Still reserved for you
Don't forget your bag
The pieces you chose are still waiting. Slip back in whenever you're ready.
Subtotal
CG Couture
Your trust is part of the fit. Here is exactly what we hold, why, and the control you keep.
Last updated 12 July 2026
CG Couture creates made-to-measure lingerie, swimwear and corsetry from your own measurements. That is intimate work, and it depends on the data you share with us. This policy explains what we collect, why, who we trust to help us, and the rights you have under the EU General Data Protection Regulation (GDPR) and Spanish data-protection law.
CG Couture is an atelier based in Marbella, Spain, and is the data controller responsible for your personal data. When we say “we”, “us” or “the atelier”, we mean CG Couture.
For any privacy question, or to exercise any of the rights below, write to us at cg.designs.contact@gmail.com.
We only ask for what a made-to-measure commission genuinely needs:
Account details — your name, email address and, if you add it, your phone number. These identify you and let you sign in.
Your measurements — the body measurements you enter so a pattern can be drafted for you. They are used for fit alone (see “Your measurements” below).
Order & delivery details — the pieces you order, your shipping and billing address, and your order history.
Bespoke requests — the piece you describe, your preferences, timeline and budget, and any inspiration images you choose to upload.
Messages — anything you send us through a bespoke or Fit & Quality thread, or by email.
Technical data — a session cookie that keeps your bag and language working, plus basic information your browser sends (such as approximate location and device type) so the site runs and stays secure.
We use your data on these legal bases:
To fulfil your order (contract) — drafting your pattern, making and delivering your piece, taking payment, and handling any Fit & Quality claim.
To run the atelier well (legitimate interest) — saving your measurements so you don’t re-enter them, answering your messages, preventing fraud, and improving the service. You can object at any time.
With your consent — only if you opt in to marketing emails. You can withdraw at any time, and every email carries an unsubscribe link.
To meet legal duties — keeping invoicing and tax records as Spanish and EU law require.
Your measurements are body dimensions used only to cut a garment that fits you. We do not ask for — and you should never send — health, medical or other special-category information; our forms screen for it and will ask you to remove it.
You stay in control: you can review and edit your measurements at any time, export them from your account, and delete them with a single tap. Deleting them removes them from your profile.
Payments are processed securely by Stripe through our Wix-hosted checkout. Your card details are entered on their secure page and handled by them — CG Couture never sees or stores your full card number. We receive only confirmation of payment and the billing information needed for your order and invoice.
We never sell your data. We share it only with the trusted providers who help us run the atelier, and only as far as each needs to do its job:
Wix — hosts the website and store and processes data on our behalf.
Stripe — processes card payments securely.
Shipping carriers — receive the name and address needed to deliver your order.
Email providers — send the order and account emails you receive from us.
We may also disclose data where the law requires it. That is all.
Some of our providers may process data outside the European Economic Area. Where they do, the transfer is protected by appropriate safeguards recognised under the GDPR, such as the European Commission’s standard contractual clauses.
We keep your data only as long as needed for the purpose we collected it: your account and measurements for as long as you keep your account; order and invoicing records for the period Spanish tax law requires. When data is no longer needed, we delete or anonymise it.
We take the security of your data seriously and apply appropriate technical and organisational measures to protect it against loss, misuse and unauthorised access. Payments are handled by Stripe and the site is hosted by Wix, both of which maintain recognised security standards. No method of transmission or storage is ever completely secure, but we work only with trusted providers and limit access to your data to what is necessary.
This policy is governed by Spanish and EU data-protection law. It does not form part of any contract of sale.
Under the GDPR you can, at any time:
Access a copy of the data we hold about you.
Correct anything inaccurate — your details and measurements are editable in your account.
Delete your data, including one-tap erasure of your measurements.
Export your data in a portable form — you can download your measurements from your account.
Object to or restrict processing, and withdraw any consent you gave.
Complain to the Spanish Data Protection Agency (AEPD, aepd.es) if you believe we have not handled your data properly.
We use a small number of essential cookies that make the site work — keeping your session, your bag and your chosen language. These are necessary for the site to function; we do not use them to track you across other websites.
CG Couture is intended for adults. The site and our pieces are not directed at anyone under 18, and we do not knowingly collect data from minors.
We may update this policy as the atelier evolves or the law changes. The date at the top always shows the latest revision; significant changes will be made clear on this page.
We are glad to help with anything in this policy, or to action any of your rights. Write to us and a person will reply.
cg.designs.contact@gmail.com