Privacy

The controller is Intimate Concepts. You can contact us at privacy@intimateconcepts.com.

No account is needed, and we do not ask for your name or email address to browse.

Depending on how you use the site, we handle:

• server logs of your requests;
• the country your request comes from, to choose a display currency;
• what you send in a feedback or bug report;
• shop references of saved pieces, while the Saved page checks prices;
• the site operators’ own sign-in details for the admin desk.

• Server logs: IP address, request time, URL, and browser details, handled by Cloudflare to deliver the site and keep it secure and working. Basis: our legitimate interest in running and securing the service (Art. 6(1)(f) GDPR).
• Display currency: Cloudflare tells our server the country your request comes from (the cf-ipcountry header). We use it only to choose a currency for prices, and do not store it. If you pick a currency yourself we remember it in the cs_currency cookie, which is strictly necessary for that choice.
• Feedback and bug reports: what you write, any address you give, any screenshot you attach, and browser diagnostics. Purpose: to answer and fix the problem. Basis: our legitimate interest in running the service.
• What you browse here is not tied to any profile of you. We do not run analytics or advertising trackers on this site.
• Admin sign-in, for the site’s operators only: email address, password, and two-step verification factor, handled by Supabase Auth to protect the admin desk. Basis: our legitimate interest in securing the service. Shoppers have no accounts.

We retain or disclose information where needed for accounting, tax, consumer-protection, fraud-prevention, or other legal duties.

Where consent is required—for example for optional non-essential storage, marketing, or particular sensitive-data processing—we ask separately. You may withdraw consent at any time without affecting earlier lawful processing.

The heart keeps a piece in this browser’s local storage, on your device only: its name, brand, shop, photograph link, price, the date you saved it, and a size if you choose one. We do not receive this list. To show today’s prices, the Saved page sends the pieces’ shop references (not your name or address) to our server, which answers from its own price data and does not keep that list. Clearing your browser’s site data removes the list.

We share information with service providers that handle database storage and authentication, website hosting and security, payment processing when purchases are available, analytics and error monitoring where used, and support communications. They receive only the information needed for those services. We may also disclose information to professional advisers, authorities when legally required, or a successor in a corporate transaction subject to appropriate protections.

Some providers may process data outside the EU/EEA. Where required, we rely on an adequacy decision or appropriate safeguards such as the European Commission's Standard Contractual Clauses, and supplementary measures where appropriate. Contact us for more information about relevant safeguards.

We use these processors, under their data-processing terms:

• Cloudflare: hosting, delivery, and request logs.
• Supabase: the database that holds the catalogue, feedback reports, and the operators’ admin sign-in.
• When you click through to a shop, the shop and its affiliate network (for example the network that tracks our commission) become responsible for what they collect, and may set their own cookies. Their privacy policies apply from that point.

Server logs are kept for the period Cloudflare retains them. Feedback reports are kept while they are useful for fixing the problem they describe. Cookies last as stated in the cookie list.

We use access controls, encryption in transit, least-privilege administration, and other proportionate safeguards. No online service can guarantee absolute security.

We use only what the site needs. The cookie settings hold your consent choice; the cs_currency cookie remembers a currency you chose, for one year; local storage keeps your saved pieces, looks, grid choice, the section you last chose, and recent searches, until you remove them.

A sign-in cookie exists only for the site’s operators on the admin desk. Shoppers have no accounts and never receive it.

When you follow a link to a shop, the shop or its affiliate network may set cookies on its own site to credit us with the sale. We do not control them; see the shop’s own cookie policy.

The service is not directed to children under 16. If you believe a child provided personal data, contact us so we can investigate and delete it where appropriate.

We may update this notice when our processing or legal duties change. We will update the date above and provide additional notice of material changes where required.

Intimate Concepts
Privacy: privacy@intimateconcepts.com
Website: https://intimateconcepts.com