What information we collect

When you place an order, create an account, or contact us, we collect:

• Name, email address, and delivery address
• Payment information (processed securely by Shopify Payments — we never store your card details)
• Order history and correspondence
• Device and browsing information when you visit our website (via cookies)

If you sign up to our email list, we collect your name and email address only.

How we use your information

• To process and fulfil your order
• To send you order confirmation, dispatch, and tracking emails
• To respond to your enquiries and provide customer support
• To send you marketing emails if you have opted in (you can unsubscribe at any time)
• To improve our website and product selection
• To comply with our legal obligations

Legal basis for processing

We process your personal data on the following legal bases:

• Contract: To fulfil your order and provide customer service
• Legitimate interests: To improve our website and protect against fraud
• Consent: For marketing emails — only if you have opted in
• Legal obligation: To comply with applicable laws and regulations

Who we share your data with

We share your information only with trusted third parties necessary to fulfil your order and operate our business:

• Shopify Inc: Our e-commerce platform and payment processor
• Fulfilment partners: To process and ship your order (name and delivery address only)
• Royal Mail / delivery carriers: For order delivery and tracking
• Klaviyo / email platform: For transactional and marketing emails (if you have opted in)
• Meta Platforms: For advertising purposes if you have consented to marketing cookies

We never sell your personal data to third parties for their own marketing purposes. Ever.

Cookies

Our website uses cookies to improve your browsing experience, remember your preferences, and (with your consent) to show you relevant advertising on Meta. You can manage your cookie preferences via the cookie banner when you first visit the site, or by adjusting your browser settings.

How long we keep your data

We retain customer order information for 7 years to comply with HMRC tax record requirements. Email marketing data is retained until you unsubscribe. You can request deletion of your account and personal data at any time.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your personal data
• Object to or restrict processing of your data
• Data portability
• Withdraw consent at any time (for marketing emails)

To exercise any of these rights, email us at arlienfashion@gmail.com. We will respond within 30 days.

Complaints

If you have a concern about how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. We would always appreciate the opportunity to address your concern directly first.

Contact

Data controller: Arlien UK Ltd · arlienfashion@gmail.com