Your information

10 September 2026

The Art of Elegance is the data controller responsible for your personal information.

• Business name: [REGISTERED BUSINESS NAME]
• Registered address: [REGISTERED ADDRESS]
• Contact: hello@artofelegance.co.uk

We collect only what we need to run the shop and serve you.

• When you place an order — name, delivery address, billing address, email address and phone number (for delivery updates); details of the items you purchase and your order history. Payment is handled entirely by our payment processor, Stripe. We never see or store your full card details.
• When you subscribe to our mailing list — your email address only.
• When you contact us — your name, email address and the contents of your message.
• When you browse the site — technical information such as your IP address, browser type and pages visited, collected through cookies and analytics tools (see section 8).

Under UK GDPR, we must have a lawful basis for each use of your data. We will never sell your personal information.

We share your data only with the service providers needed to run the shop:

• Stripe — payment processing.
• [Klarna — if instalment payments are offered] — instalment payment processing (Klarna acts as its own data controller for credit decisions; see Klarna's privacy notice).
• Delivery carriers (e.g. Royal Mail, DPD) — to deliver your order.
• [EMAIL/NEWSLETTER PROVIDER — e.g. Mailchimp, Klaviyo] — to send emails you have opted into.
• Shopify (Shopify International Ltd) — our e-commerce platform, which hosts the website and processes order and customer data on our behalf. Shopify may process data in Canada and the United States under its data protection addendum and UK-approved transfer safeguards.

Each provider is contractually required to protect your data and use it only for the service they provide to us. We may also disclose information where required by law.

Some of our providers (such as Stripe and Shopify) may process data outside the UK. Where this happens, transfers are protected by UK-approved safeguards such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision.

• Order and transaction records: 6 years after the transaction, as required for UK tax and accounting purposes.
• Mailing list data: until you unsubscribe or ask us to delete it.
• Enquiry correspondence: up to 2 years after the matter is resolved.
• Analytics data: [RETENTION PERIOD SET IN YOUR ANALYTICS TOOL — GA4 default is 14 months].

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your data (where we have no legal duty to keep it).
• Restriction — ask us to limit how we use your data.
• Portability — receive your data in a portable format.
• Objection — object to processing based on legitimate interests, and to direct marketing at any time.
• Withdraw consent — where processing is based on consent, withdraw it at any time (e.g. unsubscribe from emails via the link in any email or by contacting us).

To exercise any of these rights, email hello@artofelegance.co.uk. We will respond within one month.

If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve your concern first.

Our website uses:

• Essential cookies — required for the site to function (e.g. keeping items in your bag, processing checkout). These do not require consent.
• Analytics cookies — [e.g. Google Analytics] help us understand how visitors use the site. These are set only with your consent, which you can give or refuse via the cookie banner shown on your first visit, and change at any time via the "Manage cookie preferences" link in the website footer.
• [Marketing cookies — only if you use Meta Pixel, TikTok Pixel, etc.] — used to measure the effectiveness of our advertising. Set only with your consent.

We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls, and reputable third-party providers. Payment details are handled exclusively by Stripe under PCI-DSS standards.

Our website and products are not directed at children under 16, and we do not knowingly collect their data.

We may update this policy from time to time. The latest version will always be available on this page, with the date of the most recent update shown at the top.