Privacy policy
This Privacy Policy explains how saintbernarda.shop collects, uses, stores, shares, and otherwise processes personal information when you visit our website, purchase products, communicate with us, or otherwise interact with our services.
We take privacy seriously and aim to process personal information responsibly, transparently, and securely.
UK privacy requirements have been updated by the Data (Use and Access) Act 2025, with important provisions commencing on 19 June 2026. The ICO continues to publish updated guidance reflecting those changes.
1. Who We Are
This online store is operated under the name:
saintbernarda.shop
For privacy-related enquiries, contact:
Email: info@saintbernarda.shop
2. Personal Information We Collect
Depending on how you interact with our store, we may collect information including:
Identity Information
- Name;
- Customer account information; and
- Other identifiers connected with your order.
Contact Information
- Email address;
- Telephone number where provided;
- Billing information; and
- Delivery information.
Order Information
- Products purchased;
- Order number;
- Order value;
- Discounts;
- Returns;
- Refunds;
- Delivery information; and
- Customer service history.
Payment and Transaction Information
Payments may be processed by Shopify and/or authorised third-party payment providers.
We may receive transaction-related information such as:
- Payment status;
- Payment method type;
- Transaction reference;
- Billing details; and
- Fraud-prevention information.
We do not require customers to send full payment-card credentials by ordinary email.
Device and Technical Information
We or our service providers may collect:
- IP address;
- Browser type;
- Device type;
- Operating system;
- Cookie identifiers;
- Website activity;
- Pages viewed;
- Referral information; and
- Technical diagnostic information.
Customer Communications
When you contact us, we may collect:
- Your email address;
- The content of your message;
- Order information;
- Customer support history; and
- Documents or photographs you provide.
3. How We Collect Information
Personal information may be collected:
- Directly from you;
- Through the Shopify platform;
- Through checkout;
- Through cookies and similar technologies;
- From payment providers;
- From shipping and logistics providers;
- From fraud-prevention providers;
- From analytics providers; and
- From other service providers involved in operating the store.
4. Why We Use Personal Information
We may process personal information to:
- Provide our website;
- Process purchases;
- Accept and verify payments;
- Fulfil orders;
- Arrange shipping;
- Provide tracking information;
- Process returns and refunds;
- Respond to customer enquiries;
- Provide customer support;
- Detect and prevent fraud;
- Protect the website and customers;
- Maintain business records;
- Improve our services;
- Analyse website performance;
- Communicate important order information;
- Meet legal and regulatory obligations; and
- Send marketing communications where permitted.
5. Lawful Bases
Depending on the activity involved, we may process personal information because:
- Processing is necessary to perform a contract with you;
- Processing is necessary to take steps at your request before entering into a contract;
- Processing is required to comply with a legal obligation;
- We have a legitimate business interest that is not overridden by your rights;
- You have provided consent; or
- Another lawful basis applies.
The lawful basis may vary depending on the specific processing activity.
6. Shopify
Our store is powered by Shopify.
Shopify provides technology that allows us to operate our online store, manage orders, process store information, and provide commerce-related services.
When customers use Shopify-powered stores, Shopify may process personal data as described in Shopify's applicable privacy documentation. Shopify maintains its own consumer privacy information.
7. Service Providers
We may share relevant personal information with service providers where reasonably necessary to operate our store.
These may include:
- Shopify;
- Payment processors;
- Fraud-prevention providers;
- Delivery carriers;
- Fulfilment partners;
- Hosting and infrastructure providers;
- Customer-service systems;
- Email providers;
- Analytics providers;
- Security providers;
- Professional advisers; and
- Other technology providers.
Service providers should only receive information reasonably necessary for the services they perform.
8. Payment Processing
Payment information may be submitted directly to the applicable payment processor.
The handling of payment information may therefore be subject to the privacy and security policies of that provider as well as applicable law.
9. Shipping and Fulfilment
To deliver purchases, we may share information such as:
- Recipient name;
- Delivery address;
- Telephone number where required;
- Email address where required;
- Order contents; and
- Delivery instructions
with carriers, fulfilment providers, and other logistics partners.
10. Cookies and Similar Technologies
Our website may use cookies and similar storage or access technologies.
These technologies may be used for purposes including:
- Maintaining shopping-cart functionality;
- Remembering preferences;
- Website security;
- Checkout operation;
- Fraud prevention;
- Analytics;
- Performance measurement; and
- Advertising or marketing where permitted.
UK privacy rules concerning cookies and similar technologies are governed in part by PECR, as amended, alongside applicable data protection legislation.
Where consent is legally required for a particular technology, we aim to obtain consent before using it.
11. Marketing Communications
Where permitted, we may send marketing communications concerning products, promotions, or store news.
You can unsubscribe from marketing emails by using the unsubscribe mechanism contained in the communication or by contacting:
Your decision to stop marketing communications does not prevent us from sending non-marketing communications necessary for an existing order, transaction, security matter, or legal obligation.
12. Direct Marketing Objections
You may object to the use of your personal information for direct marketing.
The ICO confirms that individuals have a right to object to processing for direct marketing purposes.
You can exercise this preference by contacting:
13. International Processing
Because ecommerce services, cloud providers, payment processors, logistics providers, and technology providers may operate internationally, personal information may sometimes be processed outside the United Kingdom.
Where applicable law requires safeguards for an international transfer, we aim to rely on an appropriate legal transfer mechanism.
14. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including where necessary to:
- Complete transactions;
- Provide customer support;
- Maintain business and accounting records;
- Handle disputes;
- Prevent fraud;
- Enforce agreements; and
- Meet legal obligations.
Different categories of information may therefore have different retention periods.
15. Data Security
We use reasonable organisational and technical safeguards designed to protect personal information against:
- Unauthorised access;
- Accidental loss;
- Misuse;
- Disclosure;
- Alteration; and
- Destruction.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
Customers should also protect their own account credentials and devices.
16. Your Privacy Rights
Depending on applicable law and the circumstances, you may have rights concerning your personal information, including rights relating to:
- Access;
- Correction or rectification;
- Erasure;
- Restriction;
- Objection;
- Data portability; and
- Information about how your personal data is used.
The ICO identifies these among the rights that may need to be explained to individuals, depending on the relevant processing and lawful basis.
Some rights are subject to legal limitations or exceptions.
17. Exercising Your Rights
To make a privacy request, contact:
Please clearly describe your request.
We may need to verify your identity before disclosing, correcting, deleting, or otherwise acting upon personal information.
We will not request more information than reasonably necessary for verification.
18. Data Protection Complaints
If you have concerns about how we process your personal information, please contact:
We will take reasonable steps to investigate privacy complaints and respond appropriately.
In line with current UK data-protection complaint requirements, we aim to acknowledge a qualifying data-protection complaint within 30 days and respond without undue delay.
You may also have the right to raise a concern with the UK Information Commissioner's Office.
19. Children's Privacy
Our store is intended for customers who are legally capable of entering into the relevant transaction or who are purchasing with appropriate parental or guardian involvement.
We do not knowingly seek to collect children's personal information unnecessarily.
Where an online service is likely to be accessed by children, applicable UK data-protection requirements concerning children's interests will be taken into account.
20. Fraud Prevention
We may process and share limited information for fraud detection, payment verification, security, and abuse prevention.
This may include order information, device information, payment signals, delivery details, and transaction history.
21. Legal Disclosure
We may disclose information where reasonably necessary to:
- Comply with applicable law;
- Respond to lawful governmental requests;
- Enforce our agreements;
- Protect our rights;
- Protect customers;
- Investigate fraud or security incidents; or
- Establish, exercise, or defend legal claims.
22. Business Changes
If the operation or ownership of saintbernarda.shop is reorganised, transferred, sold, merged, or otherwise changed, information may be transferred as part of the relevant transaction where permitted by applicable law.
23. Third-Party Websites
Our website may contain links to websites operated by third parties.
We are not responsible for the privacy practices of independent third-party websites.
Customers should review the privacy policy of any third-party service they choose to use.
24. Changes to This Privacy Policy
We may update this Privacy Policy where reasonably necessary to reflect:
- Changes to our services;
- Changes to technology;
- Changes to processing practices;
- Security developments; or
- Legal or regulatory developments.
The updated version will be published on the website with an updated revision date where appropriate.
25. Contact Us
For privacy questions, requests, or complaints:
saintbernarda.shop
Email: info@saintbernarda.shop
- Choosing a selection results in a full page refresh.