PRIVACY POLICY

Last updated: 27 July 2026

Susan Liverpool operates this store and website, including all related information, content, features, tools, products, and services, with the aim of providing our customers with a personalised shopping experience (collectively, the "Services"). Susan Liverpool uses the Shopify platform, which enables us to provide these Services.

This Privacy Policy explains how we collect, use, process, store, and disclose your personal data when you visit or use our website, make a purchase, complete a transaction through our Services, or otherwise communicate with us.

Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read and understood how your personal data may be collected, used, and disclosed as described in this Privacy Policy.

PERSONAL DATA WE COLLECT OR PROCESS

When we refer to "personal data", we mean information that identifies you, relates to you, or can reasonably be associated with you. Personal data does not include anonymous or de-identified information that cannot reasonably be linked back to you.

Depending on how you interact with our Services and the requirements of applicable law, we may collect or process the following categories of personal data:

Contact information, including your name, billing address, delivery address, telephone number, and email address.

Payment and transaction information, including payment details, transaction details, payment method, payment confirmation, and other information necessary to process your purchase. Payment information may be processed securely by third-party payment providers.

Account information, including your username, password, preferences, and account settings, where applicable.

Transaction information, including products you view, add to your shopping cart, add to a wishlist, purchase, return, exchange, or cancel, as well as your order history.

Communications with us, including information you provide when contacting customer support, submitting an enquiry, or otherwise communicating with us.

Device information, including information about your device, browser, network connection, IP address, and other technical identifiers.

Usage information, including information about how you interact with our Services, how you navigate our website, and when you access or use our Services.

SOURCES OF PERSONAL DATA

We may collect personal data from the following sources:

Directly from you, including when you create an account, place an order, use our Services, contact us, subscribe to communications, or otherwise provide us with personal data.

Automatically through our Services, including through cookies, pixels, and similar technologies when you visit our website or use our Services.

From service providers, including companies that help us operate our website, process payments, fulfil orders, provide analytics, manage customer support, and provide marketing services.

From partners or other third parties, where permitted by applicable law.

HOW WE USE YOUR PERSONAL DATA

We may use your personal data for the following purposes:

Providing, personalising, and improving our Services. We use your personal data to provide our Services, process and manage orders, arrange shipping, manage returns and exchanges, send account and order-related communications, create and manage accounts where applicable, remember your preferences, improve your shopping experience, and recommend products that may be relevant to you.

Marketing and advertising. Where permitted by applicable law and where required, with your consent, we may use your personal data to send marketing, advertising, and promotional communications by email, text message, or other channels. We may also use information to display personalised advertisements on our website or on third-party platforms.

You can opt out of promotional communications at any time by using the unsubscribe option included in our marketing communications.

Security and fraud prevention. We may use personal data to help verify accounts, process secure transactions, detect and prevent fraud, investigate unlawful or harmful activity, protect our Services, and maintain the security of our business.

Communicating with you. We use your personal data to respond to enquiries, provide customer support, manage requests, and maintain our relationship with you.

Legal and compliance purposes. We may use personal data to comply with applicable laws and regulations, respond to lawful requests, enforce our terms and policies, participate in legal proceedings, and protect our rights, customers, Services, and business.

HOW WE DISCLOSE PERSONAL DATA

We may share your personal data with third parties where necessary for legitimate business, operational, legal, or compliance purposes.

This may include:

Shopify, vendors, and service providers that perform services on our behalf, including website hosting, IT support, payment processing, analytics, customer support, cloud storage, order fulfilment, and shipping.

Business and marketing partners who help us provide advertising and marketing services. These partners process personal data in accordance with their own privacy policies and applicable laws.

Third parties where you instruct, request, or consent to the sharing of information, such as through social media integrations, login tools, or delivery-related services.

Affiliated companies or entities, where applicable.

Third parties in connection with a business transaction, such as a merger, acquisition, restructuring, financing, sale of assets, or bankruptcy.

Authorities, courts, regulators, or other parties where required to comply with legal obligations, respond to lawful requests, enforce our terms, protect our Services, or defend our rights and the rights of our customers or others.

RELATIONSHIP WITH SHOPIFY

Our Services are hosted and supported by Shopify.

Shopify may collect and process personal data relating to your access to and use of our Services in order to provide, support, secure, and improve its services.

Information you provide through our Services may be transferred to and shared with Shopify and third-party service providers who may be located outside the United Kingdom or your country of residence. Such transfers are carried out for the purposes of operating, supporting, securing, and improving our Services and in accordance with applicable data protection laws.

Shopify may also process information generated through your interactions with our store and its services. Certain data processing activities may be subject to Shopify's own privacy policies.

For more information about how Shopify processes personal data and the privacy rights that may be available to you, please review Shopify's privacy information.

THIRD-PARTY WEBSITES AND LINKS

Our Services may contain links to websites, applications, or online platforms operated by third parties.

If you access a website or service that is not operated or controlled by Susan Liverpool, we recommend that you review its privacy policy, security practices, and terms of service.

We are not responsible for the privacy, security, accuracy, completeness, or reliability of third-party websites or platforms.

Information you choose to share in public or semi-public areas, including social media platforms, may be visible to other users and may be used by those platforms or third parties according to their own policies.

CHILDREN'S DATA

Our Services are not intended for children.

We do not knowingly collect personal data from children under the age of 13. Where applicable law establishes a different age threshold, we will comply with the requirements of that law.

If you are a parent or legal guardian and believe that a child has provided us with personal data, please contact us using the details below and request that the information be reviewed or deleted.

SECURITY AND RETENTION OF YOUR DATA

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.

However, no security system is completely secure, and we cannot guarantee absolute security.

Information sent to us over the internet may not be completely secure during transmission. We therefore recommend that you avoid sending sensitive or confidential information through unsecured communication channels.

We retain personal data for as long as reasonably necessary for the purposes described in this Privacy Policy, including to maintain accounts, provide our Services, fulfil orders, comply with legal and regulatory obligations, resolve disputes, enforce agreements, and protect our rights and business.

YOUR RIGHTS AND CHOICES

Depending on your location and applicable data protection laws, you may have certain rights in relation to your personal data.

These rights may include:

Right of access. You may have the right to request access to the personal data we hold about you.

Right to erasure. You may have the right to request that we delete personal data we hold about you, subject to applicable legal exceptions.

Right to rectification. You may have the right to request that we correct inaccurate or incomplete personal data.

Right to data portability. In certain circumstances, you may have the right to receive a copy of your personal data in a commonly used and machine-readable format or request that it be transferred to another party.

Marketing preferences. You may opt out of receiving promotional emails at any time by using the unsubscribe link included in our marketing emails.

Even if you opt out of marketing communications, we may still send you non-promotional communications relating to your orders, transactions, account, or other essential matters.

YOUR RIGHTS IN THE UNITED KINGDOM

If you are located in the United Kingdom, you may have additional rights under applicable UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Depending on the circumstances, these rights may include:

• The right to access your personal data.

• The right to request correction of inaccurate or incomplete personal data.

• The right to request deletion of your personal data in certain circumstances.

• The right to restrict the processing of your personal data in certain circumstances.

• The right to object to certain processing activities, including direct marketing.

• The right to data portability in certain circumstances.

• The right to withdraw consent where we rely on consent as the legal basis for processing your personal data.

You may exercise your rights by contacting us using the details provided below.

We may need to verify your identity before processing certain requests, as permitted or required by applicable law.

We will respond to valid privacy requests within the timeframe required by applicable law.

LEGAL BASIS FOR PROCESSING

Where applicable, we process your personal data on one or more of the following legal bases:

• To perform a contract with you or take steps at your request before entering into a contract.

• To comply with a legal or regulatory obligation.

• Where necessary for our legitimate business interests, provided that these interests are not overridden by your rights and freedoms.

• Where you have provided your consent.

• Where necessary to protect vital interests or for other lawful purposes recognised under applicable data protection laws.

Where we rely on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

COMPLAINTS

If you have concerns about how we collect, use, or handle your personal data, please contact us using the details provided below.

We will do our best to address your concerns and respond to your request in accordance with applicable law.

If you are located in the United Kingdom and remain dissatisfied with how we have handled your personal data, you may have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

INTERNATIONAL TRANSFERS

Some of our service providers and business partners may be located outside the United Kingdom.

As a result, your personal data may be transferred to, stored in, or processed in countries outside the UK.

Where required by applicable law, we will take appropriate steps to ensure that international transfers of personal data are subject to appropriate safeguards.

These safeguards may include recognised contractual protections, adequacy regulations, or other lawful transfer mechanisms.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, operational needs, or other relevant reasons.

When we update this Privacy Policy, we will post the revised version on our website and update the "Last updated" date at the top of this policy.

Where required by applicable law, we may also provide additional notice of significant changes.

CONTACT

If you have any questions about this Privacy Policy, our privacy practices, or if you wish to exercise your privacy rights, please contact us by email at:

info@susan-liverpool.com

For the purposes of applicable data protection laws, Susan Liverpool is responsible for determining how and why your personal data is processed in connection with our Services, where applicable.

Our website and e-commerce operations may involve third-party service providers, including Shopify and other technology, payment, fulfilment, analytics, advertising, and customer support providers.

We will process personal data in accordance with applicable data protection laws and this Privacy Policy.