Privacy policy

Introduction

This Privacy Policy explains how sofiebridal.shop collects, uses, stores, shares and otherwise processes personal information when individuals visit our website, place an order, contact us or otherwise interact with our services.

For privacy enquiries:

Email: info@sofiebridal.shop

1. Personal Information We Collect

Depending on your interaction with our store, we may collect:

Identity and Contact Information

This may include:

  • Name;
  • Email address;
  • Telephone number;
  • Billing details; and
  • Delivery details.

Order Information

This may include:

  • Products purchased;
  • Order number;
  • Order value;
  • Transaction date;
  • Delivery status;
  • Cancellation history;
  • Returns; and
  • Refunds.

Payment Information

Payments may be processed by Shopify-supported payment providers or other third-party payment processors.

We may receive information confirming whether a transaction has been authorised or completed.

We do not ask customers to provide complete payment-card security credentials through ordinary email.

Technical Information

When you access the website, certain information may be collected automatically, including:

  • IP address;
  • Browser information;
  • Device information;
  • Operating system;
  • Website interactions;
  • Referring pages;
  • Pages viewed; and
  • Date and time information.

Customer Communications

We may retain communications exchanged with customer support, including information necessary to investigate orders, returns or complaints.

Marketing Information

Where applicable, we may record:

  • Marketing preferences;
  • Subscription status;
  • Consent records; and
  • Unsubscribe requests.

2. How We Collect Information

Information may be collected:

  • Directly from you;
  • During checkout;
  • When you create an account;
  • When you contact customer support;
  • Through cookies and similar technologies;
  • Through Shopify;
  • From payment providers;
  • From delivery and fulfilment partners; and
  • From fraud-prevention or security providers.

3. Purposes of Processing

We may process personal information to:

  • Process orders;
  • Take payment;
  • Deliver purchases;
  • Communicate about orders;
  • Process cancellations;
  • Handle returns;
  • Issue refunds;
  • Respond to enquiries;
  • Maintain customer accounts;
  • Prevent fraud;
  • Protect website security;
  • Maintain business records;
  • Comply with legal requirements;
  • Establish or defend legal claims;
  • Analyse website performance;
  • Improve our services; and
  • Provide marketing where legally permitted.

4. Lawful Bases

Depending on the processing activity, we may rely on:

Contract

Where processing is necessary to take steps requested by you or perform a contract with you.

Legal Obligation

Where processing is necessary to comply with applicable legal requirements.

Legitimate Interests

Where processing is necessary for legitimate business purposes and those interests are not overridden by your rights and interests.

Such purposes may include:

  • Fraud prevention;
  • Website security;
  • Business administration;
  • Customer-service improvement; and
  • Protecting legal rights.

Consent

Where applicable law requires consent, we may rely on consent.

Where processing is based on consent, you may withdraw that consent subject to applicable law.

5. Shopify

Our ecommerce store uses Shopify technology.

Shopify and associated services may process information necessary to provide hosting, ecommerce functionality, checkout, security and related services.

Your information may therefore be processed by Shopify in accordance with the respective roles and responsibilities of the parties involved.

6. Service Providers

We may disclose information to service providers where reasonably necessary, including:

  • Shopify;
  • Payment processors;
  • Delivery providers;
  • Fulfilment providers;
  • Fraud-prevention services;
  • Website-hosting providers;
  • Customer-support providers;
  • Analytics providers;
  • Marketing providers;
  • IT providers; and
  • Professional advisers.

We aim to disclose only information reasonably necessary for the relevant purpose.

7. Legal Disclosures

Personal information may be disclosed where reasonably necessary to:

  • Comply with law;
  • Respond to a valid legal request;
  • Cooperate with regulators;
  • Prevent fraud;
  • Protect our rights;
  • Protect customers;
  • Investigate security incidents; or
  • Establish, exercise or defend legal claims.

8. Cookies and Similar Technologies

Our website may use:

  • Cookies;
  • Pixels;
  • Local storage;
  • Tracking technologies; and
  • Similar technologies.

These technologies may support:

  • Essential website functionality;
  • Shopping-cart functions;
  • Authentication;
  • Fraud prevention;
  • Security;
  • Preference storage;
  • Analytics; and
  • Marketing.

Where consent is required for non-essential technologies, appropriate privacy controls should be provided.

9. Marketing Communications

Where permitted by law, we may send marketing communications.

You can unsubscribe using the unsubscribe option provided in applicable marketing messages or by contacting:

info@sofiebridal.shop

Opting out of marketing does not prevent necessary transactional messages concerning:

  • Orders;
  • Deliveries;
  • Payments;
  • Returns;
  • Refunds; or
  • Security.

10. International Transfers

Some service providers may process personal information outside the United Kingdom.

Where applicable law requires safeguards for international transfers, appropriate lawful transfer mechanisms will be used.

These may include recognised adequacy arrangements, contractual protections or other legally available safeguards.

11. Data Retention

We retain personal information only for as long as reasonably necessary for legitimate operational and legal purposes.

Relevant factors may include:

  • Contractual requirements;
  • Accounting obligations;
  • Tax requirements;
  • Fraud prevention;
  • Dispute resolution;
  • Applicable limitation periods;
  • Customer-service needs; and
  • Legal claims.

When information is no longer required, we will take reasonable steps to delete, anonymise or securely dispose of it.

12. Security

We use reasonable organisational, administrative and technical measures intended to protect personal information from:

  • Unauthorised access;
  • Loss;
  • Destruction;
  • Misuse;
  • Alteration; and
  • Unauthorised disclosure.

No method of internet transmission or electronic storage can be guaranteed to be completely secure.

13. Your Rights

Depending on applicable circumstances, you may have rights relating to your personal information, including:

  • Access;
  • Correction;
  • Erasure;
  • Restriction;
  • Objection;
  • Data portability;
  • Withdrawal of consent;
  • Certain significant automated decisions; and
  • Complaints about how your information has been used.

Some rights are subject to statutory conditions and exemptions.

14. Exercising Your Rights

To submit a privacy request, contact:

info@sofiebridal.shop

Please provide sufficient information for us to understand your request.

We may request reasonable verification of identity before releasing personal information.

15. Data Protection Complaints

If you are dissatisfied with the way we process your personal information, you may submit a complaint electronically to:

info@sofiebridal.shop

We will take reasonable steps to facilitate privacy complaints.

We will acknowledge qualifying data-protection complaints within the period required by applicable UK data-protection law and aim to respond without undue delay.

Individuals may also have the right to raise concerns with the UK Information Commissioner's Office.

16. Children

Our services are not intended to collect unnecessary personal information from children.

Where an online service is likely to be used by children, we will take applicable legal requirements and children's interests into account.

17. Business Transfers

If our business or assets are reorganised, transferred or sold, relevant customer information may be transferred as part of that transaction where legally permitted.

Any such processing will remain subject to applicable data-protection requirements.

18. Third-Party Websites

Our website may contain links to third-party websites.

Independent third-party websites are responsible for their own privacy practices.

We recommend reviewing their privacy policies before providing personal information.

19. Changes to This Policy

We may update this Privacy Policy to reflect changes in:

  • Law;
  • Regulatory guidance;
  • Technology;
  • Shopify services;
  • Business processes; or
  • Data-processing practices.

The latest version will be published on sofiebridal.shop.

20. Contact Us

Privacy enquiries and requests should be sent to:

sofiebridal.shop
Email: info@sofiebridal.shop