Privacy policy

This Privacy Policy describes how Lia Chahla Ltd (“we”, “us”, or “our”) collects, uses, and protects your personal data when you visit or make a purchase from www.liachahla.com (the “Site”), in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Business details
Lia Chahla Ltd
Company registration number: GB10198300
ICO registration number: ZA890990
Registered address: 5 Shaldon Way, Walton on Thames, KT12 3DJ, United Kingdom
Email: sales@liachahla.com

1. Personal data we collect

When you visit or use our Site, we may collect the following categories of personal data:

a) Device information
Includes:

  • IP address

  • Browser type and version

  • Time zone

  • Cookies

  • Pages viewed and interactions with the Site

Purpose:

  • To load the Site correctly

  • To analyse how visitors use our Site

  • To improve performance and user experience

Legal basis:

  • Legitimate interests (to run and improve our business)

  • Consent (for non-essential cookies via our cookie banner)

b) Order information
Includes:

  • Name

  • Billing and shipping address

  • Email address

  • Phone number

  • Payment method (payment details are processed securely by third-party providers; we do not store card numbers)

Purpose:

  • To fulfil your order

  • Process payments

  • Arrange shipping

  • Provide invoices and confirmations

  • Prevent fraud

  • Customer communication

Legal basis:

  • Performance of a contract

  • Legal obligation

  • Legitimate interests

c) Marketing information
Includes:

  • Email address

  • Marketing preferences

Purpose:

  • Sending newsletters and promotional emails

Legal basis:

  • Consent

You can withdraw your consent at any time by using the unsubscribe link in our emails.

d) Customer support information
Includes:

  • Information you provide via email, contact forms, or live chat (Shopify Inbox)

Purpose:

  • To provide customer support

  • Handle enquiries and complaints

Legal basis:

  • Legitimate interests

  • Contractual necessity

2. How we use your personal data

We use your personal data to:

  • Operate and manage our online store

  • Process and fulfil orders

  • Provide customer service

  • Send marketing communications (with your consent)

  • Analyse website performance

  • Prevent fraud and misuse

  • Comply with legal and regulatory obligations

3. Sharing your personal data

We only share your data with trusted third parties that help us operate our business:

E-commerce platform:

  • Shopify (store hosting and order management)

Email marketing:

  • Shopify Email

  • Mailchimp

Analytics and advertising:

  • Google Analytics

  • Google Ads

  • Meta (Facebook & Instagram)

Customer communication:

  • Shopify Inbox (live chat)

Payment processing:

  • Shopify Payments

  • PayPal

  • Stripe

  • Apple Pay

  • Google Pay

  • Klarna / Clearpay / Afterpay

Shipping and delivery:

  • Royal Mail

  • USPS

  • UPS

  • Transglobal Express

These companies act as data processors and only process your data under our instructions and in line with UK GDPR.

4. International data transfers

Some of our service providers (such as Shopify, Google, Meta, and Mailchimp) store or process data outside the UK. Where this happens, appropriate safeguards are in place, including:

  • UK adequacy regulations

  • Standard Contractual Clauses

  • Secure data handling procedures

This ensures your personal data remains protected.

5. Cookies

We use cookies and similar technologies to operate our Site and improve your experience.

Types of cookies:

  • Strictly necessary (essential for the Site to function)

  • Analytics cookies

  • Marketing cookies

We use Shopify’s Customer Privacy Banner, which allows you to:

  • Accept cookies

  • Reject non-essential cookies

  • Manage your preferences

Non-essential cookies are only set after you give consent.

You can also manage cookies via your browser settings, but disabling cookies may affect site functionality.

6. Marketing communications

We only send marketing emails if you:

  • Have actively subscribed

  • Have given clear consent

Every marketing email includes an unsubscribe option.

7. Data retention

We keep your data only as long as necessary:

  • Order and transaction records: 6 years (for accounting and legal obligations)

  • Marketing data: until you unsubscribe

  • Customer support records: up to 2 years after last contact

  • Website analytics: according to Google’s standard retention periods

Printed orders:

  • Printed order paperwork is securely destroyed using shredding after fulfilment and legal retention needs are met.

8. Automated decision-making

We do not carry out any automated decision-making that has legal or significant effects on you.

Shopify uses limited automated fraud detection which does not have a legal or significant impact on customers.

9. Your rights under UK GDPR

You have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion

  • Restrict processing

  • Object to processing

  • Data portability

  • Withdraw consent (for marketing)

To exercise your rights, contact:
📧 sales@liachahla.com

We will respond within 10 days.

10. Complaints

If you are unhappy with how we handle your data, please contact us first.

You also have the right to complain to the Information Commissioner’s Office (ICO):

Website: https://ico.org.uk/make-a-complaint/

11. Security

We take appropriate technical and organisational measures to protect your data, including:

  • SSL encryption

  • Secure hosting

  • Limited staff access

  • Strong password policies

  • Secure disposal of printed data

12. Children

Our website is accessible to all ages, however we do not knowingly collect personal data from children without parental consent.

13. Changes to this policy

We may update this policy from time to time. The latest version will always appear on our website.

Last updated: 08/01/2026