Privacy policy

Last updated: August 18, 2025

 

This is privacy notice of Gualberto Couture™.

 

Gualberto Couture™ operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Gualberto Couture™ is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

 

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

 

We respect your privacy and are determined to protect your personal data. The purpose of this privacy notice is to inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from). We’ll also tell you about your privacy rights and how data protection law protects you.

 

Relationship with Shopify

Our website and online store (the "Services") are powered and hosted by Shopify Inc., which provides the e-commerce platform that allows us to offer products and services to you. As part of this relationship, Shopify collects, processes, and stores certain personal information about your access to and use of the Services. This information is necessary to operate, maintain, secure, and improve the performance of the Services.

 

When you interact with our Store—such as by placing an order, browsing, or creating an account—your personal information is transmitted to and shared with Shopify, and may also be shared with third-party service providers. These providers may be located in countries other than your own, and their use of your data is subject to their respective privacy policies and legal obligations.

 

To help improve your customer experience and to support the growth and security of our business, we also make use of Shopify’s advanced and enhanced features. These features may rely on aggregated or individualized data derived from your interactions with our Store and other Shopify merchants across the platform. This includes behaviour-based data that may influence things like recommendations, fraud detection, and personalized advertising. In this context, Shopify acts as a data controller and is independently responsible for processing this information, including responding to any legal rights you may wish to exercise.

 

To understand how Shopify processes your personal data in these cases, including any rights you may have (such as access, correction, deletion, or objection), we encourage you to review the Shopify Consumer Privacy Policy and exercise your rights through their privacy portal here.

 

Disclaimer – Unsolicited Payment Information

Please do not send your credit or debit card details via email, social media, or any messaging platform. Gualberto Couture™ does not request or accept payment information through these channels and is not authorised to process transactions outside of our secure Shopify-powered checkout. For secure support, contact us at support@gualberto.co.uk, but never include your credit card information and/or payment details in your message.

 

If you choose to send your payment details through unsecure or unofficial means, you do so at your own risk. We do not accept any liability for any loss, misuse, or breach of your data that arises as a result of unsolicited disclosure of sensitive financial information, including but not limited to card numbers, CVV codes, or billing details, via non-secure communication methods. 

 

To protect your data, always complete your purchase through our official website. Our checkout is securely managed by Shopify, a PCI DSS Level 1 certified platform.

 

Shopify manages its own privacy controls independently of Gualberto Couture™. You can access, limit, or erase your personal data directly through their privacy portal at https://privacy.shopify.com/en. To contact Shopify regarding your data, please visit https://www.shopify.com/uk/contact.

 

1. What is the purpose of this privacy notice?

This privacy notice explains how we collect and process your personal data when you use this website, including any data you provide through this website when you:

  • Sign up to our newsletter or email updates
  • Purchase a product, custom order, or request a bespoke service
  • Create an account or register for a customer profile
  • Participate in promotional campaigns, giveaways, or competitions
  • Submit an enquiry through our contact form or customer service channels
  • Leave product reviews or feedback
  • Request marketing materials or personalised product recommendations
  • Interact with us on social media platforms connected to our site (such as Facebook, Instagram, or TikTok)

 

THIS WEBSITE IS NOT INTENDED FOR CHILDREN, AND WE DO NOT KNOWINGLY COLLECT DATA RELATING TO INDIVIDUALS UNDER THE AGE OF 18 AND/OR TO CHILDREN.

 

Children's Data

Our Services are not intended for use by children or individuals under the age of 18, and we do not knowingly collect, use, or disclose personal information relating to minors without appropriate legal basis or parental consent, as required by applicable law.

 

If you are under 18 years of age, please do not use or provide any personal data on or through the Services. If we become aware that we have inadvertently collected personal information from an individual under the age of 18 (or under the applicable age of majority in your jurisdiction), we will take reasonable steps to delete such data from our systems.

 

If you are a parent or legal guardian and believe your child has provided us with personal information without your consent, please contact us using the contact details provided below so we can investigate and remove the data as appropriate.

 

As of the effective date of this Privacy Policy, we do not knowingly “sell” or “share” (as those terms are defined under applicable privacy laws) personal information of individuals under 18 years of age.

 

Note: This Privacy Policy should be read in conjunction with any other privacy or data protection notices we may provide to you on specific occasions when we are collecting or processing personal data. This document supplements those notices and is not intended to override them.

 

Please read this privacy notice together with any other privacy notices we may provide on specific occasions when we collect or process your personal data. This privacy notice supplements those notices and does not override them.

 

Data Controller(s)Gualberto Couture™ is the data controller responsible for your personal data (referred to in this notice as "we", "us", or "our").

 

Our contact details are:

Gualberto Couture™

Phone: 07704 939627

Email: support@gualberto.co.uk

For all data protection matters, please contact us at support@gualberto.co.uk.

 

Third-Party Links Outside of Our Control and Third-Party Websites, Platforms, and Applications

Our Services may contain links to, or integrations with, third-party websites, applications, platforms, or plugins, including but not limited to TikTok, Instagram, Facebook, and other social media or digital service providers. These third parties operate independently from us and have their own privacy policies, terms of use, and data processing practices.

 

If you interact with these third-party platforms through our Services—such as by clicking embedded links, using login integrations, enabling social sharing tools, or accessing plugins—you may be providing personal data directly to those third parties, and such data may be collected, processed, or made publicly accessible outside of our control. We strongly encourage you to review the privacy notices of any third-party platforms or websites before sharing your personal information with them.

 

Clicking on third-party links or enabling third-party features may also allow those parties to collect, share, or track your data, including through the use of cookies or other tracking technologies. We do not control, and are not responsible for, the privacy, security, accuracy, or content of any third-party sites, services, or applications, even if accessed through our Services.

 

Unless explicitly stated otherwise, the inclusion of links, features, or content from these third parties does not imply endorsement, partnership, or affiliation with them or their operators.

 

When you leave our Services or website, we recommend you exercise caution and read the applicable privacy policies of every external website, platform, or app you visit or engage with.

 

2.         THE PERSONAL DATA WE COLLECT ABOUT YOU

Personal Information We Collect or Process

“Personal information” refers to any information that identifies or can reasonably be linked to you or another individual. This does not include data that has been anonymized or de-identified so that it cannot reasonably identify you.

Depending on how you interact with our Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal information:

  • Identity Data: Includes first name, last name, username, marital status, title, date of birth, and gender.
  • Contact Data: Includes billing address, delivery address, email address, and telephone numbers.
  • Financial Data: Includes credit card and debit card information, financial account details, payment method, transaction history, and payment confirmations.
  • Account Information: Includes username, password, security questions, preferences, and settings.
  • Transaction Information: Includes products viewed, added to cart, purchased, returned, exchanged, or cancelled, and your order history.
  • Communication Data: Includes information shared when contacting us, such as customer support inquiries.
  • Device and Technical Data: Includes device type, browser, network connection, IP address, and other unique identifiers.
  • Usage Data: Includes how and when you interact with or navigate our website, apps, or services.

·        We also collect, use, and share Aggregated Data, such as statistical or demographic information, for any purpose. Aggregated Data is derived from your personal data but is not considered personal data under the law because it does not directly or indirectly identify you. For example, we may aggregate Usage Data to calculate the percentage of users accessing a particular website feature. However, if we combine or link Aggregated Data with your personal data so that it can directly or indirectly identify you, we will treat the combined data as personal data and use it in accordance with this privacy notice.

·        We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health information, or genetic and biometric data). We also do not collect information about criminal convictions or offences.

 

Personal Information Sources

We collect personal data from the following sources:

  • Directly from you when you create an account, place an order, contact us, or otherwise interact with the Services.
  • Automatically through the Services, including via your device when visiting our site or using our products, and through cookies and similar technologies.
  • From service providers, such as payment processors, order fulfilment platforms, analytics tools, or IT providers.
  • From business and marketing partners, and from third-party platforms like TikTok, Instagram, and Facebook.

 

How We Use Your Personal Information

Depending on your interactions with us, we may use your personal data for the following purposes:

  • Providing and Improving Services: To process your orders, manage your account, remember preferences, manage deliveries and returns, respond to inquiries, and personalise your shopping experience.
  • Marketing and Advertising: To send you promotional content via email, SMS, or post; show you tailored ads on our Services or on third-party platforms like TikTok, Instagram, and Facebook; and recommend products based on your interests or activity.
  • Security and Fraud Prevention: To authenticate users, ensure secure transactions, detect and investigate fraud or malicious activity, and keep our Services safe.
  • Customer Support and Communication: To respond to messages, provide assistance, and manage ongoing interactions with you.
  • Legal Compliance: To comply with applicable laws and respond to lawful requests from authorities, including subpoenas or discovery processes, and to enforce our policies or contractual terms.

 

How We Disclose Personal Information

We may share your personal data under the following circumstances:

  • With Shopify, service providers, or third-party vendors who help us operate our business (e.g., for IT support, fulfilment, customer service, marketing, or data hosting).
  • With business and advertising partners for marketing purposes, including personalized ads based on your activity across websites.
  • When you request or consent to specific disclosures, such as social media integrations or third-party shipping.
  • With third-party apps integrated with our website or store.
  • Within our corporate group or affiliated entities.
  • In connection with business transactions (e.g., sale, merger, reorganization, bankruptcy), or to comply with legal obligations, enforce policies, or protect our rights.

 

If You Fail to Provide Personal Data

Where we are required by law, or under the terms of a contract with you, to collect personal data and you fail to provide that data when requested, we may be unable to perform the contract we have or are trying to enter into with you (for example, to deliver goods or services). In such cases, we may have to cancel a product or service you have with us, but we will notify you at the time if this is the case.

 

3.         HOW WE COLLECT YOUR PERSONAL DATA

We collect personal data about you using a variety of methods, including but not limited to:

  • Directly from you: You may provide us with your identity, contact, and financial data by filling in forms or by corresponding with us by post, phone, email, or other communication channels. This includes personal data you provide when you:
  • Apply to purchase our products and/or services;• Create an account on our website;
  • Subscribe to our services, newsletters, or publications;
  • Request to cancel, hold, or modify your orders;
  • Request to receive marketing communications from us.
  • Automatically: When you interact with our website or services, we may collect certain information automatically through cookies, log files, and other tracking technologies (please see our Cookie Policy for more details).
  • From third parties: We may receive personal data about you from third-party services, such as payment processors, social media platforms (including Instagram, Facebook, TikTok), and trusted app providers integrated with our Shopify store.

4.         HOW WE USE YOUR PERSONAL DATA

We will only use your personal data when the law allows us to. Most commonly, we will process your personal data under the following lawful bases:

Performance of a Contract: Processing your data is necessary for the performance of a contract to which you are a party, or to take steps at your request before entering into such a contract. For example, processing your order or providing you with requested services.

Legitimate Interests: This means our business interests in conducting and managing our operations to provide you with the best products, services, and secure experience. We carefully balance these interests against your rights and freedoms. We do not use your data for activities where our interests are overridden by the impact on you unless we have your consent or are required by law. For details about how we assess these interests, please contact our Data Protection Officer at support@gualberto.co.uk.

Compliance with Legal or Regulatory Obligations: Processing your personal data as necessary to comply with applicable laws, regulations, or legal requests.

Generally, we do not rely on consent as a legal basis except when sending third-party marketing communications via email or text message. You can withdraw your consent for marketing at any time by contacting us at support@gualberto.co.uk.

Purposes for which we will use your personal data

·       Purpose/Activity: To register you as a customer

·       Type of Data:

(a) Identity,

(b) Contact Lawful Basis for Processing: Performance of a contract with you

 

Marketing

We strive to offer you choice and control over how we use your personal data for marketing and advertising:

 

·       Promotional Offers from Us: We may use your Identity, Contact, Technical, Usage, and Profile Data to understand what products or services may interest you and send relevant offers. You will receive marketing communications if you have requested information or purchased from us and have not opted out.

·       Third-Party Marketing: We will obtain your explicit opt-in consent before sharing your personal data with any company outside the Gualberto Couture™ group for marketing purposes.

·       Opting Out: You can opt out of marketing messages at any time by logging into your account and adjusting your preferences; using the unsubscribe links in marketing emails or texts; or contacting us at support@gualberto.co.uk. Please note that opting out of marketing will not affect communications related to your transactions, warranties, or service experiences.

 

Cookies

You can control cookies via your browser settings. Disabling cookies may affect some website functionalities. For more details, please see our Cookie Policy.

 

Change of Purpose

We will only use your personal data for the purposes it was collected for, unless we reasonably consider a new purpose compatible with the original one. If we need to use your data for an unrelated purpose, we will notify you and explain the legal basis for doing so.

 

Please note that we may process your personal data without your knowledge or consent where required or permitted by law.

 

If you have any questions or need more information about how we use your data, please contact us at support@gualberto.co.uk.

 

5.         WHO WE SHARE YOUR PERSONAL DATA WITH

We may have to share your personal data with the following categories of parties to operate our store, fulfil your orders, communicate with you, and meet legal obligations:

External Third Parties

Independent companies that support our day-to-day operations or help us market and deliver our services, including:

  • Shipping and logistics providers (e.g., Royal Mail, DHL) to deliver your purchases.
  • Payment gateways and fraud detection services (e.g., Shopify Payments, PayPal).
  • Professional advisers (e.g., lawyers, accountants and other professionals who we may sought advise or consultation/s) who provide consultancy or legal compliance support.
  • Regulators and law enforcement, where required by law or to defend legal rights.
  • Social media platforms integrated with our store:
    • Meta Platforms, Inc. (Facebook and Instagram)
    • TikTok Inc.

These platforms may receive limited personal data (such as hashed email addresses or interaction history) to:

·        Enable shopping features (e.g., Instagram Shopping, TikTok Shop)

·        Serve personalised ads and measure campaign effectiveness

·        Improve user experience across channels

 

You can manage your privacy settings directly within your own social media accounts.

 

Third-Party Service Providers (acting as processors)

We use a number of trusted third-party service providers, via Shopify, to help run and enhance your shopping experience. These providers only process your data under our instructions and in line with relevant data protection laws. They include:

  • Shopify Inc. – our ecommerce platform provider, which offers secure hosting, checkout, payment processing, and backend support. Shopify UK Limited also operates within the UK, and regional offices exist in Ireland and Lithuania.
  • Shopify Email, Shopify Forms, and Shopify Marketing Automations – used to collect emails, build subscriber lists, and send targeted communications.
  • Third-party apps from the Shopify App Store, such as:
    • Email marketing platforms (e.g., Klaviyo, Mailchimp)
    • Order and fulfilment tools
    • Review systems and loyalty programs
    • Analytics and SEO plugins
    • Inventory management apps

 

All third-party service providers are required to respect the security of your personal data and to treat it in accordance with the law.

We use trusted service providers to support the operation and functionality of our website and online store. These include:

  • Shopify Inc., which acts as our primary data processor. Shopify provides the e-commerce platform, hosting, and IT system administration services that power our store. Shopify Inc. is headquartered in Ottawa, Ontario, Canada, and also operates through Shopify UK Limited, registered at 5 Churchill Place, 10th Floor, London, United Kingdom, E14 5HU, as well as regional offices across the European Union, including Ireland and Lithuania. We rely on Shopify’s vetted app ecosystem for additional store functionality, including marketing, customer service, analytics, and payment processing.
  • Professional advisers, acting as processors or joint controllers, including lawyers, bankers, auditors, and insurers based in Northern Ireland and the UK who provide consultancy, banking, legal, insurance, and accounting services.
  • HM Revenue & Customs, regulators, and other authorities, acting as processors or joint controllers based in the United Kingdom, who require reporting of processing activities in certain circumstances.
  • Social media platforms connected to our store, including Meta Platforms, Inc. (Facebook and Instagram) and TikTok Inc., which provide integrated shopping features and marketing tools.
  • Specific third parties as listed above.
  • Third parties to whom we may choose to sell, transfer, or merge parts of our business or assets. In the event of such changes, new owners may process your personal data as described in this privacy notice.

 

6.         INTERNATIONAL TRANSFERS

Your personal data may be transferred to, stored in, or processed in countries outside of the one in which you reside, including countries that may not provide the same level of data protection as your home jurisdiction.

 

This includes data sharing within Gualberto Couture™, Shopify, TikTok, Instagram, Facebook, and other third-party applications and services we use to operate our business. These external parties may be located outside the United Kingdom (UK) and the European Economic Area (EEA), and as such, international transfers of your personal data may occur.

 

Where we do transfer your personal information internationally, we ensure that it is protected by implementing one or more of the following safeguards:

  • Standard Contractual Clauses (SCCs): We rely on UK-approved and/or European Commission-approved SCCs, or any successor agreements or mechanisms, to ensure that the transfer complies with UK and EU data protection laws.
  • Adequacy Decisions: Transfers may be made to countries officially recognised by the UK Government or European Commission as providing an adequate level of protection for personal data.
  • Other lawful mechanisms: We may rely on other legally acceptable transfer tools, such as binding corporate rules or contractual obligations with service providers that include appropriate data protection commitments.

We take all necessary steps to ensure your personal data is treated securely and in accordance with this Privacy Policy and applicable data protection laws, regardless of where the data is processed.

If you have any questions about our international data transfers or want to request a copy of the relevant transfer mechanisms in place, you may contact us using the details provided at the end of this Privacy Policy.

 

7.         DATA SECURITY

We are committed to protecting your personal data and have implemented appropriate technical and organisational security measures to prevent your data from being accidentally lost, used, accessed, altered, or disclosed in an unauthorised way.

These measures include, but are not limited to:

  • Secure servers and firewalls
  • Data encryption during transfer and storage where applicable
  • Access controls and authentication procedures
  • Regular monitoring, and evaluation of security systems
  • Staff training on data protection and confidentiality

Access to your personal data is limited strictly to employees, agents, contractors, and other authorised third parties who have a genuine business need to access it. They will only process your personal data on our documented instructions and are bound by strict confidentiality obligations under contract and/or law.

We have also established robust internal procedures to detect, report, and investigate any suspected personal data breach. In the event of a breach, we will notify you and any relevant supervisory authority where we are legally required to do so under applicable data protection laws, including the UK GDPR, EU GDPR, CCPA/CPRA, and PIPEDA.

 

Security and Retention of Your Information

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide you with Services, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies.

 

If you have any concerns about the security of your data or suspect that your information may have been compromised, please contact our Data Protection Officer immediately at support@gualberto.co.uk.

 

8.         DATA RETENTION

We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet any legal, accounting, or reporting obligations, and/or compliance regulations.

When determining the appropriate retention period, we consider factors such as:

  • The amount, nature, and sensitivity of the personal data;
  • The potential risk of harm from unauthorised use or disclosure;
  • The purposes for which we process your data and whether those purposes can be achieved by other means;
  • Relevant legal requirements and industry standards.

 

By law, we are required to keep certain basic customer information (including contact details, identity, financial, and transaction data) for up to six years after you cease being a customer to comply with tax and accounting regulations.

You have rights regarding your personal data, including the right to request deletion in certain circumstances.

 

In some cases, we may anonymise your personal data so that it can no longer be linked to you. Anonymised data may be used indefinitely for research, analysis, or statistical purposes without further notice to you.

 

9.         YOUR LEGAL RIGHTS

Your Privacy Rights

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. These rights are not absolute and may apply only in specific circumstances. In certain cases, we may decline your request as permitted by law.

 

General Privacy Rights (Globally Applicable, Subject to Local Laws)

  • Right to Access / Know
  • You may have the right to request access to personal information that we hold about you.
  • Right to Delete / Erasure
  • You may have the right to request that we delete your personal information, subject to certain legal exceptions.
  • Right to Correct / Rectification
  • You may have the right to request that we correct inaccurate or incomplete personal information.
  • Right to Data Portability
  • In certain circumstances, you may request a copy of your personal data in a structured, commonly used, and machine-readable format, and you may ask us to transfer it to another controller.
  • Right to Opt Out of Sale or Sharing for Targeted Advertising
  • Depending on your location, you may have the right to opt out of the "sale" or "sharing" of your personal data or its use for "targeted advertising" as defined under applicable law.

 

You can exercise this right by:

    • Using the opt-out links provided on our website.
    • Enabling the Global Privacy Control (GPC) signal in your browser or device. When we detect the GPC signal, we will honor it for that browser/device and, where possible, link it to your Shopify account. Learn more: https://globalprivacycontrol.org.
  • Managing Communication Preferences
  • You can opt out of promotional emails by using the unsubscribe link in any of our messages. Please note that opting out of marketing communications does not affect service-related messages (e.g., order updates or legal notices).

 

Additional Rights for UK and EEA Residents (Under UK GDPR & EU GDPR)

If you reside in the United Kingdom or European Economic Area, you may have additional rights under the UK GDPR or EU GDPR:

  • Right to Restriction of Processing
  • You may request that we restrict the processing of your personal data in specific situations, such as when you contest the data's accuracy or object to the processing.
  • Right to Object
  • You may object to processing that is based on our legitimate interests, direct marketing, or scientific/statistical research.
  • Right to Withdraw Consent
  • Where processing is based on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of any processing carried out before your withdrawal.
  • Right to Lodge a Complaint
  • You have the right to lodge a complaint with your local data protection authority. For the UK, this is the Information Commissioner's Office (ICO).

 

How to Exercise Your Rights

You may exercise any of your rights by:

  • Using built-in tools on our website (e.g., account settings, cookie preferences)
  • Contacting us directly via the details provided at the end of this Privacy Policy
  • Submitting a request through our designated rights request form (if applicable)

 

We may need to verify your identity before responding to your request. You may also authorize an agent to make requests on your behalf, but we will require appropriate documentation to confirm their authority and may still ask for identity verification from you directly.

 

We will respond to your request within the timeframes required by applicable law.

 

Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you may have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

  • Right to Know
    You have the right to request information about the categories and specific pieces of personal information we have collected about you, including the sources of the information, the purposes for which we use it, and the categories of third parties with whom we share it.
  • Right to Delete
  • You have the right to request that we delete personal information that we have collected from you, subject to certain legal exceptions.
  • Right to Correct
  • You may request correction of inaccurate personal information that we maintain about you.
  • Right to Opt Out of Sale or Sharing
  • You have the right to opt out of the sale or sharing of your personal information for cross-context behavioural advertising.
  • Right to Limit Use and Disclosure of Sensitive Personal Information
  • If we collect sensitive personal information (e.g., precise geolocation, financial details, racial or ethnic data), you have the right to request that we limit its use to specific business purposes defined by law.
  • Right to Non-Discrimination
  • We will not discriminate against you for exercising your privacy rights under the CCPA/CPRA.

 

Exercising Your California Rights

You or your authorized agent may submit a verifiable request by:

  • Using the contact information at the end of this policy
  • Emailing us or submitting a request via our online form (if available)
  • Enabling Global Privacy Control (GPC) in your browser, which we recognize as a valid opt-out request for devices/browsers that support it

Please note: We may request additional verification information before fulfilling certain requests in order to protect your data and comply with legal requirements.

 

How We Use Your Personal Information

We use your personal information to:

  • Provide, maintain, and improve our services and products.
  • Communicate with you about your account, orders, or requests.
  • Deliver marketing and promotional materials.
  • Comply with legal obligations and enforce our agreements.
  • Protect against fraud and maintain security.

How We Share Your Personal Information

We may share your personal information with:

  • Service Providers: third-party companies who perform services on our behalf, such as payment processors, shipping partners, marketing platforms, and analytics providers.
  • Business Partners: where necessary for joint promotions or co-branded services.
  • Compliance with Law: when required by law or legal process.
  • Other Parties: with your consent or as disclosed at the time of collection.

We do not sell your personal information for monetary consideration. However, under California law, some disclosures to service providers or advertising partners may be considered "sales" or "sharing" of data.

 

Your Rights Under CCPA/CPRA

Subject to applicable exceptions and limitations, you have the following rights:

  • Right to Know and Access: You have the right to request a detailed report about the personal information we have collected about you, including the categories of data, sources, purposes, and third parties with whom we have shared it.
  • Right to Delete: You may request deletion of your personal information that we have collected, except where retention is necessary to complete transactions, comply with legal obligations, or for other allowable reasons.
  • Right to Correct: You may request correction of inaccurate personal information we maintain.
  • Right to Opt Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for targeted advertising or other commercial purposes.
    To opt out, you can:
    • Use the Global Privacy Control (GPC) feature in your browser, which we honour;
    • Contact us directly using the contact information below.
  • Right to Limit Use and Disclosure of Sensitive Personal Information: If we collect sensitive personal information (such as government IDs, race, health data), you may direct us to limit its use and disclosure.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights. This means we will not deny you services, charge different prices, or provide different quality of services based on your exercise of these rights.

 

How to Exercise Your Rights

To submit a request to exercise any of these rights, please:

  • Contact us at:
    Email: [insert email address]
    Phone: [insert phone number]
    Mail: [insert mailing address]
  • Verify your identity. We may request information to confirm your identity and protect your privacy.
  • Authorize an agent to make requests on your behalf by providing a signed authorization and identity verification.

We will respond to your request within the timeframes required by law, typically within 45 calendar days.

 

If you wish to exercise any of these rights, please contact us at support@gualberto.co.uk.

 

Fees

A £10 fee is required. However, if your request is manifestly unfounded, excessive, or repetitive, we may charge a reasonable administrative fee or decline to act on the request. In such cases, we may also seek legal advice.

Verification and security

To protect your privacy and security, we may need to verify your identity before responding to your request. We may also contact you for additional information to help us locate your personal data or clarify your request.

Respond Time

We aim to respond to all valid requests within one calendar month. If your request is complex or you have made multiple requests, we may extend this period by up to two additional months. In such cases, we may need to consult with our legal team to properly assess the request and ensure compliance with applicable laws. We will inform you promptly of any such extension and keep you updated on the progress of your request.

10.       Changes to this Notice and Your Duty to Inform Us of Changes

This version was last updated on August 1, 2025.

Historic versions are archived and can be obtained by contacting us.

Please keep us informed if your personal data changes during your relationship with us. It is important that the personal data we hold about you is accurate and current.

 

11. Payment Information and PCI DSS Compliance

Important Notice – Do Not Send Payment Details via Email

For your security and in compliance with PCI DSS (Payment Card Industry Data Security Standard) requirements, please do not include your credit or debit card details and/or bank details in any emails or messages sent to support@gualberto.co.uk or any other communication channel we manage.

We are unable to process payments or verify transactions via email, and sending sensitive financial information this way may expose you to unnecessary risk.

All payments must be completed securely through our website’s checkout process, which is powered by Shopify and certified as PCI DSS Level 1 compliant. This ensures that your card details are encrypted and handled with the highest level of security.

If you have any questions about your order or payment, please contact us without including card details, and we will guide you through the proper process.

We do not directly collect or store your credit or debit card details. All payment transactions made through our online store are securely processed by Shopify, our e-commerce platform provider.

 

Disclaimer – Unsolicited Payment Information

Please do NOT send your credit or debit card or bank details via email, social media, or any messaging platform. Gualberto Couture™ does not request or accept payment information through these channels and is not authorised to process transactions outside of our secure Shopify-powered checkout.

 

If you choose to send your payment details through unsecure or unofficial means, you do so at your own risk. We do not accept any liability for any loss, misuse, or breach of your data that arises as a result of unsolicited disclosure of sensitive financial information, including but not limited to card numbers, CVV codes, or billing details, via non-secure communication methods.

 

To protect your data, always complete your purchase through our official website. Our checkout is securely managed by Shopify, a PCI DSS Level 1 certified platform.

For secure support, contact us at support@gualberto.co.uk, but never include card information in your message.

 

Shopify is certified Level 1 PCI DSS compliant, which is the highest standard of security for organisations handling payment information. This means that your payment data is handled in a secure, encrypted environment and in accordance with strict regulatory requirements to prevent fraud and protect your personal and financial information.

For more details about how Shopify processes and protects payment data, please refer to Shopify’s PCI Compliance Statement.

 

12. Your Rights and Choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.

  • Right to Access / Know. You may have a right to request access to personal information that we hold about you.
  • Right to Delete. You may have a right to request that we delete personal information we maintain about you.
  • Right to Correct. You may have a right to request that we correct inaccurate personal information we maintain about you.
  • Right of Portability. You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
  • Right to Opt out of Sale or Sharing for Targeted Advertising. Depending on where you reside, you may have a right to opt out of the "sale" or "share" of your personal information or to opt out of the processing of your personal information for purposes considered to be "targeted advertising", as defined in applicable privacy laws. You can exercise your rights to opt-out of those uses here. Please note that if you visit our website with the Global Privacy Control opt-out preference signal enabled, depending on where you are, we will automatically treat this as a request to opt-out for the device and browser that you use to visit the website. If we are able to associate the device sending the signal to a Shopify account, we will apply the opt out request to the account as well. To learn more about Global Privacy Control, you can visit([https://globalprivacycontrol.org/](https://globalprivacycontrol.org/)). Other than the Global Privacy Control, we do not recognize other "Do Not Track" signals that may be sent from your web browser or device.
  • Managing Communication Preferences. We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.

If you reside in the UK or European Economic Area, and subject to exceptions and limitations provided by local law, you may exercise the following rights in addition to the rights outlined above:

  • Objection to Processing and Restriction of Processing: You may have the right to ask us to stop or restrict our processing of personal information for certain purposes.
  • Withdrawal of Consent: Where we rely on consent to process your personal information, you have the right to withdraw this consent. If you withdraw your consent, this will not affect the lawfulness of any processing based on your consent before its withdrawal.

You may exercise any of these rights where indicated on the Services or by contacting us using the contact details provided below. To learn more about how Shopify uses your personal information and any rights you may have, including rights related to data processed by Shopify, you can visit([https://privacy.shopify.com/en](https://privacy.shopify.com/en)).

We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your requests, as permitted or required under applicable law. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.

 

Complaints

If you have complaints about how we process your personal information, please contact us using the contact details provided below. Depending on where you live, you may have the right to appeal our decision by contacting us using the contact details set out below, or lodge your complaint with your local data protection authority. For the EEA, you can find a list of the responsible data protection supervisory authorities below.

 

Queries, Requests, or Concerns

To exercise your rights, or for queries or complaints relating to this policy or any data protection matters between you and us, please first contact our Data Protection Officer/Data Representative at: support@gualbert.co.uk.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction:

  • European Union: You can contact the Data Protection Authority (DPA) in your member state. A list of DPAs is available at: https://edpb.europa.eu/about-edpb/board/members_en
  • United Kingdom: Information Commissioner’s Office (ICO)

Phone: 0303 123 1113

Online: https://ico.org.uk/global/contact-us/email/

Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, England, UK

  • California, USA: California Attorney General

Online: https://oag.ca.gov/contact/consumer-complaint-against-business-or-company

Phone: 1-800-952-5225

  • Canada: Office of the Privacy Commissioner of Canada

Phone: 1-800-282-1376

Online: https://www.priv.gc.ca/en/report-a-concern/file-a-complaint

 

If you wish to contact us, our details are as follows:

Company Name: Gualberto Couture™

Contact: 07704939627

Email: support@gualberto.co.uk

For secure support, contact us at support@gualberto.co.uk, but never include card information in your message.

 

Additional Notes: Gualberto Couture™ reserves the right to amend, correct, or clarify any and/or all information provided, including rectifying any errors and/or omissions. The above information is not exhaustive, and we further reserve the right to update any and/or all information without prior notice.

 General Disclaimer:
While we make every effort to ensure that the information on our website, communications, marketing materials, and product descriptions is accurate, complete, and up-to-date, Gualberto Couture™ makes no representations or warranties of any kind, express or implied, about the accuracy, reliability, or completeness of any information provided.

Errors and Omissions:
All information, including pricing, availability, descriptions, images, specifications, and other content, is provided “as is” and may contain errors, inaccuracies, or omissions. We reserve the right to correct any errors, inaccuracies, or omissions, and to change or update information without prior notice.

Limitation of Liability:
To the fullest extent permitted by law, Gualberto Couture™ shall not be liable for any direct, indirect, incidental, consequential, special, or punitive damages, or any loss of profit, revenue, business, or opportunity arising from reliance on or use of any information contained on our website or in our communications, errors, inaccuracies, omissions in such information, or any other matter relating to the provision of information, products, or services by us.

Reservation of Rights:
We reserve the right, at our sole discretion, to correct, update, or remove any information, content, or materials; restrict access to or suspend the website or certain features temporarily or permanently; and refuse or cancel orders or transactions at any time for any reason, including errors in pricing, product information, or availability.

No Endorsement or Warranty:
Any links to third-party websites, services, or content do not constitute endorsement by Gualberto Couture™, and we make no representations regarding the accuracy or reliability of any third-party content. All use of such third-party content is at your own risk.

Privacy Disclaimer:
We take your privacy seriously. Any personal information you provide to us, whether through our website, communications, or purchases, will be processed in accordance with our Privacy Policy. We are not responsible for any unauthorized access, disclosure, or misuse of information once it is submitted to us or transmitted over the internet.

Acceptance:
By using our website or purchasing our products, you acknowledge and accept this disclaimer and agree that it governs your use of our information and services.

Thank you for your business.

-End-