Effective Date: August 13, 2026
This policy follows the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018, regulated by the ICO.
Data Controller: Gracella
Business Address: 10 Tintock Pl, Glasgow G68 0AD, United Kingdom
Support Email: hello@gracella.shop
Phone: +44 7807554657
Website: gracella.shop
1. Personal Data We Collect
- Order information: Full name, UK delivery address, email address, mobile phone number used for order processing and delivery notification.
- Payment data: Card information processed by PCI-DSS certified third-party payment gateways; Gracella does not store complete debit/credit card numbers on our website server.
- Website analytics data: IP address, device type, browser information, cookie records and browsing activity to optimise website functions.
- Voluntary enquiry data: All messages you send to our customer service email inbox.
2. Legal Basis & Purposes of Data Processing
- Performance of contract: Process orders, arrange parcel dispatch, send order confirmations and tracking updates.
- Explicit consent: Send marketing newsletters only if you actively opt in; one-click unsubscribe link is included in every promotional email.
- Legitimate interest: Solve customer service issues, prevent payment fraud and optimise our clothing product range.
- Legal obligation: Retain transaction records to comply with UK tax and consumer legislation.
3. Third-Party Data Sharing Rules
We will never sell, rent or trade your personal information to external marketing companies. Only necessary minimal data will be shared with:
- Royal Mail and domestic UK couriers for parcel delivery
- Secure payment service providers authorised for UK e-commerce
All cooperating third parties must fully comply with UK GDPR standards.
4. Your Data Subject Rights under UK GDPR
- Request full access to all personal data stored about you
- Correct inaccurate name, delivery address or contact information
- Request permanent deletion of your customer account and personal records
- Object to marketing email communications at any time
- Request data portability of your historical order records
Submit all privacy requests via hello@gracella.shop. We will reply within 30 calendar days as ICO rules require. You may submit a formal complaint directly to the Information Commissioner’s Office if you are unsatisfied with our response.
5. Cookies & Online Tracking
gracella.shop uses functional and analytics cookies to improve your shopping experience. You can disable or adjust cookie permission settings via your web browser at any time.
6. Data Security & Breach Notification
We adopt end-to-end industry encryption technology to protect your personal and payment data. If a serious personal data breach occurs, we will immediately notify affected customers and the ICO within 72 hours as UK GDPR mandates.
7. Privacy Enquiries
Email: hello@gracella.shop
Postal Address: 10 Tintock Pl, Glasgow G68 0AD, United Kingdom