Privacy policy

Serenē (“we”, “us”, “our”) operates this website and online store. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller of your personal data.
Contact Details
Serenē
Email: contact@sereneatelier.co.uk

Personal Data We Collect
We may collect and process the following types of personal data:
● Identity and contact information (name, email, phone number, billing and shipping address)
● Order and transaction information (purchases, returns, order history)
● Payment information (processed securely via third-party payment providers; we do not store full card details)
● Account information (login details, preferences)
● Technical data (IP address, browser type, device information)
● Usage data (how you interact with our website)
● Communication data (messages sent to customer support)

How We Use Your Personal Data
We only process your personal data where we have a lawful basis under UK GDPR:
Contract
To fulfil orders, process payments, deliver products, and manage your account.
Legitimate Interests
To improve our services, prevent fraud, ensure website security, and understand customer behaviour.
Consent
For sending marketing communications and using non-essential cookies. You can withdraw consent at any time.
Legal Obligation
To comply with tax, accounting, and regulatory requirements.

How We Share Your Data
We may share your personal data with:
● Shopify (our ecommerce platform provider)
● Payment processors
● Shipping and fulfilment partners
● IT, analytics, and marketing service providers
All third parties are required to handle your data securely and lawfully.

International Transfers
Some of our service providers may process data outside the UK.
Where this occurs, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement or Standard Contractual Clauses.

Data Retention
We only keep your personal data for as long as necessary:
● Order and transaction data: up to 6 years (legal and tax requirements)
● Customer accounts: until deletion is requested
● Marketing data: until you withdraw consent
● Customer service communications: typically 12–24 months

Your Rights
Under UK GDPR, you have the right to:
● Access your personal data
● Request correction of inaccurate data
● Request deletion of your data
● Restrict or object to processing
● Data portability
● Withdraw consent at any time
To exercise your rights, contact us at: contact@sereneatelier.co.uk
You also have the right to complain to the Information Commissioner’s Office (ICO): https://www.ico.org.uk

Cookies
We use cookies to operate and improve our website.
● Essential cookies are required for website functionality
● Analytics and marketing cookies are used only with your consent
You can manage your cookie preferences via our cookie banner.
For more information, please see our Cookie Policy (if applicable).

Children’s Data
Our services are not intended for individuals under 16. We do not knowingly collect personal data from children.

Security
We take appropriate technical and organisational measures to protect your personal data. However, no system is completely secure.

Third-Party Services
Our website may contain links to third-party websites. We are not responsible for their privacy practices and recommend reviewing their policies separately.

Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “Last updated” date.

Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact:
Email: contact@sereneatelier.co.uk

Legal Basis and Transparency
We are committed to processing your personal data fairly, transparently, and in compliance with UK data protection law. Nothing in this policy affects your statutory rights under UK law.