Privacy Policy

Privacy Policy – alturashoes.co.uk

The person responsible for data processing is:

B&S SCALING ECOM LIMITED
Unit 2A, 17/F Glenealy Tower
No.1 Glenealy Central
Hong Kong

We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your data.

1. Access data and hosting

You can visit our website without providing any personal information. Each time you access a website, the web server automatically saves a so-called server log file (such as name of the requested file, your IP address, date and time of access, amount of data transferred, requesting provider).

This access data is used solely to ensure the smooth operation of the website and to improve our offering, in line with Art. 6 (1) (f) GDPR. All access data is deleted no later than one month after your visit.

Hosting:
Our hosting providers process data on our behalf. Some use servers in countries with an adequate level of protection (e.g., Canada, UK). Others may use servers in the USA and Asia (including China). Where there is no adequacy decision, we rely on European Commission standard data protection clauses.

2. Data processing for contract execution and contact

2.1 Contract execution
We collect personal data when you voluntarily provide it (e.g., during checkout or contact). Mandatory fields are essential to complete orders or inquiries. Data is processed for contract purposes (Art. 6 (1) (b) GDPR) and stored only as long as required by law.

2.2 Contact
If you contact us (e.g., via form or email), we use the data to respond. Once fully processed, data is deleted unless you consent to further use.

3. Data processing for shipping

To fulfill your order (Art. 6 (1) (b) GDPR), we share your data with our shipping partners.

Since our goods are shipped directly from China, your details may be shared with international carriers. This is covered under European Commission standard data protection clauses.

Data transfer for shipping notifications:
If you consent, we may share your email address/phone number with the courier so they can provide delivery updates. You can withdraw consent at any time.

Main couriers used include:

Royal Mail (UK)
Evri (UK)
DPD UK

4. Data processing for payments

We work with technical providers, credit institutions and payment services. Depending on the method selected, data will be shared as required for transaction processing.

We also use fraud prevention and risk management tools (Art. 6 (1) (f) GDPR).

For services like Klarna, credit/identity checks may apply. If consent is required, you may revoke it at any time.

5. Email marketing

If you subscribe to our newsletter, we process your email address to send updates, offers, and promotions (Art. 6 (1) (a) GDPR). You may unsubscribe anytime.

If tracking is enabled, we may use tools (e.g., pixels) to measure open and click rates. You can opt-out at any time.

6. Cookies & technologies

We use cookies and similar technologies:

Essential cookies (shopping cart, login) – do not require consent.
Analytical/marketing cookies – require consent (Art. 6 (1) (a) GDPR).

You can manage cookie settings in your browser (Chrome, Safari, Edge, Firefox, Opera).

7. Third-party technologies

Google services – Analytics, Ads, Tag Manager, reCAPTCHA (IP anonymisation enabled). Data may be transferred to the USA under standard contractual clauses.

Facebook (Meta) Pixel – Used for analytics and personalised ads on Facebook & Instagram. Data may transfer to the USA.

8. Social Media

Our website may contain simple linked icons for Facebook, Instagram, Pinterest. No data is transferred unless you click.

When visiting our social media pages, the platform operator processes your data for advertising/analytics (Art. 6 (1) (a) GDPR if consented).

9. Your rights

You have the right to:

Access (Art. 15 GDPR)
Rectification (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Lodge complaints with the UK ICO or your local authority (Art. 77 GDPR).

Right to object:
If processing is based on legitimate interests (Art. 6 (1) (f) GDPR), you may object at any time. For direct marketing, your data will no longer be used once you object.

10. Contact

If you have questions about data protection, please contact:

B&S SCALING ECOM LIMITED
Email: info@alturashoes.co.uk