PRIVACY POLICY

1. Introduction & Who We Are

Welcome to Styleza Spark. We respect your privacy and are committed to protecting your personal data in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For the purposes of data protection legislation, the data controller is Styleza Spark (operating online at www.stylezaspark.com). If you have any questions about this privacy notice or how we handle your data, please contact our Data Protection Officer at support@stylezaspark.com.

2. What Personal Data We Collect

We collect, use, store, and transfer different kinds of personal data about you to fulfill orders and provide an optimal e-commerce experience:

• Identity Data: First name, last name, title, and username.
• Contact Data: Billing address, delivery address, email address, and telephone/WhatsApp numbers.
• Financial & Transaction Data: Bank account and payment card details (securely processed via PCI-DSS compliant payment gateways such as Stripe, PayPal, Apple Pay, and Google Pay; we never store full raw credit card numbers on our servers) and records of products purchased.
• Technical & Usage Data: Internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types, operating system, and data on how you navigate our website.
• Marketing & Communications Data: Your preferences in receiving direct email or WhatsApp marketing from us and your communication preferences.

3. Lawful Basis for Processing Your Data

Under Article 6 of the UK GDPR, we only process your personal data where we have a valid lawful basis to do so:

• Performance of a Contract: Processing is necessary to process your checkout, manage payment, and deliver your ordered eyewear, watches, mobile covers, or electronics to your UK address.
• Legitimate Interests: Necessary for running our business, analyzing website usage, preventing fraud, and improving our products and customer services.
• Legal Obligation: Necessary to comply with UK statutory accounting, VAT, and tax reporting laws (e.g., retaining transaction records for HM Revenue & Customs).
• Consent: When you explicitly opt-in to receive promotional marketing newsletters or WhatsApp updates. You can withdraw your consent at any time by clicking "unsubscribe" in our emails or contacting us directly.

4. How We Share Your Personal Data

We do not sell, trade, or rent your personal data to third parties. We only share necessary data with trusted third-party service providers who assist us in operating our UK e-commerce store, subject to strict data processing agreements:

• Delivery Couriers: Sharing your delivery address and phone number with Royal Mail, DPD, or DHL so they can dispatch and deliver your parcel.
• Payment Processors: Securely transferring payment details to Stripe, PayPal, Apple, or Google to authorize transactions and prevent fraudulent activity.
• IT & Cloud Infrastructure: Web hosting, database management, and email service providers located within the UK or European Economic Area (EEA), or governed by UK International Data Transfer Agreements (IDTAs).

5. Data Retention & Security

We have put in place robust technical and organizational security measures (including SSL encryption and administrative firewalls) to prevent your personal data from being accidentally lost, used, altered, or accessed in an unauthorized way.

We retain your personal data only for as long as necessary to fulfill the purposes we collected it for. Under UK tax and accounting laws (HMRC), we are legally required to keep basic customer transaction records (name, contact, order details) for a minimum of six years after they cease being customers.

6. Your Legal Rights Under UK GDPR

Under certain circumstances, UK data protection law grants you specific statutory rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you (a "Data Subject Access Request").
• Right to Rectification: Request correction of any incomplete or inaccurate data we hold about you.
• Right to Erasure (Right to be Forgotten): Request deletion or removal of your personal data where there is no compelling legal reason for us to continue processing it.
• Right to Restrict Processing: Request suspension of processing your personal data under specific scenarios.
• Right to Data Portability: Request the transfer of your personal data to you or a third party in a structured, machine-readable format.
• Right to Object: Object to processing your personal data for direct marketing purposes.

To exercise any of these legal rights, please email us at support@stylezaspark.com. You will not have to pay a fee to access your personal data; we aim to respond to all legitimate requests within one calendar month.

7. Cookies & Tracking Technologies

Our website uses small text files called cookies to distinguish you from other users, maintain your shopping cart contents, and analyze site traffic. In accordance with the Privacy and Electronic Communications Regulations (PECR), non-essential cookies (such as analytics or advertising cookies) will only be dropped on your device with your explicit consent via our cookie banner.