Privacy policy

This Privacy Policy explains how soufeel.shop collects, uses, stores, shares and otherwise processes personal information when individuals visit our website, place an order, communicate with us or otherwise interact with our ecommerce services.

We take privacy seriously and aim to process personal information lawfully, fairly, securely and transparently.

This policy is intended to reflect relevant United Kingdom data-protection requirements, including the UK GDPR, Data Protection Act 2018, applicable provisions of the Privacy and Electronic Communications Regulations and relevant amendments introduced through the Data (Use and Access) Act 2025.

For privacy enquiries, contact:

Email: info@soufeel.shop

Who Is Responsible for Your Personal Information

For personal information processed in connection with the operation of soufeel.shop, the operator of soufeel.shop determines the purposes and means of relevant processing to the extent that it acts as the data controller.

Shopify and other service providers may also process information in accordance with their respective roles, contractual arrangements and legal obligations.

Personal Information We May Collect

Depending on how you interact with the website, we may collect or receive information including:

Identity Information

This may include:

• Name;
• Account username;
• Customer identifier; and
• Other information used to identify an account or order.

Contact Information

This may include:

• Email address;
• Telephone number where provided;
• Billing information; and
• Delivery information.

Order and Transaction Information

This may include:

• Products purchased;
• Order value;
• Order number;
• Transaction status;
• Payment method category;
• Shipping method;
• Return information;
• Refund information;
• Customer communications; and
• Order history.

Payment Information

Payment transactions may be processed through Shopify, payment gateways, financial institutions or other authorised payment providers.

We do not encourage customers to send complete credit-card numbers, passwords or payment credentials by ordinary email.

Depending on the payment arrangement, payment providers may receive payment-card or banking information directly.

Device and Technical Information

When customers use our website, technical information may be collected automatically, including:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Language;
• Device identifiers;
• Approximate location derived from technical information;
• Referring pages;
• Pages viewed;
• Interaction information; and
• Cookie or similar-technology identifiers.

Communications

When customers contact us, we may process:

• Email correspondence;
• Customer-service enquiries;
• Complaints;
• Return requests;
• Feedback; and
• Other information voluntarily supplied.

Personalisation Content

Where products allow customer-provided personalisation, we may process information supplied for producing the product, such as:

• Names;
• Text;
• Dates;
• Photographs;
• Images;
• Designs;
• Messages; or
• Other customer-provided content.

Customers should avoid supplying unnecessary sensitive personal information in personalised content.

How We Collect Information

Information may be collected:

• Directly from customers;
• Through website interactions;
• Through checkout;
• Through customer accounts;
• Through cookies and similar technologies;
• From payment providers;
• From delivery and fulfilment providers;
• From fraud-prevention providers;
• From Shopify;
• From marketing and analytics providers where lawfully used; and
• From other service providers involved in operating the store.

Purposes for Which We Use Personal Information

We may process personal information for purposes including:

• Providing our website;
• Processing and fulfilling orders;
• Producing personalised goods;
• Processing payments;
• Sending order confirmations;
• Delivering products;
• Providing tracking information;
• Managing returns and refunds;
• Responding to enquiries;
• Managing customer accounts;
• Preventing fraud;
• Protecting website security;
• Maintaining business records;
• Complying with legal obligations;
• Establishing, exercising or defending legal claims;
• Improving store functionality;
• Analysing website performance;
• Providing customer service;
• Managing consent preferences; and
• Conducting lawful marketing.

Lawful Bases for Processing

Depending on the processing activity, we may rely on one or more lawful bases recognised under UK data-protection law.

Contract

We may process information where necessary to enter into or perform a contract with the customer.

Examples include:

• Processing an order;
• Taking payment;
• Producing personalised goods;
• Arranging delivery;
• Processing returns; and
• Providing customer service connected with a purchase.

Legal Obligation

We may process information where necessary to comply with a legal obligation, including obligations involving:

• Tax;
• Accounting;
• Consumer protection;
• Fraud prevention;
• Regulatory requests; and
• Record keeping.

Legitimate Interests

We may process information where necessary for legitimate business interests, provided those interests are not overridden by individuals' rights and interests.

Such interests may include:

• Securing our website;
• Preventing fraud and abuse;
• Improving services;
• Understanding store performance;
• Managing business operations;
• Responding to appropriate enquiries; and
• Establishing or defending legal claims.

Consent

Where consent is the appropriate lawful basis, we may rely on consent for activities such as certain marketing or non-essential storage/access technologies.

Where processing depends on consent, consent may be withdrawn at any time, without affecting processing lawfully undertaken before withdrawal.

Shopify

Our ecommerce store may use Shopify infrastructure to provide functions including:

• Hosting;
• Shopping-cart functionality;
• Checkout;
• Order management;
• Payment-related services;
• Security;
• Fraud prevention;
• Analytics; and
• Customer-management functionality.

Information processed through the store may therefore be processed by Shopify and its authorised service providers in connection with providing ecommerce services.

Cookies and Similar Technologies

soufeel.shop may use cookies, pixels, local storage, tags and comparable storage or access technologies.

These technologies may support:

• Shopping-cart functionality;
• Checkout;
• Authentication;
• Security;
• Fraud prevention;
• Language preferences;
• Store preferences;
• Analytics;
• Performance measurement; and
• Advertising where lawfully enabled.

UK rules generally require users to receive appropriate information about storage/access technologies, while consent is required for technologies that do not fall within an applicable statutory exception. The 2025 data-law reforms expanded certain exceptions, including qualifying statistical and functionality uses subject to legal conditions.

Where consent is required, customers will be provided with appropriate consent controls.

Marketing Communications

Where permitted by applicable law, we may send information concerning products, promotions or store updates.

Where consent is legally required, marketing will be sent on the basis of appropriate consent.

Customers may unsubscribe from electronic marketing by using an available unsubscribe mechanism or contacting:

info@soufeel.shop

Opting out of marketing does not prevent us from sending necessary transactional communications relating to an order, account, return, refund or security matter.

Sharing Personal Information

We may share personal information where reasonably necessary with categories of recipients including:

• Shopify;
• Payment processors;
• Banks and payment networks;
• Fulfilment providers;
• Manufacturers where required to produce an order;
• Shipping carriers;
• Logistics providers;
• Cloud and hosting providers;
• Customer-service providers;
• IT and cybersecurity providers;
• Fraud-prevention providers;
• Analytics providers;
• Marketing providers where lawfully used;
• Professional advisers;
• Auditors;
• Insurers;
• Regulators;
• Courts;
• Law-enforcement bodies; and
• Other parties where disclosure is legally required.

We do not intend to sell personal information to third parties merely in exchange for money.

International Transfers

Because ecommerce infrastructure, Shopify services, payment providers, fulfilment providers and other suppliers may operate internationally, personal information may be processed outside the United Kingdom.

Where UK data-protection rules concerning restricted international transfers apply, we aim to use an appropriate lawful transfer mechanism, such as:

• UK adequacy regulations;
• An approved contractual transfer mechanism;
• The UK International Data Transfer Agreement;
• An applicable UK Addendum; or
• Another legally recognised mechanism.

Appropriate transfer safeguards will be used where legally required.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and for legitimate legal, accounting, taxation, fraud-prevention, dispute-resolution and business-record requirements.

Retention periods may differ according to:

• Type of information;
• Nature of the transaction;
• Legal obligations;
• Contractual requirements;
• Fraud and security needs;
• Limitation periods;
• Whether a dispute exists; and
• Whether continued retention is reasonably necessary.

When personal information is no longer required, we may delete, securely destroy or anonymise it.

Data Security

We use reasonable administrative, organisational and technical measures intended to protect personal information against:

• Unauthorised access;
• Unlawful processing;
• Accidental loss;
• Destruction;
• Alteration; and
• Unauthorised disclosure.

No internet transmission or storage system can be guaranteed to be completely secure.

Customers are responsible for protecting passwords and account credentials under their control.

Your UK Data-Protection Rights

Subject to applicable conditions, exceptions and limitations, individuals may have rights including:

• Right of access – to request information about personal data we hold;
• Right to rectification – to request correction of inaccurate information;
• Right to erasure – to request deletion in qualifying circumstances;
• Right to restriction – to request restriction of certain processing;
• Right to data portability – in qualifying circumstances;
• Right to object – including objection to certain processing based on legitimate interests;
• Rights concerning automated decision-making where applicable;
• Right to withdraw consent where processing relies on consent; and
• Right to complain to the UK supervisory authority.

ICO guidance confirms that privacy information should explain purposes, lawful bases, recipients, retention criteria, international transfers and applicable individual rights.

Exercising Your Rights

To submit an appropriate privacy request, contact:

info@soufeel.shop

We may need to verify identity before responding to certain requests in order to protect personal information against unauthorised disclosure.

We will respond in accordance with applicable legal requirements.

Complaints

Customers who have concerns about our handling of personal information are encouraged to contact us first at:

info@soufeel.shop

Individuals also have the right, where applicable, to complain to the Information Commissioner's Office (ICO), the United Kingdom's data-protection regulator.

Children

Our website is intended for general ecommerce use and is not designed for children to provide personal information without appropriate authority.

Where applicable law imposes enhanced obligations concerning children's personal information, we will seek to comply with those obligations.

Third-Party Websites

Our website may contain links to websites, applications or services operated by third parties.

We are not responsible for independent third-party privacy practices.

Customers should review the privacy information provided by the relevant third party.

Changes to This Privacy Policy

We may update this Privacy Policy when necessary to reflect:

• Changes in our services;
• Changes in technology;
• Changes in processing practices;
• Legal or regulatory developments; or
• Security and operational requirements.

The current version will be made available through soufeel.shop.

Contact

For privacy enquiries:

soufeel.shop
Email: info@soufeel.shop