Privacy Policy

1. Who We Are

LIEN GROUP ("we", "us", "our") operates the website at this domain as an international luxury goods e-commerce platform. We are the data controller for personal information collected through our website.

For any privacy matters, you may contact us at: privacy@liengroup.com

2. Data We Collect

2.1 Information You Provide

• Order information: name, email address, phone number, shipping address, postcode, country
• Account information: username, email address, password (hashed)
• Payment information: processed entirely by Stripe — we never store full card numbers on our servers
• Communications: messages sent to us via WhatsApp or email

2.2 Information Collected Automatically

• IP address and approximate location (country/region level)
• Browser type, device type, operating system
• Pages visited, time spent, referral source
• Session identifiers (stored in sessionStorage, not cookies)

2.3 Information from Third Parties

• Payment status from Stripe (no card details shared back to us)
• Delivery confirmation from shipping providers

3. How We Use Your Data

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following lawful bases:

• Contract (Art. 6(1)(b) GDPR): processing necessary to fulfil your purchase
• Legal obligation (Art. 6(1)(c)): retaining financial records for tax compliance
• Legitimate interests (Art. 6(1)(f)): fraud prevention, site analytics
• Consent (Art. 6(1)(a)): marketing communications — you may withdraw at any time

5. Who We Share Your Data With

All processors are bound by data processing agreements and must maintain adequate security standards.

6. International Data Transfers

LIEN GROUP serves customers globally. When we transfer your personal data outside the EEA or UK, we ensure appropriate safeguards are in place, including:

• EU Standard Contractual Clauses (SCCs) approved by the European Commission
• UK International Data Transfer Agreements (IDTAs)
• Transfers only to countries with an adequacy decision where possible

7. Cookies & Tracking Technologies

What We Use

We use localStorage and sessionStorage rather than third-party tracking cookies. We do not use Google Analytics, Facebook Pixel, or other third-party advertising trackers.

You can clear stored data at any time via your browser settings (Settings → Privacy → Clear Site Data).

8. Data Retention

• Order records: 7 years (required for accounting/tax law in most jurisdictions)
• Account information: until account deletion or 2 years of inactivity
• Analytics data: 30 days, then anonymised
• Marketing consent records: until consent withdrawn + 1 year

9. Your Rights

Depending on your jurisdiction, you have the following rights regarding your personal data:

To exercise any of these rights, email us at privacy@liengroup.com. We will respond within 30 days (GDPR deadline).

10. Security

We implement appropriate technical and organisational measures to protect your personal data:

• All data transmitted via HTTPS / TLS 1.3
• Payment processing via Stripe (PCI DSS Level 1 certified)
• Passwords stored as one-way hashes — never in plain text
• Access to customer data restricted to authorised personnel only
• Regular security reviews and updates

In the event of a data breach affecting your rights, we will notify you within 72 hours as required by GDPR.

11. Children's Privacy

Our website is not directed at children under 16 years of age. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

12. Contact & Data Protection Officer