Privacy policy

Privacy Policy

Last Updated: 11 September 2026

At Winsome Glam, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and share your personal data when you visit our website, place an order, contact us or otherwise interact with our services.

This policy is designed to comply with applicable UK data protection laws, including the UK GDPR, the Data Protection Act 2018 and, where applicable, the Privacy and Electronic Communications Regulations.

1. Who We Are

For the purposes of UK data protection law, the data controller is:

Business Name: [LEGAL BUSINESS NAME]
Trading Name: [STORE NAME]
Business Address: [REGISTERED/BUSINESS ADDRESS]
Email: [SUPPORT EMAIL]

If you have any questions about this Privacy Policy or how your personal information is handled, please contact us using the details above.

2. Personal Information We Collect

Depending on how you interact with our website, we may collect:

  • Your name

  • Billing and delivery addresses

  • Email address

  • Telephone number

  • Order and transaction information

  • Products purchased or viewed

  • Account information, where accounts are available

  • Communications you send to us

  • Returns, refunds and customer service records

  • IP address

  • Device and browser information

  • Website usage and interaction data

  • Cookie and consent preferences

  • Marketing preferences

  • Information required for personalized products, such as names, dates or engraving text

Payment information is normally processed securely by our authorized payment providers. We do not generally receive or store complete debit or credit card details.

3. How We Collect Your Information

We may collect personal information:

  • Directly from you when you place an order

  • When you create an account

  • When you subscribe to marketing communications

  • When you contact customer service

  • When you submit product personalization details

  • Automatically through cookies and similar technologies

  • From payment, delivery, fraud-prevention and ecommerce service providers where necessary to fulfil an order or operate our business

4. How We Use Your Personal Information

We may use your personal information to:

  • Process and fulfil orders

  • Take and verify payments

  • Arrange delivery

  • Send order confirmations and delivery updates

  • Process returns, exchanges and refunds

  • Produce personalized or engraved products

  • Respond to enquiries and customer service requests

  • Prevent fraud and protect our website

  • Maintain accounting, tax and business records

  • Improve our website, products and customer experience

  • Analyse website performance

  • Send marketing communications where legally permitted

  • Comply with our legal and regulatory obligations

5. Our Lawful Bases for Processing

Depending on the purpose, we process personal data because:

Contract: Processing is necessary to accept, manage and fulfil your order.

Legal Obligation: We may need to retain or process information to comply with tax, accounting, consumer protection or other legal requirements.

Legitimate Interests: We may process information where necessary for legitimate business purposes, such as fraud prevention, website security, customer service and improving our services, provided these interests do not override your rights.

Consent: We rely on consent where required, including for certain marketing communications and non-essential cookies. You may withdraw your consent at any time.

6. Marketing Communications

Where permitted by law, we may send you information about products, promotions, launches or offers.

We will only send electronic marketing where we have an appropriate legal basis under applicable UK rules.

You can unsubscribe at any time by:

  • Clicking the unsubscribe link in a marketing email; or

  • Contacting us at [SUPPORT EMAIL].

Withdrawing marketing consent will not affect essential transactional communications relating to an existing order.

7. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Some cookies are strictly necessary for functions such as:

  • Shopping baskets

  • Checkout

  • Security

  • Payment processing

  • Remembering essential website preferences

We may also use analytics, advertising or personalization cookies.

Where legally required, non-essential cookies will not be activated until you provide consent through our cookie consent tool.

You can change or withdraw your cookie preferences using the cookie settings available on our website.

8. Who We Share Information With

We may share personal information only where reasonably necessary with trusted service providers, including:

  • Ecommerce and website providers

  • Payment processors

  • Banks and payment networks

  • Delivery and courier companies

  • Order fulfilment providers

  • Email and communications providers

  • Analytics providers

  • Advertising platforms where you have provided appropriate consent

  • IT, hosting and security providers

  • Professional advisers such as accountants or legal advisers

  • Government bodies or law enforcement agencies where legally required

These parties are permitted to use personal information only in accordance with applicable law and their contractual responsibilities.

We do not sell your personal information to third parties.

9. International Data Transfers

Some of our service providers may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we take appropriate steps to ensure the transfer is lawful and that suitable safeguards are used where required under UK data protection law.

10. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling legal, tax, accounting, fraud prevention and contractual requirements.

Order and transaction records may need to be retained for several years to satisfy legal and accounting obligations.

Marketing information is retained until you unsubscribe, withdraw consent or we determine that it is no longer appropriate to retain it.

11. Keeping Your Information Secure

We use appropriate technical and organizational measures designed to protect personal information against:

  • Unauthorized access

  • Loss

  • Misuse

  • Alteration

  • Disclosure

  • Destruction

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

12. Your Data Protection Rights

Depending on the circumstances, UK data protection law may give you the right to:

  • Request access to your personal information

  • Request correction of inaccurate information

  • Request deletion of your information

  • Request restriction of processing

  • Object to certain processing

  • Request transfer of certain personal information

  • Withdraw consent where processing is based on consent

  • Object to direct marketing

  • Make a complaint about how your information has been handled

To exercise your rights, contact us at [SUPPORT EMAIL].

We may need to verify your identity before completing certain requests.

13. Complaints to the ICO

If you are unhappy with how we have handled your personal information, please contact us first so we can try to resolve the matter.

You also have the right to complain to the UK Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

Telephone: 0303 123 1113

14. Third-Party Links

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices of third parties, and we recommend reviewing their privacy policies before submitting personal information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, technology, services or legal requirements.

The latest version will always be published on this page with the updated revision date.

16. Contact Us

For privacy-related questions or requests, contact:

[STORE NAME]
Email: [SUPPORT EMAIL]
Address: [BUSINESS ADDRESS]