Gucci Crossbody Bags (“we,” “us,” or “our”) operates gucci-crossbody-bags.com (the “Site”). This policy applies to the Site, our checkout, customer support, and marketing communications. We do not claim affiliation with Gucci; product names are used for descriptive purposes only.
Information we collect
Information you provide
Account, order and contact details: name, email, phone, shipping/billing address.
Payment details: last four digits and payment method metadata (processed securely by our payment processors; we do not store full card numbers).
Support and concierge messages, product requests, wishlist and preferences.
Returns, verifications, and survey responses.
Automatically collected
Device and browsing data: IP address, device identifiers, browser type, pages viewed, and timestamps.
Approximate location (derived from IP), referral URLs, and campaign attribution.
Cookie, pixel and similar IDs used for site functionality, analytics, and personalization.
From third parties
Payment and fraud signals from processors and security vendors.
Marketing insights from ad platforms and affiliates.
Delivery updates from shipping carriers.
Sensitive information
We do not seek to collect sensitive personal information. Do not submit government IDs, full payment card numbers via email, or any health-related details.
Children’s privacy: The Site is not intended for children under 13, and we do not knowingly collect data from them. If you believe a child has provided personal data, contact us to delete it.
How we use information
Provide, personalize, and improve our Site, products, and services.
Process orders, payments, shipping, returns, and customer support.
Detect, prevent and investigate fraud, abuse, and security incidents.
Analytics to understand performance and improve UX and merchandising.
Marketing, including personalized offers where permitted and with your choices respected.
Compliance with law, tax, reporting, and enforcement of our terms.
We may aggregate or de-identify information for research, benchmarking, and reporting. Aggregated or de-identified data is not considered personal information.
Cookies and tracking
We use the following categories of cookies and similar technologies:
Essential
Required for site functionality such as navigation, cart, checkout, and security. Cannot be disabled.
Analytics
Help us measure site usage and performance (e.g., page views, conversions) to improve our services.
Personalization
Remember preferences and tailor content such as recently viewed items or localized experiences.
Advertising
Enable ad personalization and measurement. May be considered a “sale” or “sharing” under some laws.
Manage your preferences at any time using the button below or the banner when you first visit.
How we share information
Service providers: Hosting, payment processing, fraud prevention, email delivery, analytics, customer support, and logistics providers under contractual confidentiality.
Advertising and marketing partners: To measure performance and show relevant offers where you have allowed such cookies.
Legal and compliance: To comply with law, enforce terms, or protect rights, safety, and security.
Business transfers: In connection with a merger, acquisition, or asset sale, subject to this policy.
With your direction: For example, financing applications or concierge sourcing with your explicit request.
Selling/Sharing for targeted advertising
We do not sell personal information for money. We may allow advertising partners to set or access identifiers (e.g., cookies, ad IDs) to deliver or measure personalized ads. Under some state laws (e.g., the California Consumer Privacy Act, “CCPA/CPRA”), this may be considered “selling” or “sharing.”
You can opt out of such “sale”/“sharing” by turning off the Advertising category in Cookie Preferences:
We will set an opt-out signal for this browser. For broader control, also adjust your device and browser ad settings.
Your privacy rights
Depending on your location, you may have rights such as access, correction, deletion, portability, restriction/objection, consent withdrawal, and the right to opt out of targeted advertising or profiling. These rights are available under GDPR (EEA/UK), CPRA (California), and similar laws in Colorado, Connecticut, Utah, Virginia, and others.
We may verify your request to protect your information. Authorized agents may submit requests with proof of authorization. If we decline a request, you may appeal by replying to our decision email with “Appeal” in the subject line.
Privacy Request Form
Security
We implement administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, limited access, and monitoring. No method is 100% secure; please use unique, strong passwords and avoid sending sensitive data via email or chat.
Retention
We retain personal information for as long as necessary to fulfill the purposes described in this policy, including providing services, complying with legal obligations, resolving disputes, and enforcing agreements. When no longer needed, we take steps to delete, de-identify, or securely store data.
International transfers
If you access our Site from outside the United States, your information may be processed in the US or other countries with different data protection laws. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.
Changes to this policy
We may update this policy to reflect changes in our practices or applicable law. We will post the updated version and revise the effective date. Material changes will be highlighted or notified where appropriate.