Privacy policy

Your privacy is important to us. At Royal Princess, we take our responsibility to protect your personal information seriously and believe in being fully open about how your data is handled. This Privacy Policy outlines our data practices when you browse or shop at royalprincess.co.uk, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who Controls Your Data

Royal Princess acts as the data controller for all personal information gathered through this website.

Royal Princess 71-75 Shelton Street, Covent Garden London, WC2H 9JQ United Kingdom

Royal Princess 30 N Gould St, Ste N Sheridan, WY 82801 United States

Email: support@royalprincess.co.uk Phone: +44 20 8202 8095 Website: royalprincess.co.uk

2. What Information We Collect

When you visit our website or complete a purchase, we may gather the following:

Full name
Email address
Billing and delivery address
Phone number
Order information and purchase history
Technical data (including IP address, browser type, device details, and pages viewed)
Payment-related data — handled securely by third-party payment processors; card details are never stored by us
Data collected via cookies and analytics tools (see Section 5)

3. How We Use Your Information

Your personal data is used solely for the following purposes:

Processing and fulfilling your orders through to delivery
Handling customer support queries and after-sales communication
Sending order confirmations, tracking updates, and related correspondence
Delivering marketing messages where you have explicitly opted in
Enhancing website performance, security, and overall user experience
Identifying and preventing fraudulent activity
Meeting our legal and regulatory responsibilities

4. Our Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases to process your personal data:

Contract performance — to manage and fulfil your purchases
Legal obligation — to satisfy tax, accounting, and compliance requirements
Legitimate interests — to safeguard against fraud and continually improve our service
Consent — for marketing communications and non-essential cookies

5. Who We Share Your Data With

We do not sell or trade your personal information. Data may be passed to carefully selected third-party service providers that help us run our business, such as:

Payment processing platforms (e.g. Shopify Payments, PayPal, Klarna, or equivalent)
Courier and logistics partners
Website analytics and digital advertising platforms (e.g. Google and Meta)
Shopify and other authorised e-commerce technology providers

Every third-party provider is bound by contract to comply with data protection legislation and is prohibited from using your data for any purpose beyond what we specify.

6. Cookies and Tracking

We use cookies and related tracking tools to keep the website running, monitor traffic, optimise performance, and serve relevant advertising where consent has been given. You may update or withdraw your cookie preferences at any time via your browser settings or our on-site consent tool.

For a complete breakdown of the cookies in use, please see our Cookie Policy.

7. Your Rights Under Data Protection Law

As a UK data subject, you are entitled to:

Access — obtain a copy of the personal data we hold on you
Rectification — request corrections to any inaccurate or incomplete information
Erasure — ask us to delete your data where there is no legal requirement to retain it
Objection — object to specific types of processing, including direct marketing
Restriction — request that we limit processing of your data in certain situations
Portability — receive your data in a structured, machine-readable format
Withdraw consent — at any point where consent is the basis for processing
Complain — raise a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, contact us at support@royalprincess.co.uk. We will respond within 30 days as required by UK GDPR.

8. How Long We Keep Your Data

We hold personal data only for as long as is necessary to:

Deliver our products and support services
Fulfil legal, tax, and accounting obligations (generally up to 6 years under UK law)
Handle disputes and guard against fraud

When data is no longer needed, it is securely destroyed or anonymised.

9. Keeping Your Data Safe

We apply suitable technical and organisational controls to protect your personal information from unauthorised access, loss, misuse, or disclosure. Our store is built on Shopify, which holds industry-standard security certifications including PCI DSS compliance for all payment data.

10. International Transfers

Certain third-party providers we work with may process your data outside the United Kingdom. In such cases, we ensure appropriate protections are in place consistent with UK GDPR requirements, including standard contractual clauses or adequacy decisions where applicable.

11. Policy Updates

This Privacy Policy may be revised periodically to reflect changes in our practices or legal requirements. Any amendments will appear on this page alongside an updated "Last updated" date. We recommend checking back from time to time.

12. Contact Us

If you have any questions about this policy or how we handle your personal data, please reach out to:

Royal Princess 71-75 Shelton Street, Covent Garden London, WC2H 9JQ United Kingdom

Royal Princess 30 N Gould St, Ste N Sheridan, WY 82801 United States

Email: support@royalprincess.co.uk Phone: +44 20 8202 8095 Website: royalprincess.co.uk

This policy is governed by the laws of England and Wales and has been prepared in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.