Privacy policy

Privacy & Cookies Policy

Last updated: October 10, 2026

At LANA NGUYEN, we respect your privacy and take the protection of your personal information seriously. ♡

This Privacy Policy explains what personal data we collect, how we use and protect it when you visit our online store, place an order, book a fitting or communicate with our atelier.

1. Data Controller

The controller of your personal data is:

LANA NGUYEN SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ

ul. Włodarzewska 76J, lok. 58
02-393 Warsaw, Poland

NIP (Tax ID): 7011333329
REGON: 545819637
KRS: 0001269077

Email: shop@lananguyen.com
Phone: +48 797 909 590

We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and applicable Polish laws.

2. Personal Data We Collect

Depending on how you interact with our services, we may process:

Contact details: Your name, email address, phone number, shipping address and billing information.
Order information: Products purchased, order history, payment information, delivery details, returns and complaints.
Measurements and preferences: Body measurements, fitting information, design preferences and individual arrangements.
Photos and videos: Materials you share with us or that are created during fittings in connection with your order.
Communications: Messages relating to orders, consultations and appointment bookings.
Technical data: IP address, device and browser information, cookies and website activity.
Marketing preferences: Newsletter subscriptions, marketing consent and communication preferences.

We collect data directly from you, automatically when you use our website and, where necessary, from service providers involved in processing payments or deliveries.

Providing your personal data is voluntary. However, certain information is necessary to process orders or appointments. Providing data for marketing purposes is entirely optional.

3. Made-to-Measure Orders, Measurements & Fittings

At LANA NGUYEN, most of our creations are individually made to measure.

To design and properly fit your garment, we may collect your body measurements, fitting notes, design preferences and photographs necessary to complete your order.

Measurements may be taken during in-person appointments at our Warsaw studio or remotely through online consultations.

We process this information to prepare, produce and adjust your order, based on Article 6(1)(b) GDPR – performance of a contract or steps taken before entering into a contract.

Where necessary, relevant information may be shared with authorized members of our team and collaborating seamstresses involved in creating your garment.

We do not require you to provide health information. If such information becomes necessary for a specific fitting requirement, we will establish the appropriate processing conditions separately, in accordance with Article 9 GDPR.

4. Online Consultations, Photos & Videos

During online consultations and in-person fittings, we may use photographs to document measurements, garment construction and fitting adjustments.

We will inform you of the purpose before taking such photographs.

Video consultations are not automatically recorded. If recording becomes necessary, we will inform you beforehand about its purpose, conditions and legal basis.

Materials collected for order fulfillment are not automatically used for marketing purposes.

5. Photography & Image Consent

We love sharing the stories behind our designs and celebrating the wonderful women we create them for. ♡

At the same time, we fully respect your privacy and your choices regarding the use of your image.

Identifiable client photographs, videos and testimonials may be used for promotional purposes, including our website, Instagram, TikTok and portfolio, only with appropriate voluntary consent where required.

Consent to the promotional use of your image is never a condition of placing an order or attending a fitting.

Where processing is based on consent, you may withdraw it at any time by contacting shop@lananguyen.com.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. Purposes & Legal Bases for Processing

We process your personal data for the following purposes:

Orders, payments, deliveries, fittings and custom designs: Article 6(1)(b) GDPR.
Accounting, tax and legal obligations: Article 6(1)(c) GDPR.
Customer communication, website security, fraud prevention and legal claims: Article 6(1)(f) GDPR, where processing is based on our legitimate interests.
Newsletter and marketing communications: Article 6(1)(a) GDPR where consent is the applicable legal basis, together with relevant electronic communications regulations.
Promotional publication of client photos and videos: Article 6(1)(a) GDPR, where processing is based on consent.
Analytics and advertising technologies requiring consent: Article 6(1)(a) GDPR and applicable rules governing information stored on users' devices.
Essential website functionality and security: Article 6(1)(f) GDPR or, where applicable, Article 6(1)(b) GDPR.

7. Shopify, Fresha, Dropbox & Service Providers

To operate our online store, manage appointments and fulfill custom orders, we use external platforms and service providers.

Shopify – Online Store

Our online store is powered by Shopify, which processes information necessary to manage orders, payments, deliveries and website functionality.

Shopify may also process certain personal information for its own purposes, depending on the services and features used, as described in its privacy policy.

More information: https://www.shopify.com/legal/privacy/consumers

Fresha – Appointments & Fittings

We use Fresha to manage appointments and fittings.

When booking an appointment, we may process your name, contact information, appointment date and type, and relevant payment information.

This data is used to organize fittings, confirm appointments and communicate with you, based on Article 6(1)(b) GDPR.

More information: https://www.fresha.com/privacy-policy

Dropbox – Design & Order Documentation

We use Dropbox to store and organize documentation related to individual orders.

This may include client measurements, fitting notes, photographs, videos and materials relating to garment design and adjustments.

Access to this information is restricted to authorized individuals involved in fulfilling the relevant order.

More information: https://www.dropbox.com/privacy

Other Collaborators & Service Providers

Where necessary, we may also share relevant data with shipping companies, payment providers, accountants, IT providers, communication services, seamstresses and other collaborators involved in fulfilling orders.

We share only the information necessary for the relevant purpose, using appropriate safeguards and legally required data processing agreements.

Personal data may also be disclosed to authorized public authorities when required by law.

8. Cookies Policy

Our online store uses cookies and similar technologies to ensure proper website functionality, improve the shopping experience, analyze website traffic and support marketing activities.

Types of cookies we may use:

Essential cookies: Necessary for website functionality, shopping carts, checkout and security.
Functional cookies: Remember preferences such as language and selected settings.
Analytics cookies: Help us understand how visitors use our website, which products they view and how we can improve the shopping experience.
Marketing cookies: Help measure advertising performance and display advertisements relevant to users' interests.

Cookies may be session cookies, which expire after the browsing session, or persistent cookies, which remain stored for a specified period or until deleted.

Essential cookies may be used without separate consent where permitted by law.

Non-essential cookies and tracking technologies that require consent are activated only after the appropriate consent has been obtained.

Managing Your Cookie Preferences

When visiting our website, you can accept, reject or customize your preferences for non-essential cookies.

You may change or withdraw your consent at any time through the cookie and privacy settings available on our website.

You can also manage cookies through your browser settings.

Rejecting non-essential cookies will not prevent you from using the essential features of our online store.

9. Google Analytics – Website Analytics

We use Google Analytics 4 (GA4), an analytics service provided by Google, to better understand how visitors interact with our online store.

This service may help us analyze:

Website visits and traffic sources.
Viewed products and pages.
Website interactions and shopping journeys.
Marketing campaign performance.
Technical information about devices and browsers.

This information helps us improve our website and shopping experience.

Where required by law, analytics tracking technologies are only activated after obtaining the appropriate consent.

More information about Google's privacy practices:

https://policies.google.com/privacy

10. Meta Pixel – Facebook & Instagram Advertising

We use Meta Pixel, a tool provided by Meta Platforms, to measure advertising performance on Facebook and Instagram, understand how visitors interact with our store and deliver more relevant advertisements.

Meta Pixel may process information about how visitors interact with our online store, including:

Pages visited and products viewed.
Products added to the shopping cart.
Checkout activity.
Completed purchases.
Technical device and browser information.

This technology may be used to measure advertising effectiveness, create advertising audiences and display personalized advertisements.

Marketing tracking technologies requiring consent are only activated after the appropriate consent has been obtained.

Depending on the processing activity, Meta Platforms Ireland Limited may act as an independent controller or joint controller under the relevant agreements and privacy terms.

More information:

https://www.facebook.com/privacy/policy/

11. Profiling & Personalized Advertising

We may analyze information about website activity to better tailor our advertisements and product recommendations to visitors' interests.

For example, someone who has viewed a particular wedding dress may later see an advertisement featuring that design on social media, where legally permitted and technically enabled.

This type of profiling is used for marketing purposes. We do not use it to make automated decisions that produce legal effects or similarly significantly affect individuals within the meaning of Article 22 GDPR.

You may object to the processing of your personal data for direct marketing purposes and manage consent for non-essential tracking technologies.

12. How Long We Keep Your Information

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, unless applicable law requires or justifies longer retention.

In particular:

Orders and accounting records: For the periods required by applicable tax, accounting and other laws.
Contract-related information: For the duration of the contract and, where appropriate, for the period necessary to handle complaints and potential legal claims.
Measurements, fitting notes and photographs: For the period necessary to fulfill your order, provide justified after-sales support and protect against potential claims.
Customer communications: For as long as necessary to respond to enquiries, manage orders and protect legal interests.
Marketing data: Until consent is withdrawn or the processing purpose ends, unless further retention is justified by law.
Promotional photographs and videos: In accordance with the scope of consent provided and applicable law.
Cookie-related information: According to the retention periods of the relevant technologies and applicable privacy settings.

When personal data is no longer needed, we delete or anonymize it unless there is a valid legal basis for further retention.

13. International Data Transfers

Some of our service providers, including Shopify, Fresha, Dropbox, Google and Meta, may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we rely on appropriate transfer mechanisms under the GDPR, such as European Commission adequacy decisions, Standard Contractual Clauses or other applicable safeguards.

Additional protective measures are implemented where necessary.

You may contact us for further information about the safeguards applicable to your personal data.

14. Your Rights Under GDPR

Under applicable data protection laws, you may have the right to:

Access your personal data and receive a copy.
Request correction or completion of inaccurate information.
Request deletion of your personal data.
Request restriction of processing.
Object to certain processing activities, including direct marketing.
Request data portability where the legal requirements are met.
Withdraw consent at any time where processing is based on consent.
Lodge a complaint with a supervisory authority.

To exercise your rights, please contact shop@lananguyen.com.

We will respond without undue delay, generally within one month, with extensions possible where permitted under the GDPR.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych – UODO) in Poland.

15. Data Security

We use appropriate technical and organizational measures to protect your personal information against unauthorized access, disclosure, loss or alteration.

Access to client measurements, photographs and design documentation is limited to individuals who need this information to provide our services.

Although we take reasonable precautions, no electronic storage or transmission system can guarantee absolute security.

16. Children's Privacy

Our services are not specifically directed at children.

Where an order or fitting requires the processing of a minor's personal data, we do so in accordance with applicable law, involving a parent or legal guardian where legally required.

17. Third-Party Websites

Our website may contain links to external websites and platforms, including social media services.

These third parties may operate under their own privacy policies and data processing practices. We encourage you to review their policies before sharing personal information.