Privacy Policy – Last Updated April 2026

This privacy policy explains how we collect, use, store and disclose personal information that we collect from you, or that you provide to us, when you use this website.

Please read this privacy policy carefully before submitting any personal information. By using this site and providing your information, you acknowledge that you have read and understood this policy.

This website is not intended for use by children under the age of 16. We do not knowingly collect personal data from individuals under 16. If you believe that a child has provided us with personal data without appropriate consent, please contact us and we will take steps to delete that information.

Who we are

Panache Lingerie is the data controller responsible for your personal data for the purposes of UK data protection law. For users in the USA (inc California residents) please read this policy in conjunction with the US & California Privacy Addendum which can be found below.*

If you have any questions about this policy or how we use your data, please contact us using the details at the end of this policy.

What information we collect

Depending on how you use the site, we may collect the following personal information:

  • Name
  • Billing and delivery address
  • Contact information, including email address
  • IP address and device information
  • Order history and account activity

We do not store credit card details. Payment card information is processed securely by our third-party payment providers.

We do not sell customer personal information or share it with third parties for their own independent marketing purposes.

How and why we use your information (lawful basis)

We only use your personal data where the law allows us to do so. The main purposes and lawful bases are:

Processing orders and managing accounts

Purpose: To process orders, take payment, deliver goods, manage returns, and respond to customer service enquiries.

Lawful basis: Performance of a contract with you.

Customer support and administration

Purpose: To respond to enquiries, deal with warranty or after-sales issues, and maintain internal records.

Lawful basis: Performance of a contract and/or legitimate interests in operating our business efficiently.

Marketing communications (newsletter)

Purpose: If you have opted in, to send you email updates about Panache Lingerie products, news, and campaigns.

Lawful basis: Consent.

You can withdraw your consent at any time by using the unsubscribe link in our emails or by contacting us.

Website analytics and targeted advertising

Purpose: To understand how visitors use our website, improve functionality, and deliver relevant advertising.

Data collected during your visit to our website may be used, with your consent, to display advertisements for Panache Lingerie on third-party websites that you may visit. These advertisements are delivered using cookies and similar technologies (including pixels) and are based on your interactions with our website, such as pages viewed or products browsed.

You can manage or withdraw your consent at any time through our cookie consent tool or, where available, through your browser or device privacy settings. Where applicable, we also recognise browser-based opt-out signals, such as Global Privacy Control (GPC).

Lawful basis: Consent (for non-essential cookies and tracking technologies).

How long we keep your information

We retain personal data only for as long as necessary for the purpose it was collected:

  • Guest checkout purchases:up to 18 months, to assist with customer service and warranty queries.
  • Newsletter sign-ups:until you unsubscribe, or after 2 years of inactivity.
  • Registered accounts:while your account remains active, or up to 5 years after your last login or purchase.

We may retain certain information for longer where required to comply with legal, accounting, or tax obligations.

Controlling your personal information

You have the following rights under UK GDPR:

  • The right to access the personal data we hold about you
  • The right to request correction of inaccurate or incomplete data
  • The right to request deletion of your personal data in certain circumstances
  • The right to withdraw consent where processing is based on consent
  • The right to object to certain types of processing

Requests can be made free of charge by contacting us using the details below. We aim to respond within one month.

Cookies, analytics and advertising

Our website uses cookies and similar technologies, including Google Analytics, Mailchimp tracking, Facebook and Google advertising pixels.

These technologies help us to:

  • Understand website usage and performance
  • Improve the shopping experience
  • Deliver relevant advertising to users who have previously visited our site

Non-essential cookies (including analytics and advertising cookies) are only placed with your consent, which you can manage through our cookie consent tool.

You can also control cookies through your browser or device privacy settings. More information is available at www.allaboutcookies.org.

For further details, please see our separate Cookies Policy.

Google Ads and remarketing

We use Google Ads remarketing to advertise on third-party websites (including Google) to users who have previously visited our site.

Google and other third-party vendors use cookies to serve ads based on past visits. You can manage your ad preferences or opt out of interest-based advertising via Google’s Ad Settings.

Sharing your information

We may share your personal data with trusted third-party service providers who act as data processors on our behalf, including:

  • Payment service providers
  • Website hosting and IT service providers
  • Email marketing platforms
  • Analytics and advertising partners

These providers are contractually required to protect your data and use it only in accordance with our instructions.

Where you have provided your consent to marketing, we may use your contact information (such as your email address) to create ‘matched audiences’ on advertising platforms, including Google and Meta. This allows us to display relevant advertisements to you on those platforms and to other users who share similar characteristics or interests. You can withdraw your consent at any time or opt out of this use of your data as described in this policy.

If you are a US resident, including a California resident, this activity may constitute ‘sharing’ of personal information for advertising purposes. Please see our US & California Privacy Policy Addendum for details of your rights and how to opt out.

We may also disclose personal data where required to do so by law or in response to lawful requests from public authorities.

International data transfers

Some of our service providers are located outside the UK. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as UK-approved standard contractual clauses or equivalent protections, to keep your data secure.

Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or disclosure.

Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page.

Contact us

If you have any questions about this privacy policy or how we handle your personal data, please contact us using the details provided on our website.

US & California Privacy Addendum

Last updated: March 2026

This US & California Privacy Addendum supplements our Privacy Policy and applies only to residents of the United States, including California residents, where applicable. If there is a conflict between this Addendum and our main Privacy Policy, this Addendum shall apply for US residents.

1. Scope and applicability

This Addendum is provided to comply with applicable US state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).

This Addendum applies where Panache Lingerie is considered to be doing business in a US state that has enacted consumer privacy legislation and where the relevant statutory thresholds are met.

2. Categories of personal information collected

Within the last 12 months, we may have collected the following categories of personal information as defined by California law:

  • Identifiers: name, email address, postal address, IP address
  • Commercial information: records of products purchased
  • Internet or electronic activity: browsing activity, interactions with our website
  • Geolocation data: approximate location derived from IP address

We do not knowingly collect sensitive personal information as defined by CPRA beyond what is necessary to operate our business.

3. Sources of personal information

We collect personal information from the following sources:

  • Directly from you when you place orders, create an account, or contact us
  • Automatically through cookies and similar technologies when you use our website
  • From service providers that support website analytics, advertising, and order processing

4. Purposes for collecting and using personal information

We collect and use personal information for the following business purposes:

  • To process transactions and fulfil orders
  • To provide customer support and respond to enquiries
  • To operate, maintain, and improve our website
  • To conduct analytics and measure website performance
  • To deliver advertising and marketing communications where permitted

5. Disclosure of personal information

We may disclose personal information to trusted service providers for business purposes, including:

  • Payment processors
  • Website hosting and IT service providers
  • Analytics and advertising providers
  • Email and marketing platforms

We do not sell personal information in exchange for money.

6. Sale or sharing of personal information

Under California law, certain types of online advertising and analytics activities may be considered “sharing” personal information for cross-context behavioural advertising, even where no money is exchanged.

We may share limited personal information (such as IP address or online identifiers) with advertising partners for this purpose only where permitted by law.

California residents have the right to opt out of such sharing.

7. Your rights under California law

California residents have the following rights, subject to certain exceptions:

  • Right to know what personal information we collect, use, disclose, or share
  • Right to access a copy of personal information we hold about you
  • Right to correct inaccurate personal information
  • Right to delete personal information
  • Right to opt out of the sale or sharing of personal information
  • Right to limit the use and disclosure of sensitive personal information (if applicable)
  • Right to non-discrimination for exercising your privacy rights

8. Exercising your rights

You may exercise your privacy rights by:

  • Emailing us using the contact details provided in our main Privacy Policy
  • Submitting a request via our website contact form

We may need to verify your identity before processing your request. We will respond within the timeframes required by applicable law.

You may also designate an authorised agent to submit a request on your behalf.

9. Do Not Sell or Share My Personal Information

California residents may opt out of the sale or sharing of personal information by:

  • Adjusting cookie and advertising preferences through our cookie consent tool
  • Enabling browser-based opt-out signals, such as Global Privacy Control (GPC), where technically feasible

10. Retention of personal information

We retain personal information only for as long as reasonably necessary to fulfil the purposes described in our Privacy Policy, unless a longer retention period is required or permitted by law.

11. Updates to this Addendum

We may update this Addendum from time to time to reflect changes in legal requirements or our data practices. Any updates will be posted on this page.

Who we are

Suggested text: Our website address is: https://misscurvaty.com.

Comments

Suggested text: When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

Suggested text: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

Suggested text: If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Suggested text: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

Suggested text: If you request a password reset, your IP address will be included in the reset email.

How long we retain your data

Suggested text: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

Suggested text: If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where your data is sent

Suggested text: Visitor comments may be checked through an automated spam detection service.