Privacy policy

Last Updated: 14 August 2026

This Privacy Policy complies with the UK GDPR and Data Protection Act 2018, explaining how Dorella collects, uses, stores and protects your personal data when you use www.dorella.shop.

Data Controller

Controller: Dorella Registered Address: 38 Saltmarket Pl, Glasgow G1 5NF, United Kingdom Privacy Enquiry Email: hello@dorella.shop

Types of Personal Data Collected

  1. Information you provide voluntarily Full name, email address, phone number, billing address, delivery address, order history and customer service messages.
  2. Automatically collected technical data IP address, device details, browser type, browsing activity, cookies and tracking data from Google Analytics and Google Ads.
  3. Transaction information Order contents and payment status. We never store full card numbers, CVV codes or expiry dates on our servers; all payment data is handled by PCI-compliant third-party processors.

Lawful Bases for Processing Your Data

  1. Fulfill orders, arrange delivery and complete contractual obligations
  2. Respond to enquiries, return requests, refunds and after-sales support
  3. Send essential updates including order confirmations, delivery alerts and policy changes
  4. Improve website performance, functionality and user experience
  5. Prevent fraudulent transactions and secure payment processes
  6. Send marketing communications only with your explicit opt-in consent
  7. Comply with UK tax, accounting and legal record-keeping requirements

Third Parties We Share Data With

We only share necessary data with trusted service providers essential to our operation: Shopify platform, authorised UK payment gateways, domestic couriers, fraud detection tools, Google Analytics, accountants and legal advisors. Dorella will never sell, rent or trade your personal data to unrelated third parties for unsolicited marketing. All processors are bound by UK GDPR compliance contracts.

Cookies & Tracking Tools

Our site uses cookies, web beacons and pixels to retain cart information, maintain sessions, strengthen security and run remarketing campaigns. You may disable non-essential cookies in browser settings, though some checkout functions may be limited.

Your GDPR Data Subject Rights

  1. Request a copy of all personal data we hold about you
  2. Request correction of inaccurate or outdated information
  3. Request erasure of your data where no legal or business purpose exists
  4. Object to or restrict processing for direct marketing at any time
  5. Request data portability in a machine-readable format
  6. Withdraw previously given marketing consent without affecting past lawful processing

Submit verified written requests to hello@dorella.shop to exercise these rights.

Data Retention

Personal data is retained only for the minimum period required to fulfil orders, resolve disputes, prevent fraud and meet UK statutory record-keeping rules. Data is securely archived or deleted once no longer needed.

Data Security

All payments are processed on Shopify’s PCI DSS encrypted infrastructure. While no online transmission is 100% risk-free, we implement industry-standard encryption and access controls to reduce data breach risks.

Minors Protection

This website is intended for customers aged 18 and over. We do not knowingly collect data from children under 18. Contact us immediately for deletion if we receive information from a minor without parental consent.

Policy Updates

We may revise this policy to align with updated UK regulations. The latest date will be posted at the top page header. Continued site use constitutes acceptance of revised terms.

Making a Complaint

If you believe we have breached data protection rules, first contact hello@dorella.shop. If unresolved, you have the right to lodge a complaint with the ICO (Information Commissioner’s Office), the UK data protection regulator.

Privacy Contact

Email: hello@dorella.shop

Response within 24–48 working hours