Privacy Policy

1. Introduction

Rosa Seetop ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and safeguard your information when you visit our website or place an order, and describes your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We may collect the following information when you interact with our website:

• Identity and contact data: name, billing and delivery address, email address, and phone number
• Order data: the products you purchase, order history, and order numbers
• Payment data: processed securely by our payment provider; we do not store full card details
• Technical data: IP address, browser type, device information, and pages visited
• Communications: messages you send us by email or through our contact channels

3. How We Use Your Information

We use your personal data to:

• Process and fulfil your orders, including delivery and returns
• Communicate with you about your order or enquiries
• Provide customer support and handle refund requests
• Improve our website, products, and services
• Comply with our legal and regulatory obligations
• Send marketing communications, where you have given your consent

4. Legal Basis for Processing

We process your data on the basis of contractual necessity (to fulfil your order), legitimate interests (to operate and improve our business), legal obligation (to meet tax and accounting requirements), and consent (for marketing communications, which you may withdraw at any time).

5. Cookies

Our website uses essential cookies to enable core functionality such as your shopping basket, which is stored locally in your browser. We may also use analytics cookies to understand how visitors use our site. You can control or disable cookies through your browser settings.

6. Sharing Your Information

We do not sell your personal data. We share it only with trusted third parties who help us operate our business, including payment processors, delivery carriers, and hosting providers. These parties are required to keep your data secure and use it only for the purposes we specify. We may also disclose data where required by law.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, including to satisfy any legal, accounting, or reporting requirements. Order records are typically retained for a minimum of six years to comply with UK tax law.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Payment transactions are encrypted and handled by PCI-compliant providers.

9. Your Rights

Under UK data protection law, you have the right to access, correct, or erase your personal data; to restrict or object to its processing; to data portability; and to withdraw consent at any time. To exercise these rights, contact us using the details below. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

11. Contact