Privacy Policy

Effective Date: 4^th September 2025

This Privacy Policy explains how Stelimasa Direct Limited (“Company”, “we”, “us”, or “our”) collects, uses, and protects your personal data when you use Stelimasahealth.shop (“Website”).

We are committed to safeguarding your privacy and ensuring compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Stelimasahealth.shop is owned and operated by Stelimasa Direct Limited, a company registered in England and Wales (Company No. 12966796), with its registered office at:

5 Brayford Square, London, E1 0SG
Email: shop@stelimasadirect.com

We are the Data Controller responsible for your personal data.

We are also registered with the Information Commissioner’s Office (ICO) under Registration Reference ZB960193 (valid from 18 August 2025 to 17 August 2026).

2. Information We Collect

We may collect and process the following personal data when you use our Website:

• Identity Data: name, title, date of birth.
• Contact Data: email address, billing/shipping address, phone number.
• Transaction Data: purchase history, payment information (processed securely via third-party payment providers).
• Technical Data: IP address, browser type, device information, cookies, and analytics data.
• Marketing & Communications Data: your preferences for receiving marketing communications.

3. How We Use Your Information

We process personal data for the following purposes:

• To process and fulfil your orders.
• To manage your account and provide customer support.
• To send order updates, newsletters, or promotional offers (where you have consented).
• To analyse Website performance and improve user experience.
• To comply with legal obligations and prevent fraud.

4. Legal Basis for Processing

We rely on the following lawful bases under UK GDPR:

• Contract: processing necessary to fulfil your order.
• Consent: where you have opted into marketing communications.
• Legitimate Interests: improving our services and ensuring Website security.
• Legal Obligation: compliance with UK legal and tax requirements.

5. Cookies and Tracking

Our Website uses cookies and similar technologies to:

• Ensure the Website functions correctly.
• Analyse visitor behaviour (via tools such as Google Analytics).
• Support affiliate tracking (ensuring commissions are attributed correctly).

You may disable cookies in your browser, but this may affect Website functionality.

6. Sharing Your Data

We do not sell or rent your personal data. We may share your data with:

• Payment processors (e.g., Stripe, PayPal) to complete transactions.
• Delivery and logistics partners for shipping orders.
• Affiliate networks and tracking providers for referral management.
• Professional service providers (e.g., IT, legal, accounting).
• Authorities where required by law.

7. International Transfers

If we transfer personal data outside the UK (e.g., to hosting or analytics providers), we ensure adequate safeguards are in place such as UK adequacy regulations or Standard Contractual Clauses.

8. Data Retention

We retain personal data only as long as necessary:

• Order records: 6 years (for tax and legal compliance).
• Marketing data: until you unsubscribe or withdraw consent.
• Technical/cookie data: in line with cookie storage limits.

9. Your Rights

Under UK GDPR, you have the following rights:

• Access – request a copy of your data.
• Rectification – correct inaccurate or incomplete data.
• Erasure – request deletion of your data (“right to be forgotten”).
• Restriction – limit processing in certain circumstances.
• Portability – request transfer of your data.
• Objection – object to direct marketing or certain processing.
• Withdraw Consent – withdraw marketing consent at any time.

To exercise these rights, contact us at shop@stelimasadirect.com.

10. Security of Data

We implement appropriate technical and organisational measures to protect your personal data, including encryption, secure servers, and restricted access.

11. Third-Party Links

Our Website may contain links to third-party websites (including affiliate vendors). We are not responsible for the privacy practices of these sites. Please review their privacy policies.

12. Changes to this Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new Effective Date.

13. Contact Us

If you have any questions or wish to exercise your rights, please contact:

Stelimasa Direct Limited
Registered Office: 5 Brayford Square, London, E1 0SG
Email: shop@stelimasadirect.com
ICO Registration Reference: ZB960193

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at www.ico.org.uk.