At Elle & Milo, we regard the protection of your personal information as an essential element of our commitment to excellence. This Privacy Policy describes how we collect, use, protect, and disclose your personal information when you visit our website, place an order, or interact with our services.

We invite you to review this policy carefully to understand our practices regarding your personal information.


1. Data Controller Information

Elle & Milo (a trade name of Nexora Commerce LLC) serves as the data controller for the personal information collected through our website and services.

Business Name: Elle & Milo
Legal Entity: Nexora Commerce LLC
Address: 501 Silverside Rd, STE 105, Wilmington, Delaware 19809, United States
EIN: 39-4755896
Email: info@elle-milo.com
Telephone: +1 302 329 5856

For data protection inquiries, please contact us using the information provided in Section 15 below.


2. Scope of This Policy

This Privacy Policy applies to personal information collected through:

  • Our website (elle-milo.com)

  • Account creation and order placement

  • Email communications and newsletters

  • Customer service interactions

  • Social media engagement

"Personal information" refers to any data that identifies, relates to, or could reasonably be associated with you as an individual.


3. Information We Collect

3.1 Information You Provide Directly

When you interact with our services, you may provide:

  • Identity Information: Full name, billing and shipping addresses, telephone number, email address

  • Account Credentials: Username, password, security questions, and authentication details

  • Transaction Information: Order history, payment confirmation details, purchase preferences

  • Communication Records: Correspondence with our Client Services team, product reviews, survey responses

  • Preferences: Size preferences, style interests, newsletter subscription choices

 

3.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical information through cookies and similar technologies:

  • Device Information: Browser type, operating system, device identifiers

  • Usage Data: Pages viewed, time spent on pages, navigation patterns, referral sources

  • Network Information: IP address (anonymized where required), approximate geographic location

  • Cookie Data: Unique identifiers stored on your device to enhance functionality and personalization

 

3.3 Information from Third Parties

We may receive information about you from:

  • Payment Processors: Transaction data to complete your orders (Shopify Payments, PayPal, Stripe)

  • Shipping Partners: Delivery confirmation and tracking information

  • Marketing Partners: Interaction data from advertising platforms (Facebook, Google, Pinterest)

  • Data Enrichment Services: Aggregated demographic information to enhance our understanding of client preferences


4. How We Use Your Information

We process your personal information for the following purposes:

4.1 Contract Performance (Legal Basis: GDPR Art. 6(1)(b); CCPA Business Purpose)

  • Processing and fulfilling your orders

  • Managing your account and authentication

  • Communicating order status, shipping updates, and delivery confirmations

  • Processing payments and preventing fraudulent transactions

  • Facilitating returns, exchanges, and refunds

 

4.2 Legitimate Business Interests (Legal Basis: GDPR Art. 6(1)(f))

  • Improving website functionality and user experience

  • Analyzing purchasing trends and preferences

  • Maintaining website security and preventing misuse

  • Conducting internal business analytics

  • Enhancing product offerings and collections

 

4.3 Marketing and Personalization (Legal Basis: Consent - GDPR Art. 6(1)(a))

  • Sending promotional emails about new collections and offerings (with your consent)

  • Displaying personalized product recommendations

  • Retargeting advertisements on third-party platforms

  • Conducting customer satisfaction surveys

 

4.4 Legal Compliance (Legal Basis: GDPR Art. 6(1)(c))

  • Complying with tax and accounting obligations

  • Responding to legal requests from authorities

  • Maintaining records as required by law


5. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience and gather insights about website usage.

5.1 Types of Cookies We Use

  • Essential Cookies: Required for basic website functionality (shopping cart, checkout process, account access)

  • Performance Cookies: Analyze website traffic and user behavior to improve our services

  • Marketing Cookies: Enable personalized advertising and measure campaign effectiveness

  • Preference Cookies: Remember your settings and preferences across visits

 

5.2 Managing Cookie Preferences

You may adjust your cookie preferences through your browser settings. Please note that disabling certain cookies may limit website functionality. For detailed information about Shopify's cookie practices, visit: shopify.com/legal/cookies

To opt out of personalized advertising, you may use:

  • Your browser's privacy settings

  • Digital Advertising Alliance opt-out tool: optout.aboutads.info

  • Network Advertising Initiative opt-out tool: optout.networkadvertising.org


6. How We Share Your Information

We disclose personal information only as necessary to provide our services and comply with legal obligations.

6.1 Service Providers

  • E-commerce Platform: Shopify (website hosting, payment processing, order management)

  • Payment Processors: PayPal, Stripe, Shopify Payments

  • Shipping Carriers: USPS, UPS, FedEx, Canada Post

  • Email Service Providers: For transactional and marketing communications

  • Analytics Providers: Google Analytics, Facebook Pixel (with appropriate safeguards)

 

6.2 Marketing Partners
With your consent, we share limited information with advertising platforms (Facebook, Google, Pinterest) to deliver personalized advertisements.

 

6.3 Legal Requirements
We may disclose information when required by law, including:

  • Responding to subpoenas or court orders

  • Protecting our rights and property

  • Investigating fraud or security incidents

  • Complying with regulatory obligations

 

6.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity, subject to this Privacy Policy.


7. International Data Transfers

Elle & Milo operates in the United States and Canada. Your personal information may be transferred to, stored, and processed in jurisdictions outside your country of residence.

For clients in the European Economic Area (EEA), we ensure appropriate safeguards are in place:

  • Standard Contractual Clauses (SCCs) approved by the European Commission

  • Adequacy Decisions where applicable (e.g., Canada under PIPEDA)

  • Binding Corporate Rules for intra-group transfers


8. Data Security

We implement industry-standard security measures to protect your personal information, including:

  • SSL/TLS Encryption for all data transmitted through our website

  • Secure Payment Processing via PCI DSS-compliant processors

  • Access Controls limiting employee access to personal information on a need-to-know basis

  • Regular Security Audits to identify and address vulnerabilities

However, no method of transmission or storage is completely secure. We cannot guarantee absolute security but maintain ongoing efforts to protect your information.


9. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

Typical Retention Periods:

  • Account Information: Retained while your account remains active; deleted upon request

  • Transaction Records: Retained for 7 years to comply with tax and accounting obligations

  • Marketing Communications: Retained until you unsubscribe or withdraw consent

  • Website Analytics: Anonymized after 26 months (Google Analytics default)


10. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

10.1 Rights Under GDPR (EEA Residents)

  • Right of Access (Art. 15): Request a copy of your personal information

  • Right to Rectification (Art. 16): Correct inaccurate or incomplete information

  • Right to Erasure (Art. 17): Request deletion of your information ("right to be forgotten")

  • Right to Restriction (Art. 18): Limit how we process your information

  • Right to Data Portability (Art. 20): Receive your information in a portable format

  • Right to Object (Art. 21): Object to processing based on legitimate interests or for direct marketing

  • Right to Withdraw Consent (Art. 7(3)): Withdraw consent for marketing communications at any time

 

10.2 Rights Under CCPA/CPRA (California Residents)

  • Right to Know: Request disclosure of personal information collected, used, or shared

  • Right to Delete: Request deletion of your personal information

  • Right to Opt-Out: Opt out of the "sale" or "sharing" of personal information

  • Right to Correct: Request correction of inaccurate personal information

  • Right to Non-Discrimination: Exercise your rights without discriminatory treatment

 

10.3 Rights Under PIPEDA (Canadian Residents)

  • Right to Access: Request access to your personal information

  • Right to Correction: Request corrections to inaccurate information

  • Right to Withdraw Consent: Withdraw consent for certain processing activities

 

10.4 Exercising Your Rights

To exercise any of these rights, please contact us at:

  • Email: info@elle-milo.com

  • Telephone: +1 302 329 5856

  • Mail: 501 Silverside Rd, STE 105, Wilmington, Delaware 19809, United States

We will respond to your request within the timeframe required by applicable law (typically 30-45 days).


11. Marketing Communications

11.1 Newsletter Subscription

When you subscribe to our newsletter, we will send you updates about new collections, exclusive offerings, and brand news. Subscription requires:

  • Double Opt-In: You must confirm your subscription via email verification

  • Easy Unsubscribe: Every email includes an unsubscribe link

 

11.2 Transactional Emails for Existing Clients

If you have placed an order with us, we may send you emails about similar products, as permitted under applicable law. You may opt out at any time.

 

11.3 SMS Marketing (If Applicable)

With your explicit consent, we may send promotional messages via SMS. You may opt out by replying "STOP" at any time.


12. Third-Party Websites and Services

Our website may contain links to third-party websites (e.g., social media platforms, payment processors). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

Social Media Plugins:

  • Facebook: We use Facebook plugins to enable social sharing. See Facebook's Privacy Policy: facebook.com/policy.php

  • Instagram: Instagram integration allows you to view our content. See Instagram's Privacy Policy: instagram.com/legal/privacy

  • Pinterest: We use Pinterest for visual content sharing. See Pinterest's Privacy Policy: policy.pinterest.com/privacy-policy


13. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately so we may delete it.


14. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy to reflect changes in our practices, legal requirements, or operational needs. We will notify you of material changes by:

  • Updating the "Effective Date" at the top of this policy

  • Posting a notice on our website

  • Sending an email notification (for significant changes)

Your continued use of our services after such changes constitutes acceptance of the updated Privacy Policy.


15. Contact Information and Complaints

For Privacy Inquiries:
Email: info@elle-milo.com
Telephone: +1 302 329 5856
Mail: 501 Silverside Rd, STE 105, Wilmington, Delaware 19809, United States

Business Hours (EST):
Monday to Friday: 9 AM to 5 PM
Saturday and Sunday: Closed

We respond to all inquiries within 1 to 2 business days.

15.1 Filing a Complaint

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the relevant supervisory authority:

  • EEA Residents: Contact your national data protection authority. List available at: edpb.europa.eu/about-edpb/about-edpb/members_en

  • Canadian Residents: Office of the Privacy Commissioner of Canada: priv.gc.ca

  • California Residents: California Attorney General: oag.ca.gov/privacy