This Privacy Policy applies to jiyuglow.co.uk. For the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018), the data controller is [Jiyu Glow Ltd], a company registered in England and Wales (company number [00000000]), registered office [address]. Our store is powered by Shopify.

Information we collect

• Contact and order details — name, billing and delivery address, email, phone number and order history.
• Payment information — processed securely by our payment providers; we do not store full card numbers.
• Device and usage data — IP address, browser, and how you interact with our site, collected via cookies and similar technologies.

Our lawful bases for processing (UK GDPR)

• Performance of a contract — to process and deliver your orders and provide support.
• Legal obligation — to keep records required by tax, accounting and consumer law.
• Legitimate interests — to run, secure and improve our store and prevent fraud, balanced against your rights.
• Consent — for marketing emails and non-essential cookies, which you can withdraw at any time.

How we share your information

We share personal information only with providers who help us run the store: Shopify (store platform and checkout), [Klarna] and [card payment provider] (payment processing), [Royal Mail / courier] (delivery), and [email provider] (marketing emails). Each processes your data under its own privacy terms. We may also disclose information where required by law.

Cookies

We use cookies and similar technologies to run the store, remember your cart, and — with your consent — for analytics and marketing. You can manage your preferences through our cookie banner at any time.

Your rights

Depending on your circumstances, you have the right to access, correct, delete or port your personal data, to object to or restrict processing, and to withdraw consent. To exercise any of these rights, contact us at [support@jiyuglow.co.uk].

Data retention and international transfers

We keep personal information only as long as necessary for the purposes described above or as required by law. Where data is transferred outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or equivalent.

Complaints

If you are in the UK and are unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.