Privacy policy

Privacy Policy

Effective date: 5 June 2026

Your privacy matters to us. This policy describes what personal data Castara London collects when you browse www.castaralondon.com, shop with us or contact our team — and how we look after that data. "You" and "your" means any visitor or customer using our website or services.

Please take a moment to read it.

What Data We Hold About You

Personal data is any information that identifies you or could reasonably be linked to you. What we collect depends on how you interact with us.

Details you share with us directly

Your name, postal address, email address and phone number
Billing and delivery information relating to your order
Login details if you create an account
The content of messages you send to our support team

Certain features and services can only be provided if this information is supplied.

Data gathered automatically

While you browse, cookies and similar technologies record technical and usage data — for example your IP address, browser type, device information and the pages you visit.

Data from third parties

We may also receive personal data from trusted partners, such as Shopify (our shop platform), payment providers, and analytics or marketing partners. All such data is treated as described in this policy.

How and Why We Use Your Data

We process personal data to:

handle and deliver your orders,
answer enquiries and provide customer care,
run, secure and improve our website and services,
send essential service messages, and
detect and prevent fraud, misuse or unlawful activity.

Every processing activity rests on a legal basis under the UK GDPR: performance of a contract, compliance with a legal obligation, our legitimate interests, or your consent. Marketing emails are only sent where the law permits it or you have agreed to receive them.

Cookies

Cookies keep the shop working properly, show us how visitors use the site and help us improve it. Details on the cookies set by Shopify can be found at https://www.shopify.com/legal/cookies. You can control or delete cookies at any time via your browser settings.

When We Share Data

We pass personal data to third parties only where it is needed to run our business:

service providers for payments, hosting, order fulfilment, IT and website operations,
analytics and marketing partners, and
authorities or regulators where the law requires disclosure.

Sharing is always limited to what is necessary and carried out lawfully.

Transfers Outside the UK

Some of our providers process data outside the United Kingdom. Whenever that happens, we put appropriate safeguards in place as required by applicable data protection law.

Storage Periods and Security

We protect personal data with suitable technical and organisational measures, and we keep it only for as long as legal, business or operational reasons require.

Your Rights

Under UK data protection law you may, depending on the circumstances, request access to your data, have it corrected or deleted, restrict or object to its processing, and receive a copy in a portable format.

To exercise any of these rights, simply contact us using the details at the end of this page.

If You Are Unhappy

Should you have concerns about how we handle your data, please reach out to us first — we will do our best to resolve the issue. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

Young Visitors

Our shop is not aimed at anyone under 16, and we do not knowingly collect data from children.

Links to Other Sites

Where our website links to third-party sites, their privacy practices are their own responsibility — this policy does not cover them.

Changes to This Policy

We update this policy whenever our operations or legal requirements change. The current version is always published here, marked with a new effective date.