SRV · Help & legal
Privacy policy
What personal data we collect when you visit or buy from SEROVELLE, why we use it, who we share it with and your rights.
Who is responsible
The controller for personal data processed through serovelle.shop is CUSTOM CLOTHING LIMITED, Unit 5 Avenue Business Park, Brockley Road, Elsworth, Cambridge, CB23 4EY, United Kingdom, company number 08473234 (see Legal Information). For any privacy question or request, e-mail support@serovelle.shop.
This policy applies under the UK GDPR, the Data Protection Act 2018 and, for visitors in the European Economic Area, the EU General Data Protection Regulation (GDPR).
What we collect
- Order data: name, billing and delivery address, e-mail address, telephone number (optional), the items you buy, order notes, and your language and currency.
- Payment data: processed directly by our payment providers. We receive only a confirmation, the payment method type and, for cards, the last four digits and expiry date.
- Account data: if you create an account, your login e-mail and a password (stored in encrypted form).
- Messages: what you send through the contact form, the withdrawal form or by e-mail.
- Technical data: IP address, browser type and the pages requested, in server logs kept for security, and the cookies described in our Cookie policy.
We do not use analytics or advertising trackers, and we don’t send marketing e-mails.
Why we use it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Processing and delivering your order, returns and refunds, customer service | Performance of a contract (Art. 6(1)(b) GDPR) |
| Keeping accounting and tax records | Legal obligation (Art. 6(1)(c) GDPR) |
| Preventing fraud and payment abuse, securing the website | Legitimate interests (Art. 6(1)(f) GDPR) |
| Answering messages that are not about an order | Legitimate interests (Art. 6(1)(f) GDPR) |
| Your customer account | Performance of a contract (Art. 6(1)(b) GDPR) |
Who we share it with
- Hosting: Hostinger International Ltd. (Cyprus), which hosts this website and its database.
- Payment providers: the provider you choose at checkout (for example Stripe or PayPal, where offered) processes your payment as an independent controller or on our behalf, including fraud checks.
- Carriers: the delivery company receives your name, delivery address and, where needed for delivery notifications, your e-mail or telephone number.
- Authorities: where we are legally required to.
We never sell your personal data.
International transfers
We are based in the United Kingdom, which the EU recognises as providing adequate protection. Some service providers (such as payment providers) may process data in other countries, including the United States. Where that happens, transfers are protected by an adequacy decision (including the EU–US Data Privacy Framework where the provider is certified) or by standard contractual clauses.
How long we keep it
Order and invoice records are kept for as long as tax and commercial law requires, normally six years after the end of the financial year (longer where the law of your country requires it). Account data is kept until you delete your account. Messages are kept for up to two years after the matter is closed. Server logs are deleted after 30 days.
Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, and to data portability. Where processing is based on legitimate interests, you can object at any time. To exercise a right, e-mail support@serovelle.shop; we reply within one month.
You can also complain to a data protection authority: in the UK the Information Commissioner’s Office (ico.org.uk); in the EU the authority of your country of residence, for example Datatilsynet in Denmark or the data protection authority of your German federal state.
Security
The website uses HTTPS encryption throughout. Access to order data is limited to the people who need it to process your order.
Automated decisions
We don’t make decisions about you based solely on automated processing, except for the fraud screening performed by payment providers when you pay.
Changes
We update this policy when our processing changes. The date at the top shows the latest version.