Privacy policy
Last updated: 22 September 2026
Who is responsible for your data
HEART STYLE LTD (“we”) is the controller of personal data collected through heartstyl.shop. Our company details, including our registered office, are on the Legal information page. For any privacy question or request, e-mail support@heartstyl.shop.
What we collect
- Order details: name, billing and delivery address, e-mail, phone number (optional), the items you buy, your chosen currency and language, and your order history with us.
- Payment: payment is handled by our payment provider. We receive confirmation that payment was made and limited details (such as card type and last four digits) — never your full card number.
- Messages: what you send us by e-mail, phone or the withdrawal form.
- Technical data: IP address, browser type and pages requested, recorded in server logs for security, and the essential cookies described in our Cookie policy.
We don’t use advertising or analytics cookies, we don’t sell your data, and we don’t make decisions about you by automated means.
Why we use it and our legal basis
| Purpose | Legal basis (UK GDPR / EU GDPR) |
|---|---|
| Taking and delivering your order, sending order and delivery e-mails, handling returns and refunds | Performance of a contract (Art. 6(1)(b)) |
| Keeping accounting and tax records | Legal obligation (Art. 6(1)(c)) |
| Answering your questions and complaints | Contract, or our legitimate interest in helping customers (Art. 6(1)(f)) |
| Keeping the website secure and preventing fraud | Legitimate interests (Art. 6(1)(f)) |
Who we share it with
- Supplier partners who pack and ship your order — they receive your name, delivery address, phone number (if given) and the items ordered.
- Delivery carriers and customs authorities, to deliver your parcel and clear customs.
- Our payment provider, to process payment and prevent fraud.
- Service providers who host this website and send e-mails for us, under contracts that require them to protect your data.
- Authorities, where the law requires it.
International transfers
Some of the partners above are located outside the UK and the EEA, because orders may be dispatched from other countries. Where we transfer personal data outside the UK or EEA, we rely on adequacy decisions or on standard contractual clauses (including the UK International Data Transfer Addendum) and only share what is needed to deliver your order.
How long we keep it
- Order and accounting records: 6 years after the end of the financial year, as required by UK law.
- Customer service messages: up to 2 years after the matter is closed.
- Server logs: up to 30 days.
Your rights
You have the right to access your data, have it corrected or deleted, restrict or object to its use, and receive it in a portable format. Where we rely on consent, you can withdraw it at any time. To use your rights, e-mail support@heartstyl.shop; we’ll reply within one month.
You can also complain to a data protection authority: in the UK, the Information Commissioner’s Office (ico.org.uk); in the EU, the authority in the country where you live or work. We’d appreciate the chance to help first.
Security
The website uses encryption (HTTPS). Access to order data is limited to people who need it to fulfil orders and support customers.
Children
Our shop is for adults. We do not knowingly collect data from children under 16.
Changes
We will update this policy if the way we use data changes. The date at the top shows the latest version.