typically no longer than 26 months
After these periods we delete or anonymize the information.
DATA SECURITY
We take reasonable technical and organizational steps to protect your personal information, and we work with established platforms and providers who do the same. No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
YOUR RIGHTS
Depending on where you live, you may have the right to:
- Access the personal information we hold about you
- Correct information that is inaccurate or incomplete
- Delete your personal information
- Restrict or object to how we process it, including objecting to direct marketing
- Receive your information in a portable format, or ask us to transfer it
- Withdraw consent at any time, without affecting processing already carried out
- Not be discriminated against for exercising your privacy rights
To make a request, email info@ellamonterey.com. We will respond within one month, and within 45 days for requests under United States state privacy laws. We may ask you to confirm your identity before we act, and you may use an authorized agent where the law allows it.
If you are in the European Union and are not satisfied with how we handle your request, you may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or with the supervisory authority in your country.
CALIFORNIA AND OTHER U.S. STATE RIGHTS
If you are a resident of California or another state with a comprehensive privacy law, you may have the right to know what personal information we collect and how we use it, to request access to or deletion of it, to correct it, and to opt out of the sale or sharing of personal information for targeted advertising.
We do not sell personal information for money. If you use our cookie settings to decline advertising cookies, or send a Global Privacy Control signal, we will not share your information with advertising platforms for cross-context behavioral advertising.
To exercise any of these rights, email info@ellamonterey.com with the subject line "Privacy Request".
CHILDREN
Our store is intended for adults. We do not knowingly collect personal information from children under 16, or under 13 in the United States. If you believe a child has provided us with personal information, contact us at info@ellamonterey.com and we will delete it.
THIRD-PARTY LINKS
Our website may contain links to third-party websites. We are not responsible for their privacy practices or content, and we encourage you to read their privacy policies.
CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. Any changes will be posted on this page with a new "Last updated" date. If the changes are significant, we will notify you by email or through a notice on our website.