Privacy Policy

This policy explains what personal data we collect when you visit selvorn.shop or buy from us, why we use it and the rights you have.

Who is responsible

The controller of your personal data is GHOST RETAIL LIMITED, trading as SELVORN (company details on the Legal Information page). For any privacy question, write to support@selvorn.shop.

What we collect

• Order details: name, billing and delivery address, email, phone number, the items you buy and your order history.
• Payment details: handled by our payment providers (Stripe and PayPal). We receive a confirmation, the payment method type and, for cards, the last four digits and expiry date. We never receive your full card number.
• Account details: if you create an account, your email address and a password stored in encrypted form.
• Messages: what you send us by email or through our contact form.
• Technical data: IP address, browser type and pages requested, kept in server logs for security, and the essential cookies described in our Cookie Policy.

Why we use it and our legal basis

• To take, deliver and support your order, handle returns and answer your questions — necessary to perform our contract with you.
• To keep accounting and tax records — to meet our legal obligations.
• To prevent fraud and keep the site secure — our legitimate interest in protecting our customers and business.
• To send service emails about your order. We do not send marketing emails unless you have asked for them, and you can unsubscribe at any time.

Who we share it with

We share only what each provider needs to do its job:

• Payment providers: Stripe and PayPal, to process payments and prevent fraud.
• Delivery carriers, to deliver your parcel and send tracking updates.
• Our hosting provider and email services, which store and transmit data on our behalf.
• Authorities, where the law requires it.

We do not sell your personal data, and we do not use advertising or analytics trackers on this site.

International transfers

We are based in the United Kingdom. Some providers process data in the European Economic Area or the United States. Where data leaves the UK or EEA, we rely on adequacy decisions or standard contractual clauses so that it stays protected.

How long we keep it

• Order and accounting records: six years after the end of the financial year of the order, as UK law requires.
• Account data: until you delete your account, or after three years without activity.
• Messages: up to two years after the last contact.
• Server logs: up to 30 days.

Your rights

You have the right to access your data, correct it, have it deleted, restrict or object to its use, and receive it in a portable format. Write to support@selvorn.shop and we will reply within one month. You can also complain to the UK Information Commissioner’s Office (ico.org.uk) or to the data protection authority in your country.

Security

The whole site uses an encrypted connection (HTTPS). Access to customer data is limited to the people who need it to serve you.

Children

Our shop is not directed at children under 16, and we do not knowingly collect their data.

Changes

We will post any changes to this policy on this page with a new date.