Privacy policy

Last updated: February 15, 2026

Who We Are (Controller)

La Bastlera – Original Fashion for Dolls is operated by:
Business name: Petr Bastl
Address: Husova 46, 675 31 Jemnice, Czech Republic
VAT ID: CZ7901241458
Contact: info@labastlera.com

This Privacy Policy explains how we collect, use, disclose and protect personal information when you visit or purchase from our store and website (the “Services”). If this Policy conflicts with our Terms, this Policy governs privacy matters. By using the Services, you acknowledge this Policy.

Personal Information We Collect

We collect information that identifies or can reasonably be linked to you (“personal information”). We may collect:

  • Contact details (name, billing/shipping address, phone, email).
  • Account data (login, preferences, settings).
  • Transaction data (items viewed/added/purchased/returned, order history).
  • Payment & billing (payment method, masked card details, payment confirmations; we do not store full payment card numbers; payments are processed by our providers in accordance with PCI-DSS).
  • Communications (messages to support, reviews).
  • Device & usage (IP, device/browser identifiers, cookies, analytics, timestamps, pages/events).
  • Marketing interactions (email opens/clicks if you consent/subscribe).

Where We Get It From

  • Directly from you (checkout, account, forms, emails).
  • Automatically (cookies/SDKs/analytics when you use the Services).
  • Service providers & partners (e.g., payment processors, logistics, analytics, ad/affiliate platforms).

How We Use Personal Information (Purposes & Legal Bases – GDPR)

  • Provide and fulfil orders (payments, shipping, returns, account). Legal bases: contract performance; legal obligation (tax/accounting).
  • Customer support & communications. Legal bases: contract performance; legitimate interests (service quality).
  • Security & fraud prevention. Legal basis: legitimate interests; legal obligation where applicable.
  • Service improvement & analytics. Legal basis: legitimate interests; consent where cookies are non-essential.
  • Marketing. Legal basis: consent; legitimate interests for existing customers where permitted.
  • Legal compliance & claims. Legal basis: legal obligation; legitimate interests.

Soft opt-in (EU): If you purchased from us, we may email you about similar products based on our legitimate interest. You can opt out at any time via the unsubscribe link.

Relationship with Shopify

The Services are hosted by Shopify. Shopify may process personal data as an independent controller for certain features. See the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Affiliate Program & Tracking

We operate an invitation-only affiliate program and use GoAffPro as a processor to attribute sales and pay commissions.

Cookies & consent: Affiliate cookies are non-essential in the EU/EEA and are set only with consent via our cookie banner.

Recipients (Who We Share With)

  • Processors: Shopify, GoAffPro, email providers, analytics tools.
  • Independent controllers: payment processors, shipping partners.
  • Authorities where required by law.

International Transfers

Where data is transferred outside the EEA/UK, we rely on adequacy decisions or Standard Contractual Clauses (SCCs).

Retention

  • Order records: up to 10 years (legal requirement).
  • Analytics logs: 12–24 months.
  • Marketing data: until you unsubscribe.

Cookies & Similar Technologies

Non-essential cookies require consent in the EU/EEA. Manage preferences here: Cookie settings.

Your Rights

EEA/UK (GDPR): access, rectification, erasure, restriction, portability, objection. Complaints (CZ): ÚOOÚ.

Complaints

  • Email: info@labastlera.com
  • Postal: La Bastlera (Petr Bastl), Husova 46, 675 31 Jemnice, Czech Republic
  • Response time: within 1 month.

Children’s Data

Our Services are not directed to individuals under 15 years of age. We do not knowingly collect personal data from individuals under 15. If you believe such data has been provided, please contact us so we can delete it.

Security

We implement appropriate technical and organizational measures to protect personal data.

Changes

We may update this Policy periodically. The “Last updated” date reflects the current version.

Contact

Questions or privacy requests: info@labastlera.com · Address: Husova 46, 675 31 Jemnice, Czech Republic.

Policy version: 2.0 (2026-02-15)