top of page
EllaLogoPink.png

Privacy Policy

Last Updated September 2026

Ellastrated respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how Ellastrated collects, uses, stores and protects personal information when you visit our website, place an order, contact us or otherwise interact with our shop.

Our website is hosted and operated using Big Cartel.

Who We Are

The business responsible for your personal information is:

Business name: Ellastrated
Email: ellakasperowicz@outlook.com

For the purposes of UK data protection law, we are the data controller for the personal information we collect and use in connection with Ellastrated.

If you have any questions about this Privacy Policy or how we use your information, please contact us using the details above.

What Personal Information
We May Collect

Depending on how you interact with Ellastrated, we may collect some or all of the following information:

When you place an order

  • Your name.

  • Billing and delivery address.

  • Email address.

  • Telephone number, where provided.

  • Details of the products you purchase.

  • Order number and order history.

  • Delivery and tracking information.

  • Payment-related information necessary to process your order.

We do not normally receive or store your full payment card details. Payments are processed by the payment provider available through our online checkout.

When you contact us

If you contact us by email, through our website or another method, we may collect:

  • Your name.

  • Email address.

  • Any contact details you provide.

  • The contents of your message.

  • Information about your order where relevant.

We use this information to respond to your enquiry and provide customer service.

When you visit our website

Some technical information may be collected automatically when you visit the website, such as:

  • IP address.

  • Browser and device information.

  • Operating system.

  • Pages visited.

  • Date and time of visits.

  • Information about how you interact with the website.

Some of this information may be collected through cookies and similar technologies.

How We Use Your Information

We may use your personal information to:

  • Process and fulfil your orders.

  • Take and process payments.

  • Arrange delivery of your purchases.

  • Send order confirmations and delivery updates.

  • Respond to enquiries and provide customer support.

  • Deal with returns, refunds and complaints.

  • Keep records of transactions.

  • Prevent fraud and protect the security of our website and business.

  • Meet our legal and accounting obligations.

  • Improve our website, products and customer experience.

  • Send marketing communications where you have provided the appropriate consent or where otherwise permitted by law.

We only use personal information for purposes that are relevant to our business and appropriate to the information we collect.

Our Lawful Bases For
Using Your Information

Under UK data protection law, we need a lawful basis for processing personal information.

Depending on the circumstances, we may rely on the following lawful bases:

Contract

We need certain information to process and fulfil your order and provide the products or services you have purchased.

For example, we need your name and delivery address to send your order.

Legal obligation

We may need to retain or use certain information to comply with legal, tax, accounting or other regulatory requirements.

Legitimate interests

We may use information where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.

This may include administering our business, responding to enquiries, maintaining security, preventing fraud and improving our services.

Consent

Where required, we may ask for your consent before using your information for a particular purpose, such as certain forms of marketing or non-essential cookies.

Where processing is based on consent, you can withdraw that consent at any time.

Who We Share Your
Information With

We do not sell your personal information.

We may share information with trusted third parties where this is necessary to operate Ellastrated and provide our services.

These may include:

WIX

Our online shop is hosted using WIX. WIX provides the technology that allows us to display products, operate our shop, manage orders and provide checkout functionality.

WIX may process personal information on our behalf in connection with these services. WIX publishes its own privacy information explaining how it processes personal information.

Payment providers

Payment information is processed through the payment provider(s) available at checkout.

We share the information necessary to process your payment and complete your purchase.

Payment providers may have their own privacy policies and terms governing their handling of personal information.

Postal and delivery services

We may provide your name, delivery address and other necessary information to postal or courier services so that your order can be delivered.

Professional advisers and authorities

We may disclose information where necessary to comply with legal obligations, enforce our rights, prevent fraud, protect our business or respond to lawful requests from authorities.

We only share information where there is an appropriate reason for doing so.

International Transfers

Some of the companies and services we use may process personal information outside the United Kingdom.

Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that your information receives an appropriate level of protection under applicable data protection law.

Third-party providers may have their own arrangements for international data transfers. You should refer to their privacy information for further details.

How Long We Keep Your Information

We keep personal information only for as long as we reasonably need it for the purposes described in this Privacy Policy.

Different information may be retained for different periods.

For example:

  • Order and transaction information may be retained for as long as necessary to fulfil the order, deal with returns or complaints, maintain appropriate business records and comply with legal and accounting obligations.

  • Customer service correspondence may be retained for as long as reasonably necessary to deal with the enquiry and maintain appropriate records.

  • Marketing information may be retained until you unsubscribe or withdraw your consent, subject to any other applicable legal requirements.

  • Website and cookie information may be retained for periods determined by the relevant cookie or service.

When personal information is no longer required, we will take reasonable steps to securely delete or anonymise it.

Cookies

Our website uses cookies and similar technologies.

Cookies are small text files stored on your device that allow a website to remember information about your visit.

Because Ellastrated uses WIX, some cookies are used to provide essential shop functionality, including shopping-cart, checkout, session and security features. WIX states that certain cookies are necessary for core storefront functionality and that blocking them may prevent features such as carts, checkout or forms from working correctly.

Cookies may be used to:

  • Keep the shopping cart functioning.

  • Maintain website sessions.

  • Remember certain preferences.

  • Support security.

  • Understand website usage and performance.

We may also use additional cookies or similar technologies if we add third-party services such as analytics, advertising, social-media features or other integrations.

Where consent is legally required for non-essential cookies, we will seek that consent before using them.

You can also control or delete cookies through your browser settings. However, disabling essential cookies may affect the functionality of the shop.

Marketing

We may occasionally send marketing communications about Ellastrated, including new products, collections, events or other news.

Where required by law, we will only send electronic marketing communications where you have provided consent.

You can unsubscribe from marketing communications at any time by using the unsubscribe option provided in the message or by contacting us.

Unsubscribing from marketing communications will not affect essential communications relating to an order you have placed.

Keeping Your Information Secure

We take reasonable technical and organisational measures to protect personal information against accidental loss, unauthorised access, misuse, alteration or disclosure.

However, no method of transmitting or storing information online can be guaranteed to be completely secure.

If we become aware of a personal data breach that requires notification under applicable law, we will take the appropriate steps required by law.

Your Data Protection Rights

Depending on the circumstances, you have rights under UK data protection law in relation to your personal information.

These may include the right to:

  • Ask for a copy of the personal information we hold about you.

  • Ask us to correct inaccurate or incomplete information.

  • Ask us to delete personal information in certain circumstances.

  • Ask us to restrict how we use your information in certain circumstances.

  • Object to certain types of processing.

  • Withdraw consent where we rely on consent as our lawful basis.

  • Request certain information in a portable format where the right to data portability applies.

  • Object to direct marketing.

These rights are not absolute and may be subject to legal exceptions.

To exercise a relevant right, please contact us using the contact details in Section 1.

We may need to verify your identity before responding to a request. This is a security measure designed to prevent personal information from being disclosed to the wrong person.

Complaints

If you have concerns about how we use your personal information, please contact us first so that we can try to resolve the issue.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), if you believe your personal information has been handled unlawfully.

The ICO provides information about data protection rights and complaints through its website.

Children's Privacy

Our website is intended for general audiences and is not specifically directed at children.

We do not knowingly collect personal information from children where this is not appropriate or legally permitted.

If you believe that a child has provided us with personal information in circumstances where they should not have done so, please contact us.

Third Party Websites

Our website may contain links to third-party websites, including social-media platforms, payment services or other websites.

We are not responsible for the privacy practices, content or security of third-party websites.

We recommend reviewing the privacy policy of any third-party website before providing it with personal information.

Changes To This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, services, technology or legal requirements.

When we make changes, we will update the "Last updated" date at the top of this policy.

We recommend checking this page periodically to make sure you are aware of any changes.

Contact Us

If you have questions about this Privacy Policy, your personal information or your data protection rights, please contact:

​

Ellastrated

ellakasperowicz@outlook.com

​

Last Updated September 2026

bottom of page