Privacy Policy


SHEENASHONA operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). SHEENASHONA is powered by Shopify, which enables us to provide the Services to you.
This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. For the purpose of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, SHEENASHONA is the Data Controller of your personal information. Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge the collection, use, and disclosure of your information as described in this policy.

1. Personal Information We Collect or Process

When we use the term "personal information," we are referring to "personal data" as defined under the UK GDPR—information that identifies or can reasonably be linked to you. We may collect or process the following categories of personal information depending on how you interact with our store:
  • Contact Details: Your name, billing address, shipping address, phone number, and email address.
  • Financial Information: Credit card, debit card, or other payment account details, transaction records, and payment confirmations.
  • Account Information: Your username, password, security questions, and saved preferences or settings.
  • Transaction Information: Items you view, put in your cart, add to your wishlist, purchase, return, exchange, or cancel.
  • Communications: Information you include in customer support inquiries, emails, or chat logs.
  • Device and Technical Information: IP address, browser type, device identifiers, network connection type, and technical usage details.

2. Lawful Bases for Processing Your Data

Under the UK GDPR, we must have a valid legal basis to process your personal data. Below is how we map our processing activities to the strict legal gateways required by UK law:

Performance of a Contract
We process your personal information because it is necessary to fulfill our contract with you or to take steps at your request before entering into a contract. This includes:
  • Processing payments and fulfilling orders.
  • Managing your customer account, shipping arrangements, and handling returns or exchanges.
  • Providing essential account alerts and transaction notifications.
Legitimate Interests
We process your data where it is necessary for our legitimate business interests, provided those interests do not override your fundamental rights and freedoms. This includes:
  • Tailoring and optimizing our store interface to improve your shopping experience.
  • Detecting, preventing, and investigating fraud, unauthorized activities, or malicious security threats.
  • Responding to customer service inquiries and managing our business-to-consumer and business-to-business relationship.
Consent
Where required by the Privacy and Electronic Communications Regulations (PECR), we rely on your explicit consent. This includes:
  • Sending you direct marketing communications via email or SMS text message.
  • Deploying non-essential cookies (such as tracking pixels and analytics tools) on your browser. Note: You can withdraw this consent at any time.
Legal Obligation
We process your personal data when it is necessary to comply with legal and regulatory obligations to which we are subject in the UK, such as tax reporting, corporate accounting, or responding to valid statutory requests from law enforcement agencies.

3. How We Collect Personal Information

We gather data from the following channels:
  • Directly from You: When you create an account, complete a checkout form, register for newsletters, or use our live chat feature.
  • Automatically via the Site: As you browse, our store automatically captures device and usage metrics through cookies, log files, and embedded web scripts in compliance with UK cookie laws.
  • From Service Providers: Partners who capture or process information on our behalf to ensure core delivery, security, or payment functionality.

4. Chat Features and Automated Assistants

When you interact with our online chat feature, it may collect your contact details, chat logs, and any contextual information shared during the session to resolve your inquiry.

Your Rights Regarding Automation: Our chat services may use technology or artificial intelligence to process initial queries. If you do not wish to interact with an automated system, you have the right under the UK GDPR to request direct human intervention at any stage. You can ask the chat to connect you directly to a staff member or contact us at customerservice@sheenashona.com.

5. Sharing and Disclosing Personal Data

We only share your personal data with third parties where necessary to provide the Services, fulfill legal obligations, or with your clear consent. Recipients include:
  • Shopify: Our core e-commerce hosting provider, which processes data to deliver secure store infrastructure.
  • Core Operational Contractors: Payment processors (e.g., Stripe, PayPal), logistics providers, fulfillment houses, and delivery couriers.
  • Marketing Partners: Where you have explicitly opted in via our cookie banner, we pass limited data to networks to deliver targeted advertisements based on your preferences.
  • Regulatory & Legal Enforcement Bodies: If mandated by statutory law enforcement requests or to defend our corporate rights.

6. International Data Transfers

As SHEENASHONA is powered by Shopify, information you submit will be transmitted to, stored, and processed by Shopify outside the United Kingdom (including in Canada and the United States).
To protect your information, any transfer of personal data outside the UK relies on valid, legally approved transfer mechanisms recognized by the UK Government. This includes Canada’s statutory adequacy decision or the implementation of the UK International Data Transfer Addendum (IDTA) combined with the European Commission's Standard Contractual Clauses (SCCs).

7. Data Retention

We do not retain your personal data for longer than is necessary to satisfy the specific purposes for which it was gathered, or as required by applicable UK tax, financial, or consumer protection law. For example, corporate tax laws in the UK generally require us to maintain basic transaction history and invoice records for up to 6 years following the end of the relevant tax year.

8. Your Legal Rights Under UK Law

If you are a resident of the United Kingdom, you have comprehensive rights under the UK GDPR regarding how your data is handled. You may exercise these rights free of charge by contacting us directly:
  • Right of Access: You can request a clear copy of all personal data we hold about you.
  • Right to Rectification: You can demand that we correct or complete inaccurate or outdated information.
  • Right to Erasure ("Right to be Forgotten"): You can request that we delete your personal data under certain conditions (e.g., if it is no longer required for a transaction or tax compliance).
  • Right to Restrict or Object to Processing: You can request that we freeze or halt the processing of your data based on legitimate interests or for direct marketing purposes.
  • Right to Data Portability: You can request that we transfer your personal data to you or another service provider in a structured, machine-readable format.
  • Right to Withdraw Consent: Where we rely on your consent (such as for newsletter marketing), you can withdraw it at any time via the unsubscribe links provided or by emailing us.

Global Privacy Control (GPC)

We recognize Global Privacy Control (GPC) signals transmitted by your browser. If our platform detects a valid GPC signal from a UK visitor, it will automatically opt that browser out of non-essential marketing tracking and targeted advertising scripts. To learn more about setting up GPC, visit globalprivacycontrol.org.

9. Third-Party Links

Our Services may provide links to external websites or third-party digital platforms. We do not maintain or oversee these platforms and are not responsible for their independent privacy configurations or reliability. We highly encourage you to review their specific policies prior to interacting with them.

10. Complaints and Regulatory Redress

If you have questions or complaints regarding our handling of your personal data, please contact us first using our details below so we can address your concerns.
If you remain unsatisfied with our response, you have the absolute statutory right to lodge an official complaint at any time with the UK’s independent data protection regulator:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF 
Helpline: 0303 123 1113
Website: https://ico.org.uk

11. Contact Details

To exercise any of your legal rights, update your profile data, or clarify items within this policy, please contact us at:
  • Email: customerservice@sheenashona.com
  • Postal Address: 37 Fairway View, Prestwick, Scotland, UK, KA9 2SZ, GB

Last updated: October 22, 2026