Privacy Policy
Last updated October 10, 2026. This policy explains what personal data SexyUndie collects at sexyundie.com, why, and the choices you have.
Who we are
The controller of your personal data is the administrator of sexyundie.com, reachable at [email protected].
Contact for privacy questions: [email protected].
What we collect
- Order data: name, email, shipping address, items, sizes, amounts and order history.
- Account data: email, a hashed password, saved sizes, Panty Club preferences.
- Payment data: card details are entered on our payment provider's secure page; we receive only the payment status, the last four digits and the card brand.
- Email signup: your email and the date you confirmed it.
- Technical data: IP address, browser type and pages visited, used for security, fraud and spam prevention, and to keep the site working.
Why we use it
- To take payment, ship orders, handle returns and the Fit Promise (performance of a contract).
- To run the Panty Club subscription you chose (performance of a contract).
- To send order, shipping and account emails (performance of a contract).
- To send newsletters only after you confirm your email (consent; unsubscribe any time).
- To prevent fraud and abuse and secure the site (legitimate interests).
- To keep tax and accounting records (legal obligation).
Who receives it
We share personal data only with service providers who help run the shop, under contracts that limit their use of it: a hosting provider, a payment operator, an email delivery provider, a bot protection service for forms, shipping carriers and our fulfilment partner. We do not sell personal data and we do not share it for cross-context behavioral advertising.
How long we keep it
Order and invoice records for as long as tax law requires (usually 7 years), account data until you delete your account, newsletter data until you unsubscribe, and security logs for up to 90 days.
Your rights
You can ask to access, correct, delete or export your data, object to processing, or withdraw consent. California, Virginia, Colorado, Connecticut and other state residents have these rights under their state law; residents of the EU and UK have them under the GDPR. Write to [email protected]; we answer within 30 days and never discriminate for using your rights.
Cookies
We use only cookies needed for the site to work: your session, your bag and security. We do not use advertising cookies.
Children
The shop is intended for adults. We do not knowingly collect data from children under 16.
Changes
We will post any update on this page with a new date.