Last updated: 9th December 2025

Pastael Limited (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This Privacy & Cookie Policy explains how we collect, use, store, and share your information when you visit our website, make a purchase, or interact with us. It also explains how we use cookies and similar technologies in accordance with the UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

By using our website, you agree to the practices described in this policy. For cookie-related processing, we obtain consent where required.

 

 

1. Who We Are

Pastael Limited
Company number: 16095145
Registered address: C/O Hillier Hopkins Llp First Floor, Radius House, 51 Clarendon Road, Watford, Hertfordshire, United Kingdom, WD17 1HP
Email: data@pastael.co.uk

For UK data protection law, Pastael Limited is the data controller.

 

 

2. Personal Data We Collect

We collect the following types of information:

a. Information You Provide Directly

• Name
• Email address
• Billing and shipping address
• Telephone number
• Payment information (processed securely by Shopify or payment processors — we do not store full card details)
• Account login details
• Customer support messages or other communications

b. Information Collected Automatically

When you browse our site, Shopify automatically collects:

• IP address
• Browser type and device information
• Cookies and tracking data
• Pages visited, referring site, and time spent on site

c. Information From Third Parties

We may receive information from:

• Payment processors (e.g., Shopify Payments, PayPal, Stripe)
• Marketing platforms (Google, Meta, TikTok)
• Shopify apps integrated into our store

 

 

3. How We Use Your Personal Data

We use your data to:

• Process and fulfil orders
• Manage customer accounts
• Provide customer service
• Send order confirmations, updates, and important service messages
• Analyse website usage and improve performance
• Personalise your shopping experience
• Conduct marketing (with consent where required)
• Prevent fraud and secure our website
• Comply with legal obligations

Our lawful bases include contract necessity, legitimate interests, legal obligations, and consent.

 

 

4. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve functionality, performance, and user experience. Cookies may be set by us (first-party) or by third parties like Shopify, Google, and Meta.

Types of Cookies We Use

a. Strictly Necessary Cookies (Essential)

These are required for our website to function. They allow you to:

• Use the shopping cart
• Access secure areas
• Complete checkout
  These cookies do not require consent.

b. Performance & Analytics Cookies

These help us understand how visitors use our site.
Examples:

• Site traffic and usage patterns
• Error tracking
  We only use analytics cookies with your consent.

c. Functional Cookies

These support enhanced functionality, e.g.:

• Remembering your preferences
• Saving login sessions

d. Advertising & Targeting Cookies

Used to:

• Deliver personalised ads
• Measure ad performance
• Build marketing audiences
  These require explicit consent.

Cookie Consent Management

When you visit our website, you will see a cookie banner allowing you to:

• Accept all cookies
• Reject non-essential cookies
• Manage preferences

You can update your preferences at any time.

You may also control cookies through your browser settings, though blocking some cookies may affect site functionality.

 

 

5. Third-Party Cookies

Some cookies are placed by third-party partners whose tools we use, including:

• Shopify (website hosting, checkout, analytics)
• Google Analytics
• Meta (Facebook & Instagram)
• TikTok
• Shopify apps (reviews, loyalty, tracking, etc.)

These providers may process your data according to their own privacy policies and may transfer data outside the UK.

We ensure appropriate safeguards (e.g., Standard Contractual Clauses) for international transfers.

 

 

6. How We Share Your Personal Data

We share your data only when necessary with:

a. Service Providers

Including:

• Shopify
• Payment processors
• Shipping and fulfilment partners
• IT, analytics, and marketing platforms
• Shopify-integrated apps

They act as data processors and must protect your data.

b. Legal Authorities

If required to comply with law or prevent fraud.

We never sell personal data.

 

 

7. International Data Transfers

Some service providers may transfer your data outside the UK, including to the EU, USA, and Canada.

Where this occurs, we use legally approved safeguards such as:

• UK adequacy decisions
• Standard Contractual Clauses
• Equivalent protections required by UK GDPR

 

 

8. Data Retention

We retain your data only as long as necessary:

• Order data: 6 years (legal requirement for tax and accounting)
• Customer account data: until you close your account
• Marketing data: until you unsubscribe or withdraw consent
• Cookies: according to the cookie’s lifespan (varies by provider)

 

 

9. Your Rights Under the UK GDPR

You have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data
• Restrict or object to processing
• Move your data to another provider (data portability)
• Withdraw consent at any time

To exercise your rights, contact us at [Insert Email].

You can also complain to the Information Commissioner’s Office (ICO):
https://ico.org.uk/

 

 

10. Security

We use appropriate technical and organisational measures to protect your personal data. Shopify provides secure hosting, PCI-compliant payment infrastructure, and encrypted transmissions.

No online system is entirely secure, but we follow industry best practices.

 

 

11. Children

Our website is not intended for individuals under 16. We do not knowingly collect data from children.

 

 

12. Changes to This Policy

We may update this Privacy & Cookie Policy periodically. The updated version will always be posted on this page with a revised “Last updated” date.

 

 

13. Contact Us

If you have any questions about this policy or how your personal data is handled, please contact:

Pastael Limited
Email: data@pastael.co.uk
Address: C/O Hillier Hopkins Llp First Floor, Radius House, 51 Clarendon Road, Watford, Hertfordshire, United Kingdom, WD17 1HP