Privacy policy

AMBELLE

Privacy Policy

Last updated: 27 July 2026

1. General Information about Data Processing

Protecting your personal data matters to us. We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Personal data means any information relating to an identified or identifiable individual.

2. Data Controller

The data controller responsible for the processing of personal data described in this policy is:

Ambelle Fashion

support@ambelle.co.uk

Further legally required information can be found in our Imprint / About Us page.

3. Data Collected When Visiting Our Website

Server log files

When you visit our website, the following data is automatically collected:

  • IP address
  • Date and time of access
  • Browser type and version
  • Operating system
  • Referrer URL
  • Pages visited

This data is technically necessary to ensure the stable and secure operation of the website.

Legal basis: Article 6(1)(f) UK GDPR (legitimate interests).

4. Orders and Contract Performance

When you place an order through our online store, we process the following personal data:

  • First and last name
  • Billing and delivery address
  • support@ambelle.co.uk address and phone number
  • Payment details
  • Order details

This data is processed to perform the contract of sale and to deliver your goods.

Legal basis: Article 6(1)(b) UK GDPR (performance of a contract).

5. Contacting Us

If you contact us by support@ambelle.co.uk, we process your details in order to handle your enquiry.

Legal basis: Article 6(1)(b) UK GDPR (pre-contractual measures) or Article 6(1)(f) UK GDPR (legitimate interest in responding to enquiries).

6. Online Store via Shopify

Our online store is operated using Shopify (Shopify International Limited), which provides the technical platform for selling our products and acts as our processor.

As part of using Shopify, personal data may also be processed outside the United Kingdom. Such transfers take place on the basis of the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or adequacy regulations recognised under UK data protection law.

7. Payment Processing

[TE BEVESTIGEN: welke betaalproviders worden daadwerkelijk gebruikt voor de UK-checkout? Onderstaande tekst noemt PayPal en een generieke kaartverwerker als voorbeeld – pas aan naar de daadwerkelijke providers (bv. Shopify Payments, Stripe, Klarna).]

Depending on the payment method you select, your payment details are shared directly with our payment providers, which may include PayPal (Europe) S.à r.l. et Cie, S.C.A. and/or card payments processed via [Shopify Payments / Stripe / other provider – to confirm].

Legal basis: Article 6(1)(b) UK GDPR (performance of a contract).

8. Cookies and Similar Technologies

Our website uses cookies and similar technologies, in accordance with the Privacy and Electronic Communications Regulations 2003 (PECR) and the UK GDPR. We distinguish between:

  • Necessary cookies – required for the website to function
  • Analytics cookies – used to analyse visitor behaviour
  • Marketing cookies – used to display personalised advertising

Analytics and marketing cookies are only set after you have given your explicit consent via our cookie banner.

Legal basis: Article 6(1)(a) UK GDPR (consent).

9. Meta (Facebook & Instagram) and TikTok

We use marketing and analytics services provided by Meta Platforms Ireland Ltd. (including the Meta Pixel) and, where applicable, TikTok Technology Limited (including the TikTok Pixel), to measure the effectiveness of our advertising and build audiences.

This may involve processing personal data (e.g. IP address, device information, interactions on our website) and transferring it outside the United Kingdom, including to the United States. This only takes place with your consent.

Legal basis: Article 6(1)(a) UK GDPR (consent).

10. support@ambelle.co.uk Marketing via Klaviyo

We use the Klaviyo platform (Klaviyo, Inc.) to send newsletters and personalised support@ambelle.co.uk offers. If you subscribe to our newsletter, we use your support@ambelle.co.uk address and, where relevant, your order and browsing behaviour, to send you relevant offers.

Sign-up takes place via a double opt-in process. You can unsubscribe at any time using the unsubscribe link in any support@ambelle.co.uk, or by contacting us.

Legal basis: Article 6(1)(a) UK GDPR (consent).

11. Retention Periods

  • Order and invoice data: 6 years (statutory HMRC record-keeping requirement)
  • Contact details from enquiries: until the enquiry has been fully resolved, then deleted
  • Marketing data: until consent is withdrawn

12. Your Rights

As a data subject, you have the following rights:

  • Right of access (Article 15 UK GDPR)
  • Right to rectification (Article 16 UK GDPR)
  • Right to erasure (Article 17 UK GDPR)
  • Right to restriction of processing (Article 18 UK GDPR)
  • Right to data portability (Article 20 UK GDPR)
  • Right to object to processing (Article 21 UK GDPR)
  • Right to withdraw consent at any time, with future effect (Article 7(3) UK GDPR)

13. Right to Complain

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent regulator for data protection, at ico.org.uk or by calling 0303 123 1113.

14. Data Security

We take appropriate technical and organisational measures to protect your data against loss, misuse or unauthorised access.

15. Changes to This Privacy Policy

We reserve the right to update this privacy policy to reflect changes in legal or technical requirements. The current version is always available on our website.