Privacy Policy

At Aroshlay, we respect your privacy and are committed to protecting your personal data. This Privacy Policy outlines how we collect, use, and safeguard your information when you visit our website or purchase from our UK collections, in accordance with the UK General Data Protection Regulation (UK GDPR).

Information We Collect

When you interact with Aroshlay, we may collect the following types of personal information:

• Identity & Contact Data: Your name, billing address, delivery address, email address, and telephone numbers.
• Financial Data: Payment card details. Please note that these are processed securely through our payment gateways (e.g., Shopify Payments) and we do not store your full card details on our servers.
• Transaction Data: Details about payments to and from you, and other details of the garments you have purchased from us.
• Technical Data: Your IP address, browser type and version, time zone setting, and operating system used to access our website.

How We Use Your Information

We will only use your personal data when the law allows us to. Most commonly, we use your information in the following circumstances:

• To process and fulfil your order, including managing payments, fees, and arranging delivery within the UK.
• To manage our relationship with you, which includes notifying you about changes to our terms or privacy policy.
• To deliver relevant website content, advertisements, and marketing communications to you (provided you have opted in to receive them).
• To use data analytics to improve our website, products, services, marketing, and customer experiences.

Sharing Your Personal Data

To provide our services to you, we may need to share your personal data with select trusted third parties, including:

• Our e-commerce platform provider (Shopify) which hosts our online store.
• Delivery and courier partners (e.g., Royal Mail, DPD) to ensure your Aroshlay garments reach you safely.
• Professional service providers, such as payment processing and fraud prevention agencies.

We require all third parties to respect the security of your personal data and to treat it in accordance with UK law. We do not allow our third-party service providers to use your personal data for their own purposes.

Data Security & Retention

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorised way, altered, or disclosed. We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Your Legal Rights

Under UK data protection laws, you have rights in relation to your personal data. These include the right to:

• Request access to your personal data (a "data subject access request").
• Request correction of the personal data that we hold about you.
• Request erasure of your personal data.
• Object to processing of your personal data, particularly regarding direct marketing.
• Request the restriction of processing of your personal data.

If you wish to exercise any of the rights set out above, please contact our customer care team.

Cookies

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a seamless browsing experience and allows us to improve our site. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies.