Privacy Policy

Last updated 23 September 2026

This policy explains how ÌYÁBELLE (“we”, “us”), operated by Iyabelle Limited, company number 16310895, registered at 66 Paul Street, London EC2A 4NA, collects and uses your personal data when you visit iyabelle.com or buy from us. We are the data controller and handle your data under the UK GDPR and the Data Protection Act 2018.

• Order details: name, email, phone, billing and delivery address, and what you bought. Payment is taken by our payment providers; we never see or store your full card number.
• Account details if you create an account: login email and order history.
• Marketing details: your email if you join our list, your mobile number if you also opt in to texts, a record of when and where you gave that consent, and how you interact with our messages.
• Browsing data: device, browser, IP address, pages viewed and how you arrived, collected through cookies and similar tools.
• Messages: anything you send us by email, chat, contact form or social media, including reviews.

• To take payment, fulfil and deliver your order, and handle returns and refunds (necessary for our contract with you).
• To respond to your questions and provide customer care (our legitimate interest in running the business).
• To send marketing emails where you have opted in. You can unsubscribe at any time using the link in any email.
• To send marketing text messages where you have separately opted in, including reminders about items left in your basket. You can unsubscribe at any time using the link in any text.
• To measure and improve our website and advertising, including showing you relevant ads on platforms such as Meta and Google (based on your cookie consent).
• To prevent fraud, keep our systems secure and meet our legal and tax obligations.

We only text you if you have actively agreed to it on our sign-up form. That consent is separate from email, so you can have one without the other, and it is never a condition of buying from us or of any welcome offer. Our lawful basis is your consent, which you can withdraw at any time; withdrawing it does not affect messages already sent.

Our texts come from the sender name IYABELLE, which cannot receive replies. To stop them, use the unsubscribe link in any text or email hello@iyabelle.com. We send no more than four texts a month.

We use Klaviyo to store your number and send our texts on our behalf. Your text message opt-in data and consent are never shared with any third party for their own purposes.

Only with services we need to run the shop, and only what they need:

• Shopify, which hosts our store and processes orders.
• Payment providers such as Shop Pay, PayPal, Klarna, Apple Pay and Google Pay.
• Delivery couriers, to ship your order and provide tracking.
• Klaviyo, which sends the emails and texts you have signed up for.
• Review and analytics tools such as Judge.me, Google Analytics and Meta.
• Professional advisers and authorities where the law requires it.

We never sell your personal data. Any sharing described above excludes text message opt-in data and consent, which we do not pass to third parties for their own purposes.

Some of these providers store data outside the UK. Where they do, we rely on the UK International Data Transfer Agreement, UK adequacy regulations or equivalent safeguards.

We use essential cookies to make the site and checkout work, and optional analytics and advertising cookies to understand how the site is used and show relevant ads. You can accept or decline optional cookies in the banner when you first visit, and change your choice at any time in your browser settings.

Cookies also keep track of the items you add to your basket, including when a basket is left without checking out. If you have opted in to our emails or texts, we may use this to send you a reminder.

• Order and invoice records: 6 years after purchase, for tax and accounting law.
• Marketing data, including your mobile number: until you unsubscribe, or 2 years after you last engaged with us. After you unsubscribe we keep your email or number on a suppression list so that we do not contact you again.
• Account data: until you ask us to delete your account.
• Website analytics: up to 26 months.

You can ask us to access, correct, delete or transfer your personal data, to restrict or object to how we use it, and to withdraw consent at any time. Email hello@iyabelle.com and we will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk. We would appreciate the chance to resolve it first.

Our store runs on Shopify, which is PCI DSS Level 1 certified. All pages are served over HTTPS and payment details are encrypted end to end. No system is perfectly secure, but we take reasonable steps to protect your data.

Our site is not aimed at anyone under 16 and we do not knowingly collect their data.

We may update this policy from time to time. The date at the top tells you when it last changed.