Privacy policy
Last updated: August 17, 2026
This Privacy Policy explains how Celyssa collects, uses, shares and protects personal information when you visit our website, place an order, contact us or otherwise interact with our services.
1. Who We Are
Celyssa is responsible for the personal information described in this Privacy Policy.
Our contact details are:
Celyssa
20 Wharf Rd
London N1 7GR
United Kingdom
Email: support@celyssa.com
If you have any questions about this Privacy Policy or how your personal information is handled, you may contact us using the details above.
2. Personal Information We Collect
Depending on how you interact with Celyssa, we may collect the following categories of personal information:
Contact Information
- Name
- Email address
- Telephone number, where provided
- Billing address
- Shipping address
Order and Transaction Information
- Products purchased
- Selected variants
- Order number
- Order value
- Shipping information
- Returns, refunds and exchanges
- Payment status
Payment Information
Payments are processed through third-party payment providers.
Celyssa may receive limited information relating to a payment transaction, such as payment status, payment method type or transaction reference. Full payment card details are generally processed directly by the relevant payment provider rather than stored by Celyssa.
Account Information
If customer account functionality is available and you choose to create an account, we may process information associated with that account.
Communications
We may collect information you provide when you:
- Contact customer support
- Submit a contact form
- Ask a question about an order
- Request a return or refund
- Communicate with us by email
Technical and Device Information
When you use our website, certain information may be collected automatically, including:
- IP address
- Browser type
- Device type
- Operating system
- Website activity
- Referring pages
- Pages viewed
- Approximate location derived from technical information
- Cookie and similar technology identifiers
3. How We Use Personal Information
We may use personal information to:
- Process and fulfil orders
- Arrange delivery and tracking
- Process payments
- Manage returns, refunds and exchanges
- Provide customer support
- Respond to enquiries
- Detect and prevent fraud or misuse
- Maintain the security and functionality of our website
- Comply with legal, tax and regulatory obligations
- Improve our website and services
- Measure website performance
- Understand how customers interact with our website
- Send marketing communications where permitted
- Support advertising and measurement activities where legally permitted and subject to applicable consent requirements
We do not collect personal information for purposes that are unrelated to our legitimate business operations without an appropriate legal basis.
4. Legal Bases for Processing
Where UK data protection law applies, we rely on one or more lawful bases depending on the activity.
These may include:
Contract
We process personal information where necessary to:
- Process an order
- Arrange delivery
- Provide customer service relating to a purchase
- Handle returns, refunds or exchanges
Legal Obligation
We may process information where necessary to comply with legal requirements, including accounting, tax, fraud prevention and regulatory obligations.
Legitimate Interests
We may process information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.
Examples may include:
- Preventing fraud
- Maintaining website security
- Improving our services
- Managing business operations
- Understanding website performance
Consent
Where required, we rely on your consent for activities such as:
- Certain marketing communications
- Non-essential cookies
- Certain analytics technologies
- Advertising or tracking technologies
You may withdraw consent at any time where consent is the lawful basis for processing.
The ICO requires organisations to identify and communicate the lawful basis used for processing personal data.
5. Order Fulfilment and Delivery
To fulfil an order, we may share relevant personal information with service providers involved in processing and delivering your purchase.
This may include:
- Our UK-based supplier and fulfilment network
- Delivery carriers
- Logistics providers
- Order tracking providers
Only information reasonably necessary to fulfil or support the order is shared for these purposes.
6. Shopify
Our online store is hosted using Shopify.
Shopify provides the ecommerce infrastructure used to operate our website, checkout and related services.
As part of providing these services, Shopify may process personal information according to its own applicable privacy terms and data protection obligations.
7. Payment Providers
When you make a payment, personal information may be processed by the payment provider selected during checkout.
Payment providers may process information necessary to:
- Authorise transactions
- Prevent fraud
- Manage payment disputes
- Process refunds
Their processing may also be subject to their own privacy policies.
8. Analytics and Website Measurement
We may use analytics tools to understand how visitors use our website and to improve website performance.
Depending on your consent choices and applicable law, analytics providers may process information such as:
- Device identifiers
- Browser information
- IP address
- Pages viewed
- Interactions with the website
- Referral information
Where consent is required for analytics technologies, they should not be used until the required consent has been obtained.
9. Advertising and Marketing Technologies
We may use advertising and marketing services, including services provided by platforms such as Google or Meta, where applicable.
These technologies may help us:
- Measure advertising performance
- Understand whether advertisements lead to purchases
- Show relevant advertising
- Build audiences for advertising campaigns
Where applicable law requires consent for advertising cookies or similar technologies, these technologies should only operate after appropriate consent has been provided.
This is especially important in the UK because non-essential storage/access technologies generally require consent under PECR, with limited exceptions.
10. Marketing Communications
Where legally permitted, we may send promotional communications to customers or individuals who have chosen to receive them.
You may unsubscribe from marketing emails by:
- Using the unsubscribe link included in the message, or
- Contacting support@celyssa.com
Withdrawing consent to marketing does not affect service communications that are necessary for an order or customer service request.
11. Cookies and Similar Technologies
Celyssa uses cookies and similar technologies to operate the website and, where permitted, support functionality, analytics and advertising.
Cookies may include:
- Strictly necessary cookies
- Functional cookies
- Analytics cookies
- Advertising or marketing cookies
More information is available in our Cookie Policy.
Where consent is required, visitors should be given the opportunity to accept or reject non-essential technologies.
The ICO states that cookie and similar technology rules in the UK are governed by PECR and interact with UK GDPR requirements.
12. Sharing Personal Information
We may share personal information with trusted third parties where reasonably necessary to operate Celyssa.
These may include:
- Shopify
- Payment processors
- UK fulfilment and logistics providers
- Delivery carriers
- Customer support providers
- Order tracking providers
- Analytics providers
- Advertising platforms
- IT and website service providers
- Professional advisers
- Government, regulatory or law enforcement bodies where legally required
We do not share personal information with third parties for unrelated purposes without an appropriate legal basis.
13. International Transfers
Some of the service providers we use may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we take reasonable steps to ensure an appropriate lawful transfer mechanism or safeguard is used where required under applicable UK data protection law.
This may include recognised adequacy arrangements or appropriate contractual safeguards.
14. Data Retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to:
- Complete orders
- Provide customer support
- Process returns or refunds
- Maintain accounting and tax records
- Resolve disputes
- Prevent fraud
- Comply with legal obligations
Different categories of information may be retained for different periods.
When personal information is no longer reasonably required, it may be deleted, anonymised or otherwise securely disposed of.
Retention periods are one of the items that UK GDPR privacy information should address.
15. Data Security
We use reasonable organisational and technical measures intended to protect personal information against:
- Unauthorised access
- Loss
- Misuse
- Alteration
- Disclosure
- Destruction
However, no method of internet transmission or electronic storage can be guaranteed to be completely secure.
Customers should also take reasonable precautions to protect account credentials and devices where applicable.
16. Your Data Protection Rights
Depending on the circumstances and applicable UK data protection law, you may have rights including:
- The right to be informed about how your personal information is used
- The right to access personal information we hold about you
- The right to request correction of inaccurate information
- The right to request deletion of personal information in certain circumstances
- The right to restrict processing in certain circumstances
- The right to object to certain processing
- The right to data portability in certain circumstances
- Rights relating to certain automated decision-making activities
These rights may be subject to legal limitations or exceptions.
To exercise a data protection right, contact:
We may need to verify your identity before fulfilling certain requests.
17. Right to Object
Where we rely on legitimate interests as a lawful basis, you may have the right to object to that processing.
You also have the right to object to the use of personal information for direct marketing purposes.
18. Withdrawal of Consent
Where processing is based on consent, you may withdraw your consent at any time.
Withdrawal of consent does not affect processing that was lawfully carried out before consent was withdrawn.
19. Complaints
If you have concerns about how Celyssa handles your personal information, please contact us first at:
You may also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator.
The ICO specifically identifies the right to lodge a complaint with a supervisory authority as relevant privacy-notice information in appropriate circumstances.
20. Children
Celyssa's products and website are not intentionally directed at children for the purpose of collecting personal information from them.
We do not knowingly seek to collect personal information from children where doing so would be unlawful.
21. Third-Party Websites
Our website may contain links to third-party websites or services.
Celyssa is not responsible for the privacy practices of third-party websites. We encourage users to review the privacy information provided by those third parties.
22. Automated Decision-Making
We do not intentionally make decisions that produce legal or similarly significant effects on customers based solely on automated processing unless this is permitted by applicable law and appropriate safeguards are in place.
Automated systems may nevertheless be used by service providers for purposes such as fraud detection or payment security.
23. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- Changes to our services
- Changes to the technologies we use
- Changes to service providers
- Legal or regulatory requirements
The latest version will be published on this page with the updated revision date.
24. Contact Us
For questions about privacy, personal information or your data protection rights, contact:
Celyssa
20 Wharf Rd
London N1 7GR
United Kingdom
Email: support@celyssa.com