This Privacy Policy explains how we collect, use and protect your personal data when you visit glamourposh.online or buy from us. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
The data controller is Glamour Posh, a sole trader business.
32 Cross Flatts Place
Leeds LS11 7JN, UK
business@glamourposh.online
2. The personal data we collect
- Identity and contact data: your name, email address, phone number, delivery address and billing address.
- Order data: what you bought, order dates and amounts, delivery details, returns and refunds.
- Payment data: payments are handled by Stripe. We receive confirmation of payment and the last four digits and type of your card, but never your full card number or security code.
- Account data: if you create an account, your login details and order history.
- Communications: messages you send us by the contact form or email, and our replies.
- Technical data: IP address, browser type and version, device information, and pages you visit, collected through cookies and similar technologies.
- Marketing preferences: if we ever offer marketing emails, whether you have chosen to receive them.
We do not knowingly collect special category data (such as health data) or data about criminal convictions.
3. How we collect your data
We collect data directly from you when you place an order, create an account or contact us, and automatically through cookies and server logs when you use the site. We also receive confirmation of payments from Stripe and delivery updates from couriers.
4. Why we use your data and our lawful bases
| To process and deliver your order, take payment, and handle returns and refunds | Contract |
|---|---|
| To reply to your questions and provide customer support | Contract and legitimate interests |
| To keep accounting and tax records | Legal obligation |
| To prevent fraud and keep our website secure | Legitimate interests |
| To improve our website and products | Legitimate interests, or consent for non-essential cookies |
| To send you marketing emails, if we offer them | Consent. You can withdraw it at any time |
| To establish, exercise or defend legal claims | Legitimate interests and legal obligation |
We do not use your data for automated decision-making or profiling that has legal or similarly significant effects on you.
5. Who we share your data with
We share your data only where needed, with:
- payment providers (Stripe);
- couriers and delivery partners, so they can deliver your order;
- our website hosting, email and IT service providers;
- accountants and professional advisers;
- fraud prevention agencies, regulators, law enforcement and courts where the law requires it.
These providers act on our instructions or have their own legal obligations. We do not sell your personal data.
6. International transfers
Some of our providers, such as Stripe, may process data outside the UK. Where they do, we rely on adequacy regulations or appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to standard contractual clauses.
7. How long we keep your data
| Order and accounting records | 6 years after the end of the financial year, for tax and legal purposes |
|---|---|
| Customer account data | Until you ask us to delete the account, or after a long period of inactivity |
| Support emails and contact form messages | Up to 2 years after the matter is closed |
| Marketing preferences, if used | Until you unsubscribe |
| Website technical data | Up to 26 months, or as set by the cookie |
8. Data security
We use appropriate technical and organisational measures to protect your data, including HTTPS encryption, access controls and trusted providers. No online system is completely secure, so please use a strong, unique password for any account. If a data breach is likely to put your rights at risk, we will tell you and the Information Commissioner’s Office as required by law.
9. Your rights
Under UK data protection law you have the right to:
- Access the personal data we hold about you;
- Correct data that is inaccurate or incomplete;
- Erase your data in some circumstances;
- Restrict how we use your data in some circumstances;
- Object to processing based on legitimate interests, and to direct marketing at any time;
- Data portability: receive your data in a portable format where it applies;
- Withdraw consent at any time where we rely on consent.
To use these rights, email business@glamourposh.online. We will respond within one month. We may need to confirm your identity first. You will not normally pay a fee.
10. Cookies
Cookies are small files stored on your device. We use:
- Strictly necessary cookies to make the site work, such as remembering your basket and keeping checkout secure. These do not need consent.
- Analytics or marketing cookies only if we add them. We will ask for your consent first, and you can change your mind at any time.
You can also block or delete cookies in your browser settings, but parts of the site, such as your basket, may then stop working.
11. Children
Our website is not aimed at children, and we do not knowingly collect data from children under 13. If you believe a child has given us their data, contact us and we will delete it.
12. Links to other websites
Our site may link to other websites, such as Stripe or couriers. We are not responsible for their privacy practices, so please read their policies.
13. Changes to this policy
We may update this policy from time to time. The latest version is always on this page, with the date below.
14. Complaints
Please contact us first so we can try to put things right. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk, telephone 0303 123 1113.
Last updated: 29 October 2026