Last updated: May 4, 2026 · Effective immediately. Longchamp Tote Bag operates from Louisville, Kentucky, USA.
📋 What information we collect
We collect only the information necessary to provide a smooth shopping experience and to improve our services.
- Personal identification information: Name, email address, shipping and billing address, phone number (optional).
- Payment details: Credit card information (Visa, MasterCard) is processed securely by our PCI-DSS compliant payment gateway. We never store full card numbers on our servers.
- Order history: Products purchased, date, amount, shipping status.
- Account credentials: If you register, we store a hashed password, your saved addresses, and wishlist items.
- Technical data: IP address, browser type, device information, and cookies to enhance site functionality.
- Communications: Any email, chat, or support inquiry you send to [email protected].
📌 How we collect your information
We collect data in the following ways:
- Directly from you: When you create an account, place an order, subscribe to our newsletter, or contact customer support.
- Automatically: Through cookies and similar tracking technologies when you browse longchamptotebag.com (e.g., pages viewed, items added to cart).
- Third-party sources: We may receive updated delivery address information from our shipping partners (DHL, FedEx, EMS) to correct undeliverable parcels.
🎯 How we use your information
Your data helps us deliver the best possible experience. Specific uses include:
- Process and fulfill your orders (payment verification, shipping, returns).
- Communicate order updates, shipping confirmations, and important policy changes.
- Provide customer support and resolve disputes (including chargebacks or lost packages).
- Improve our website and personalize your shopping experience (e.g., showing relevant graffiti collections).
- Send marketing emails only with your consent — you can unsubscribe instantly via the link in any email.
- Prevent fraudulent transactions and enhance security.
- Comply with legal obligations (tax, customs, or law enforcement requests).
🤝 Do we share your information?
We never sell or rent your personal data. Limited sharing occurs only in these necessary scenarios:
- Service providers: Payment processors (Stripe, PayPal, or similar), shipping carriers (DHL, FedEx, EMS), email platforms (for order notifications), and IT security services. These parties are bound by strict confidentiality agreements.
- Legal compliance: If required by law, court order, or to protect our rights, property, or safety (e.g., fraud investigation).
- Business transfers: In the unlikely event of a merger, acquisition, or bankruptcy, your information may be transferred as an asset, with continued protection under this policy.
We do not share your information with advertisers, data brokers, or unrelated third parties.
💳 Payment security & SSL encryption
Your payment security is our priority. All transactions on longchamptotebag.com are protected by 256-bit SSL encryption (look for the padlock in your browser).
- We accept Visa and MasterCard via a Level 1 PCI DSS compliant gateway.
- Card details are tokenized — we never store your full PAN or CVV on our servers.
- We do not process or store any payment data locally; all payment processing occurs on the secure infrastructure of our banking partners.
🍪 Cookies & similar technologies
We use cookies to enhance site navigation, remember cart contents, and analyze traffic. Cookies are small text files stored on your device.
- Essential cookies: Required for checkout, login, and security. Cannot be disabled.
- Functional cookies: Remember your language preferences and recently viewed items.
- Analytics cookies: Help us understand how visitors use our site (via Google Analytics anonymized data). We do not use intrusive tracking.
- Marketing cookies: Only with your consent (e.g., retargeting ads on social media).
You can manage cookie preferences in your browser settings. Blocking essential cookies may prevent checkout functionality.
We do not respond to “Do Not Track” signals at this time due to industry uncertainty, but we respect your privacy choices.
🛡️ Data storage, retention & protection
We retain your information only as long as necessary to fulfill the purposes described, or as required by law (e.g., tax records for 7 years).
- Customer account data is kept until you request deletion.
- Order records are retained for legal, warranty, and return processing.
- Our servers are located in the United States and are protected by firewalls, intrusion detection, and regular security audits.
- Access to personal data is restricted to employees who need it to perform their duties (e.g., customer support, fulfillment).
While no method of transmission over the internet is 100% secure, we follow industry standards and best practices to protect your data from unauthorized access.
⚖️ Your privacy rights
Depending on your location (especially if you are in the EEA, UK, or California), you have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Correction: Update inaccurate or incomplete information.
- Deletion: Request that we delete your account and personal data, subject to legal retention requirements.
- Opt-out of marketing: Unsubscribe from promotional emails via the link in any email, or by contacting us.
- Data portability: Receive your data in a structured, machine-readable format.
- Restrict processing: Ask us to pause processing under certain circumstances.
To exercise any right, please email [email protected] with the subject “Privacy Request”. We will respond within 30 days after verification. No fee will be charged unless the request is manifestly unfounded or excessive.
🧸 Children’s privacy
Our website is intended for adults aged 18 years or older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with data, please contact us immediately, and we will delete it.
For users under 18, a parent or legal guardian must supervise any purchase or account creation.
🔗 Third-party links
Our site may contain links to external platforms (e.g., social media, payment partners). We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies before providing any personal information.
🔄 Updates to this privacy policy
We may update this policy occasionally to reflect changes in our practices or legal requirements. The “Last updated” date at the top will indicate the latest revision. If we make material changes, we will notify you via email (if you have an account) or through a banner on our website.
Your continued use of longchamptotebag.com after any update constitutes acceptance of the revised policy.
📬 Contact us about privacy
If you have questions, concerns, or wish to exercise your privacy rights, please reach out to our Data Protection Officer (DPO):
Postal address:
Longchamp Tote Bag
244 La Normandy Dr, Louisville KY 40223, United States
For verified data requests, we may need to confirm your identity before processing.
