Privacy policy
Last updated: August 17, 2026
Celyssa respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and share personal information when you visit celyssa.com, place an order, contact us or otherwise interact with our services.
This policy should be read together with our Cookie Policy and Terms of Service.
Who We Are
Celyssa operates the website celyssa.com.
Our contact details are:
Celyssa
20 Wharf Rd
London N1 7GR
United Kingdom
Customer Support
support@celyssa.com
For the purposes of applicable UK data protection law, Celyssa is responsible for determining how personal information collected through our store is used, except where another service provider acts independently as a separate controller.
Information We Collect
Depending on how you interact with Celyssa, we may collect the following categories of personal information:
Contact Information
This may include:
- name;
- email address;
- telephone number, where provided;
- billing address;
- delivery address.
Order Information
This may include:
- products ordered;
- order number;
- transaction details;
- delivery information;
- returns and refund information;
- communications relating to your order.
Payment Information
Payments are processed through the payment methods and payment providers available at checkout.
Payment service providers may collect and process payment card or other payment information required to complete your transaction.
Celyssa does not need to store your complete payment card details in order to fulfil your order.
Website and Device Information
When you use our website, we may collect information such as:
- IP address;
- browser type;
- device information;
- pages viewed;
- interaction with our website;
- referral information;
- cookie and similar technology data;
- general website usage information.
The use of cookies and similar technologies is explained further in our Cookie Policy.
Communications
If you contact us, we may collect information contained in your communications, including customer service requests, product questions, returns and refund enquiries.
Marketing Information
Where applicable, we may collect:
- your marketing preferences;
- whether you have subscribed to email marketing;
- interactions with marketing communications.
How We Use Your Personal Information
We may use personal information for the following purposes.
Processing and Fulfilling Orders
We use customer and order information to:
- process purchases;
- confirm orders;
- arrange delivery;
- communicate order updates;
- provide customer service;
- process returns, exchanges and refunds.
This processing is generally necessary to perform our contract with you.
Providing Customer Support
We may use your information to:
- respond to enquiries;
- investigate delivery issues;
- handle returns;
- resolve complaints;
- assist with product questions.
This may be necessary to perform our contract with you or for our legitimate interests in providing customer service.
Preventing Fraud and Maintaining Security
We may process information to:
- detect fraudulent transactions;
- prevent misuse of our website;
- maintain website security;
- protect our customers and business.
This processing may be based on our legitimate interests or legal obligations, depending on the circumstances.
Legal and Regulatory Obligations
We may process and retain personal information where necessary to comply with:
- tax requirements;
- accounting obligations;
- consumer protection laws;
- legal requests;
- regulatory obligations;
- fraud prevention requirements.
This processing is based on applicable legal obligations.
Improving Our Website and Services
We may use information about website interactions to understand how our website and services are used and to improve customer experience.
Where required by applicable law, optional analytics or similar technologies will only be used with the appropriate consent.
Marketing
Where permitted by law, we may use your contact information to send marketing communications about:
- new products;
- promotions;
- offers;
- Celyssa updates.
Where consent is required, we will rely on your consent.
You can unsubscribe from marketing emails at any time using the unsubscribe link included in the email or by contacting:
Withdrawing from marketing communications does not prevent us from sending necessary transactional communications relating to your orders.
Lawful Bases for Processing
Depending on the purpose, we may rely on one or more lawful bases under applicable UK data protection law, including:
- Contract — where processing is necessary to fulfil an order or provide requested services;
- Legal obligation — where we must process information to comply with the law;
- Legitimate interests — where processing is reasonably necessary for our business operations and does not override your rights;
- Consent — where you have provided consent, such as for certain marketing or optional cookie uses.
The ICO requires organisations to explain the lawful basis used for processing where relevant.
Who We Share Information With
We may share personal information with third parties where reasonably necessary to operate our business.
These may include:
Shopify
Our online store is hosted on Shopify.
Shopify provides the ecommerce infrastructure that supports our website, checkout and order management.
Personal information may therefore be processed through Shopify systems in connection with your use of our store.
Payment Providers
Payment information may be shared with payment service providers required to process your purchase.
Shipping and Logistics Providers
We may provide information such as your:
- name;
- delivery address;
- telephone number, where required;
- order details;
to delivery and logistics providers so they can fulfil your order.
Customer Service Providers
Where applicable, service providers may assist us in responding to customer enquiries or managing orders.
Analytics and Technology Providers
Where permitted and, when required, with your consent, we may use technology or analytics providers to understand and improve the operation of our website.
Advertising and Marketing Providers
Where legally permitted and subject to applicable consent requirements, information may be processed by advertising platforms or marketing providers to measure advertising performance or deliver marketing communications.
Professional and Legal Advisers
We may share information with professional advisers, regulators or authorities where reasonably necessary or legally required.
We do not sell personal information to advertisers.
Cookies and Similar Technologies
Celyssa uses cookies and similar technologies for purposes such as:
- website functionality;
- shopping cart operation;
- checkout;
- security;
- remembering preferences;
- analytics;
- advertising and marketing where permitted.
Some cookies are necessary for the website to function.
Optional cookies and similar technologies are handled in accordance with applicable consent requirements.
Please review our Cookie Policy for more information.
The ICO confirms that where cookie-related information constitutes personal data, UK GDPR and data protection requirements may also apply.
International Data Transfers
Some service providers used by Celyssa may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we take appropriate steps to ensure that such transfers are made in accordance with applicable UK data protection requirements.
Depending on the destination and provider, appropriate safeguards may include recognised contractual protections or other lawful transfer mechanisms.
How Long We Keep Your Information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.
Retention periods may depend on:
- the nature of the information;
- order and transaction requirements;
- accounting and tax obligations;
- customer service needs;
- fraud prevention;
- dispute resolution;
- legal obligations.
We may retain order and transaction information for the period required by applicable accounting, tax and legal requirements.
Information that is no longer required will be deleted or anonymised where reasonably appropriate.
The ICO specifically expects privacy notices to explain how long personal data is kept or how retention periods are determined.
Your Data Protection Rights
Depending on the circumstances and applicable UK data protection law, you may have rights including:
- the right to request access to personal information we hold about you;
- the right to request correction of inaccurate or incomplete information;
- the right to request deletion of personal information in certain circumstances;
- the right to request restriction of processing;
- the right to object to certain processing;
- the right to data portability in certain circumstances;
- the right to withdraw consent where processing is based on consent.
These rights are subject to applicable legal conditions and exceptions.
The ICO notes that privacy notices should tell individuals which rights apply to their information.
Right to Object
Where we process your personal information based on legitimate interests, you may have the right to object to that processing.
You also have the right to object to the use of your personal information for direct marketing purposes.
To exercise this right, contact:
Withdrawing Consent
Where we rely on your consent to process personal information, you may withdraw that consent at any time.
Withdrawal does not affect the lawfulness of processing that occurred before consent was withdrawn.
Exercising Your Rights
To make a data protection request, please contact:
We may ask for information reasonably necessary to verify your identity before fulfilling certain requests.
Complaints
If you have concerns about how Celyssa handles your personal information, please contact us first at:
You may also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority responsible for data protection.
Security
We use reasonable technical, organisational and administrative measures intended to protect personal information against:
- unauthorised access;
- loss;
- misuse;
- alteration;
- disclosure.
However, no method of internet transmission or electronic storage can be guaranteed to be completely secure.
Children
Celyssa's website and products are intended for a general consumer audience and are not specifically directed at children.
We do not knowingly seek to collect personal information from children where doing so would be unlawful.
Third-Party Links
Our website may contain links to websites or services operated by third parties.
Celyssa is not responsible for the privacy practices of websites or services that we do not control.
We encourage you to review the privacy information provided by those third parties.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- changes to our services;
- changes to technology or service providers;
- changes to our business practices;
- changes in applicable law.
The latest version will be published on this page with the revised Last updated date.
Contact Us
For questions about this Privacy Policy, your personal information or your data protection rights, please contact:
Celyssa
20 Wharf Rd
London N1 7GR
United Kingdom
Customer Support
support@celyssa.com