Privacy policy

SHEGLEAM PRIVACY POLICY

Last updated: May 2025

At SheGleam, we are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and safeguard your data when you visit our website shegleam.com or make a purchase with us. Please read this policy carefully. If you have any questions, contact us at support@shegleam.com.

1. WHO WE ARE

SheGleam is an online jewellery retailer based in the United Kingdom. We operate under UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For the purposes of this policy, SheGleam is the data controller responsible for your personal data.

2. WHAT INFORMATION WE COLLECT

Information You Provide to Us

When you place an order, create an account, or contact us, we may collect:

  • Full name
  • Email address
  • Billing and delivery address
  • Phone number
  • Payment information (processed securely via our payment provider — we do not store card details)
  • Order history and preferences
  • Messages you send to us via email or contact forms

Information Collected Automatically

When you visit our website, we may automatically collect:

  • IP address and browser type
  • Pages viewed and time spent on our site
  • Referring website or search terms
  • Device information (mobile, desktop, operating system)
  • Cookie data (see our Cookie section below)

3. HOW WE USE YOUR INFORMATION

We use your personal data for the following purposes:

  • To process and fulfil your orders
  • To send order confirmations, shipping updates and delivery notifications
  • To respond to your enquiries and provide customer support
  • To send marketing emails if you have opted in (you can unsubscribe at any time)
  • To improve our website, products and customer experience
  • To detect and prevent fraud or unauthorised activity
  • To comply with our legal obligations under UK law

4. LEGAL BASIS FOR PROCESSING

Under UK GDPR, we process your data on the following legal grounds:

  • Contract: to fulfil your order and deliver your purchased items
  • Legitimate interests: to improve our services and prevent fraud
  • Legal obligation: to comply with applicable UK laws and regulations
  • Consent: for marketing communications (you may withdraw consent at any time)

5. SHARING YOUR INFORMATION

We do not sell or rent your personal data to third parties. We may share your information with trusted service providers who assist us in running our business, including:

  • Shopify — our e-commerce platform (data stored on secure servers)
  • Payment processors (e.g. Stripe, PayPal) — for secure transaction processing
  • Shipping and logistics partners — to deliver your orders
  • Email marketing platforms — only if you have opted in to receive communications
  • Analytics providers — to help us understand how our website is used

All third parties are required to handle your data securely and in accordance with applicable data protection laws.

6. INTERNATIONAL DATA TRANSFERS

As we use platforms such as Shopify, some of your data may be transferred and stored outside the UK or European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO).

7. DATA RETENTION

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Typically:

  • Order data is retained for 7 years for accounting and legal compliance purposes
  • Marketing data is retained until you unsubscribe or withdraw consent
  • Customer service records are retained for up to 2 years

8. YOUR RIGHTS

Under UK GDPR, you have the following rights regarding your personal data:

  • Right to access — request a copy of the data we hold about you
  • Right to rectification — request correction of inaccurate or incomplete data
  • Right to erasure — request deletion of your personal data ('right to be forgotten')
  • Right to restrict processing — request that we limit how we use your data
  • Right to data portability — receive your data in a structured, machine-readable format
  • Right to object — object to processing based on legitimate interests or for direct marketing
  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at support@shegleam.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. COOKIES

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device. We use:

  • Essential cookies — required for the website and shopping cart to function
  • Analytics cookies — to understand how visitors use our site (e.g. Google Analytics)
  • Marketing cookies — to show you relevant ads on other platforms (only with your consent)

You can manage or disable cookies through your browser settings at any time. Please note that disabling essential cookies may affect your ability to use our website.

10. SECURITY

We take the security of your personal data seriously. Our website uses SSL encryption (HTTPS) for all data transmission. Payment processing is handled by PCI-DSS compliant providers. We never store full card details on our servers. Access to your data is restricted to authorised personnel only.

11. CHILDREN'S PRIVACY

Our website and products are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at support@shegleam.com and we will delete it promptly.

12. THIRD-PARTY LINKS

Our website may contain links to third-party websites (such as social media platforms). We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies independently.

13. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by updating the date at the top of this page. We encourage you to review this policy periodically.

14. CONTACT US

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

SheGleam Email: support@shegleam.com Website: shegleam.com Based in the United Kingdom

SheGleam — Everyday Luxury, Beautifully Worn.