1. Introduction

The Little Bakeshop S.à r.l. (“we”, “our”, “us”) is committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use, store and safeguard your information when you visit our website or place an order.

We process all personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Luxembourg laws.

2. Data Controller

The data controller responsible for your personal information is:

The Little Bakeshop S.à r.l.
51 Grand-Rue
L-1661 Luxembourg
welcome@tlb.lu

3. Personal Data We Collect

We collect only the information necessary to provide our services.

3.1 Information you provide directly

• Name and surname

• Email address

• Phone number

• Billing and delivery address

• Order details

• Payment information (processed securely by third-party providers)

3.2 Information collected automatically

• Cookies and browsing data

• IP address

• Device and browser information

• Analytics data (pages visited, time spent, interactions)

3.3 Information from third parties

• Payment processors

• Delivery partners

4. Purpose of Data Processing

We use your personal data for the following purposes:

4.1 Contractual purposes

• Processing and delivering your orders

• Managing payments

• Communicating about your purchase

4.2 Legitimate interest

• Improving our website and services

• Preventing fraud and ensuring security

• Managing customer service requests

4.3 Consent

• Sending newsletters or marketing communications

• Using non-essential cookies

You may withdraw your consent at any time.

5. Legal Basis for Processing

We process your data based on:

• Contract necessity (to fulfil your order)

• Legitimate interest (service improvement, fraud prevention)

• Consent (marketing, optional cookies)

• Legal obligations (accounting, tax compliance)

6. Data Sharing

We only share your data with trusted partners when necessary:

• Payment service providers

• Delivery and logistics partners

• IT and hosting providers

• Analytics and cookie service providers

We never sell your personal data.

7. Data Retention

We retain your personal data only for as long as necessary:

• Order and billing data: retained for the legally required period

• Customer account data: retained until you request deletion

• Marketing data: retained until you unsubscribe

• Cookies: retained according to their specific lifespan

8. Cookies & Tracking Technologies

Our website uses cookies to ensure proper functionality, improve performance and analyze traffic.

Types of cookies used:

• Essential cookies

• Analytics cookies

• Preference cookies

• Marketing cookies (only with consent)

You may manage or disable cookies through your browser settings.

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access

• Right to rectification

• Right to erasure (“right to be forgotten”)

• Right to restrict processing

• Right to data portability

• Right to object

• Right to withdraw consent

• Right to lodge a complaint with the Luxembourg data protection authority (CNPD)

To exercise your rights, contact us at: welcome@tlb.lu

10. Data Security

We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss or misuse.

Payment information is processed securely by certified third-party providers; we do not store credit card details.

11. Third-Party Links

Our website may contain links to external websites.

We are not responsible for their privacy practices and encourage you to review their policies.

12. Updates to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements.

The latest version is always available on our website.