Privacy policy

This Privacy Policy describes how sweetfashionwholesalex.shop collects, uses, shares, protects and otherwise processes personal information when you visit our website, communicate with us, create an account where available, place an order or otherwise use our services.

For privacy-related questions or requests, contact:

info@sweetfashionwholesalex.shop

We seek to handle personal information in accordance with applicable United Kingdom data-protection and privacy requirements, including the UK GDPR, the Data Protection Act 2018 and applicable electronic-communications rules.

Providing individuals with clear privacy information concerning purposes, retention and sharing is a core UK GDPR transparency requirement.

1. Personal Information We May Collect

Depending on how you interact with our website, we may collect information including:

Identity Information

• Name;
• Username or account identifier;
• Customer number; and
• Other identifying information you voluntarily provide.

Contact Information

• Email address;
• Telephone number;
• Billing address; and
• Delivery address.

Order Information

• Products ordered;
• Product options;
• Order value;
• Order date;
• Order status;
• Delivery information;
• Returns;
• Refunds; and
• Customer-service history.

Payment Information

Payments may be processed through Shopify, Shopify Payments or other payment service providers.

We may receive transaction-related information such as payment status, transaction identifiers and limited payment details necessary to manage an order.

Full payment-card information may be handled directly by the applicable payment processor rather than stored by us.

Technical Information

When you access the website, we or our service providers may collect:

• IP address;
• Device identifiers;
• Browser type;
• Operating system;
• Device type;
• Language;
• Approximate location derived from technical information;
• Referring pages;
• Pages visited;
• Interaction data;
• Session information; and
• Cookie or similar technology data.

Communications

If you contact us, we may retain:

• Emails;
• Customer-service communications;
• Complaints;
• Return requests;
• Product enquiries; and
• Other information you choose to provide.

2. How We Use Personal Information

We may process personal information to:

• Operate our website;
• Provide products and services;
• Process orders;
• Take and manage payments;
• Confirm transactions;
• Arrange fulfilment;
• Arrange shipping and delivery;
• Provide order tracking;
• Process returns and refunds;
• Respond to customer questions;
• Maintain customer accounts;
• Detect and prevent fraud;
• Protect our website and systems;
• Comply with legal and regulatory obligations;
• Maintain accounting and transaction records;
• Establish, exercise or defend legal claims;
• Improve website functionality;
• Analyse performance;
• Understand legitimate business trends;
• Manage customer relationships; and
• Send marketing communications where legally permitted.

3. Lawful Bases for Processing

Where UK data-protection law requires a lawful basis, the basis will depend on why the information is being processed.

We may rely on:

Contract

Processing may be necessary to take steps at your request before entering into a contract or to perform a contract with you, including processing an order, accepting payment and arranging delivery.

Legal Obligation

We may process information where necessary to comply with applicable tax, accounting, fraud-prevention, consumer-protection or other legal obligations.

Legitimate Interests

We may process information where necessary for legitimate business interests, provided those interests are not overridden by your rights and interests.

Examples may include:

• Securing our website;
• Preventing fraud;
• Improving customer service;
• Managing business operations;
• Defending legal claims; and
• Understanding website performance.

The ICO requires organisations relying on legitimate interests to assess and appropriately explain those interests.

Consent

Where consent is the appropriate legal basis, such as for certain marketing or non-essential tracking activities, we will seek appropriate consent.

Consent can be withdrawn where applicable.

4. Shopify and Service Providers

Our store may be hosted and operated using Shopify ecommerce technology.

We may share information with service providers where reasonably necessary for legitimate ecommerce operations, including providers of:

• Hosting;
• Ecommerce infrastructure;
• Payment processing;
• Fraud prevention;
• Fulfilment;
• Warehousing;
• Shipping;
• Delivery;
• Customer communications;
• Analytics;
• Marketing;
• Information technology;
• Security; and
• Professional services.

Service providers may process information according to their roles, contractual obligations and applicable law.

5. Payment Processing

Payment information may be transmitted securely to the payment provider selected during checkout.

Payment processors may independently collect and process information necessary to:

• Authorise transactions;
• Prevent fraud;
• Comply with financial regulations;
• Process refunds; and
• Resolve disputes.

Their processing may also be governed by their own privacy notices.

6. Cookies and Similar Technologies

sweetfashionwholesalex.shop may use cookies and similar storage or access technologies for purposes such as:

• Maintaining shopping-cart functionality;
• Remembering preferences;
• Securing sessions;
• Authenticating users;
• Measuring website performance;
• Understanding website usage;
• Supporting analytics; and
• Supporting advertising or marketing where permitted.

UK electronic-communications rules apply to cookies and a broader range of storage/access technologies. The ICO's current guidance states that non-essential technologies generally require appropriate consent unless a legal exemption applies, and users should be able to enable or disable non-essential technologies.

Where required, non-essential cookies and similar technologies will be subject to the choices presented through our consent-management system.

7. Marketing Communications

Where permitted by law, we may send marketing communications concerning products, promotions or store updates.

You can unsubscribe from marketing emails by using an available unsubscribe mechanism or contacting:

info@sweetfashionwholesalex.shop

UK electronic-marketing rules operate alongside UK GDPR requirements.

Unsubscribing from marketing does not prevent us from sending transactional communications necessary to manage an existing order, account or customer-service request.

8. Sharing Personal Information

We may share personal information with:

• Shopify;
• Payment providers;
• Fulfilment providers;
• Carriers and logistics companies;
• Fraud-prevention providers;
• Technology and hosting providers;
• Analytics providers;
• Marketing providers where permitted;
• Professional advisers;
• Regulators;
• Government authorities;
• Courts; and
• Law-enforcement bodies where legally required.

We do not disclose personal information merely because a third party requests it. Disclosure will be made only where appropriate for a legitimate purpose or legally required.

9. International Transfers

Some service providers may process personal information outside the United Kingdom.

Where UK data-protection rules concerning international transfers apply, we will seek to use an applicable lawful transfer mechanism or other permitted safeguard.

Such mechanisms may include adequacy regulations, appropriate contractual safeguards or another mechanism recognised by applicable law.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and for legitimate legal, accounting, tax, fraud-prevention, dispute-resolution and business-record requirements.

Different categories of information may be retained for different periods.

We will consider factors such as:

• The purpose of processing;
• The nature of the information;
• Contractual requirements;
• Legal obligations;
• Limitation periods;
• Fraud risks; and
• Whether information remains necessary.

11. Information Security

We use reasonable administrative, organisational and technical measures intended to protect personal information against:

• Unauthorised access;
• Accidental loss;
• Misuse;
• Alteration;
• Unlawful disclosure; and
• Destruction.

No internet-based service can guarantee absolute security.

Customers should protect account credentials and should not share passwords or security codes with unauthorised persons.

12. Personal Data Breaches

Where a personal data breach occurs, we will assess the incident and take appropriate steps in accordance with applicable law.

Where the statutory reporting threshold is met, UK rules require reportable personal data breaches to be notified to the ICO without undue delay and, where applicable, within 72 hours after awareness.

13. Your Privacy Rights

Depending on the circumstances and legal basis for processing, individuals may have rights including:

• The right to be informed;
• The right of access;
• The right to rectification;
• The right to erasure;
• The right to restriction of processing;
• The right to data portability;
• The right to object;
• Rights concerning certain automated decision-making; and
• The right to withdraw consent where processing is based on consent.

The availability of particular rights depends on the circumstances and applicable legal rules. The ICO identifies access, rectification, erasure, restriction, objection and portability among the principal individual rights under UK GDPR.

14. Exercising Your Rights

To make a privacy request, contact:

info@sweetfashionwholesalex.shop

We may need to request reasonable information to verify your identity before completing certain requests.

We will respond within the timeframe required by applicable law.

15. Complaints

If you have concerns about our handling of your personal information, please first contact:

info@sweetfashionwholesalex.shop

You may also have the right to complain to the Information Commissioner's Office (ICO), the United Kingdom's data-protection regulator.

16. Children's Privacy

Our website is intended for ordinary ecommerce use and is not designed to intentionally collect personal information from children where parental or guardian involvement would legally be required.

If you believe a child has provided personal information inappropriately, contact us.

17. Third-Party Links

Our website may contain links to third-party websites or services.

We are not responsible for third-party privacy practices.

Customers should review the privacy information of third-party services before providing personal information directly to them.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes to our services;
• Technology changes;
• Legal developments;
• Regulatory requirements; or
• Changes to our data-processing practices.

The updated version will be published on our website with a revised effective date where appropriate.

19. Contact

For privacy enquiries:

sweetfashionwholesalex.shop
Email: info@sweetfashionwholesalex.shop