Privacy Policy

Privacy Notice

Who we are

This privacy notice is issued by Elia Boutique LTD (“we”, “our”, “us”).

Data Controller: Elia Boutique LTD
Email: info@elia.boutique
Website: https://elia.boutique

We are responsible for deciding how we hold and use personal data about you.

Introduction

This privacy notice explains how we collect, use, store and protect your personal data when you:

  • visit our website

  • place an order or subscribe to our services

  • create an account

  • contact us

  • interact with our marketing or advertising

“Personal data” means any information that can identify you directly or indirectly.

We are committed to protecting your privacy and handling your personal data transparently and securely.

This notice complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The personal data we collect

We may collect, use, store and transfer the following categories of personal data:

Identity Data

  • First name, last name, title

  • Date of birth (where provided)

  • Account identifiers

Contact Data

  • Billing and delivery addresses

  • Email address

  • Telephone number

Transaction Data

  • Order details

  • Subscription information

  • Payment confirmations (we do not store card details)

Technical Data

  • IP address

  • Browser type and version

  • Device information

  • Operating system

  • Time zone and approximate location

Marketing & Communications Data

  • Marketing preferences

  • Communication preferences

  • Engagement with emails, ads and website content

Usage Data

  • Pages visited

  • Products viewed

  • Interactions with our website

We may also create aggregated or anonymised data for analytics and reporting. This data does not identify you and is not personal data under UK GDPR.

Special category data

We do not collect special category personal data (such as data about health, race, religion, sexual orientation, or political views).

If you do not provide required data

If you do not provide personal data required to fulfil a contract (for example, delivery details), we may be unable to provide our products or services. We will inform you if this is the case.

Lawful bases for processing your data

Under UK GDPR, we must have a lawful basis to process your data. We rely on the following:

Contract

Where processing is necessary to:

  • process orders and subscriptions

  • manage your account

  • deliver products

  • provide customer support

Consent

Where you have:

  • opted in to marketing communications

  • accepted cookies (where required)

You may withdraw consent at any time by contacting info@elia.boutique or using unsubscribe links.

Legitimate Interests

Where processing is necessary to:

  • operate and improve our business

  • prevent fraud

  • respond to enquiries

  • analyse website performance

  • deliver relevant advertising

We ensure our legitimate interests do not override your rights.

Legal Obligation

Where processing is required to:

  • comply with tax and accounting laws

  • respond to lawful requests from authorities

How we use your personal data

We use your data to:

  • process and fulfil orders and subscriptions

  • manage accounts and preferences

  • communicate with you about orders or services

  • provide customer support

  • send marketing communications (where permitted)

  • improve our website and services

  • measure advertising performance

  • prevent fraud and misuse

Who we share your data with

We only share your data where necessary, including with:

Service providers (processors):

  • Shopify (website, hosting, subscriptions, internal fraud tools)

  • Shopify Email (email marketing)

  • Payment processors (e.g. Stripe / Shopify Payments – card data is handled securely by them)

  • Delivery partners (e.g. Royal Mail, USPS)

  • Customer support platforms (Re:amaze, Zoho)

  • Analytics providers (Google Analytics 4)

  • Advertising platforms (Meta, TikTok, Google Ads)

These providers may only process data on our instructions and must keep it secure.

International data transfers

Some of our service providers may process data outside the UK.

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:

  • UK adequacy regulations; or

  • UK International Data Transfer Agreements (IDTA) or approved contractual clauses; and

  • appropriate risk assessments where required

Cookies and similar technologies

We use cookies and similar technologies to:

  • ensure website functionality

  • analyse website usage

  • measure marketing effectiveness

  • personalise content and advertising

You can manage your cookie preferences via your browser settings and our cookie banner. Blocking cookies may affect site functionality.

Marketing and advertising

We may show you ads on platforms such as Meta, TikTok and Google based on your interactions with our website.

This may involve the use of cookies or similar technologies. You can manage advertising preferences via your browser or platform settings.

Publicly visible content

If you leave reviews or submit content publicly, that information may be visible to others. We do not control how third parties use publicly available information.

Data retention

We retain personal data only for as long as necessary to:

  • fulfil the purposes it was collected for

  • comply with legal, accounting and tax obligations

  • support legal claims or defences

Retention periods vary depending on the type of data.

Your rights under UK GDPR

You have the right to:

  • access your personal data

  • correct inaccurate data

  • request erasure of your data

  • restrict processing

  • object to processing

  • request data portability

  • withdraw consent at any time

  • lodge a complaint with the ICO

You can exercise your rights by contacting info@elia.boutique.

Complaints

If you are unhappy with how we handle your data, please contact us first at info@elia.boutique.

You also have the right to complain to the Information Commissioner’s Office (ICO):
https://ico.org.uk/make-a-complaint/

Security

We use appropriate technical and organisational measures, including SSL encryption, to protect your personal data.

Changes to this privacy notice

We may update this notice from time to time. The latest version will always be available on our website.

Contact us

If you have any questions about this privacy notice or how we handle your personal data, please contact:

📧 info@elia.boutique