Privacy Policy
Last updated 9 September 2026
This policy explains how ÌYÁBELLE (“we”, “us”), operated by Iyabelle Limited, company number 16310895, registered at 66 Paul Street, London EC2A 4NA, collects and uses your personal data when you visit iyabelle.com or buy from us. We are the data controller and handle your data under the UK GDPR and the Data Protection Act 2018.
01
What we collect
- Order details: name, email, phone, billing and delivery address, and what you bought. Payment is taken by our payment providers; we never see or store your full card number.
- Account details if you create an account: login email and order history.
- Marketing details: your email if you join our list, and how you interact with our emails.
- Browsing data: device, browser, IP address, pages viewed and how you arrived, collected through cookies and similar tools.
- Messages: anything you send us by email, chat, contact form or social media, including reviews.
02
Why we use it
- To take payment, fulfil and deliver your order, and handle returns and refunds (necessary for our contract with you).
- To respond to your questions and provide customer care (our legitimate interest in running the business).
- To send marketing emails where you have opted in. You can unsubscribe at any time using the link in any email.
- To measure and improve our website and advertising, including showing you relevant ads on platforms such as Meta and Google (based on your cookie consent).
- To prevent fraud, keep our systems secure and meet our legal and tax obligations.
03
Who we share it with
Only with services we need to run the shop, and only what they need:
- Shopify, which hosts our store and processes orders.
- Payment providers such as Shop Pay, PayPal, Klarna, Apple Pay and Google Pay.
- Delivery couriers, to ship your order and provide tracking.
- Email and marketing tools, to send emails you have signed up for.
- Review and analytics tools such as Judge.me, Google Analytics and Meta.
- Professional advisers and authorities where the law requires it.
We never sell your personal data.
04
International transfers
Some of these providers store data outside the UK. Where they do, we rely on the UK International Data Transfer Agreement, UK adequacy regulations or equivalent safeguards.
05
Cookies
We use essential cookies to make the site and checkout work, and optional analytics and advertising cookies to understand how the site is used and show relevant ads. You can accept or decline optional cookies in the banner when you first visit, and change your choice at any time in your browser settings.
06
How long we keep it
- Order and invoice records: 6 years after purchase, for tax and accounting law.
- Marketing data: until you unsubscribe, or 2 years after you last engaged with us.
- Account data: until you ask us to delete your account.
- Website analytics: up to 26 months.
07
Your rights
You can ask us to access, correct, delete or transfer your personal data, to restrict or object to how we use it, and to withdraw consent at any time. Email hello@iyabelle.com and we will respond within one month.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk. We would appreciate the chance to resolve it first.
08
Security
Our store runs on Shopify, which is PCI DSS Level 1 certified. All pages are served over HTTPS and payment details are encrypted end to end. No system is perfectly secure, but we take reasonable steps to protect your data.
09
Children
Our site is not aimed at anyone under 16 and we do not knowingly collect their data.
10
Changes
We may update this policy from time to time. The date at the top tells you when it last changed.