Privacy policy

Last Updated: 19/07/26

1. Introduction

Studio Wyle ("we", "us", "our") is committed to protecting your privacy and handling your personal information responsibly.

This Privacy Policy explains how we collect, use, store and protect your personal information when you:

visit our website;
create an account;
place an order;
contact us;
subscribe to our marketing communications; or
otherwise use our website or services.

Our online store is powered by Shopify, which provides the e-commerce platform that allows us to sell our products online. As part of providing our services, certain personal information is processed by Shopify and other trusted service providers on our behalf.

Please read this Privacy Policy carefully. By using our website, you acknowledge that you have read this Policy and understand how we collect and use your personal information.

This Privacy Policy should be read alongside our Terms of Service, Refund Policy and Cookie Policy.

2. Who We Are

Studio Wyle is the data controller responsible for the personal information collected through this website.

Our contact details are:

Studio Wyle

Address: 3 Winney Hill View, Shrewsbury, Shropshire, SY13SH

Email: info@studiowyle.co.uk

If you have any questions about this Privacy Policy or how we use your personal information, please contact us using the details above.

3. The Personal Information We Collect

The information we collect depends on how you interact with us.

Information You Provide

When you place an order, create an account or contact us, we may collect:

your name;
billing address;
delivery address;
email address;
telephone number;
account login details;
order notes;
correspondence with us;
product reviews or feedback you choose to submit.

Payment Information

Payments made through our website are securely processed by our payment providers.

We do not store your full payment card details on our own systems.

However, we receive information necessary to confirm your payment, such as:

payment status;
transaction reference;
payment method;
order value.

Order Information

When you purchase from us, we collect information relating to your order, including:

products purchased;
order history;
delivery preferences;
returns and refunds;
customer service enquiries relating to your order.

Information Collected Automatically

When you visit our website, certain information is collected automatically using cookies and similar technologies.

This may include:

IP address;
browser type;
operating system;
device type;
pages viewed;
products viewed;
referral website;
approximate location;
date and time of your visit;
website usage information.

Some of this information is collected through Shopify and analytics providers.

For more information, please see our Cookie Policy.

4. How We Collect Your Information

We collect personal information in several ways.

Directly From You

You provide information when you:

place an order;
create an account;
subscribe to our newsletter;
contact us by email or through our website;
leave a review;
complete a form;
enter a promotion or competition (where applicable).

Automatically

When you browse our website, information is collected automatically through:

cookies;
website analytics;
Shopify technologies;
server logs;
similar tracking technologies.

These technologies help us improve the performance, functionality and security of our website.

From Third Parties

We may receive information from trusted third parties, including:

Shopify;
payment providers;
delivery companies;
fraud prevention services;
analytics providers;
marketing platforms (where you have given the necessary consent).

These organisations only provide information that is necessary for us to provide our services, fulfil orders, improve our website or comply with legal obligations.

5. Special Category Data

We do not intentionally collect special category personal information, such as information relating to your health, ethnicity, religious beliefs, political opinions or biometric data.

Please do not provide this type of information when contacting us or placing an order unless it is strictly necessary and you have been asked to do so.

If we receive special category information unexpectedly, we will process it only where permitted by law and only where necessary.

6. Children's Privacy

Our website and services are intended for individuals aged 18 or over.

We do not knowingly collect personal information from children.

If we become aware that we have collected personal information from a child without appropriate legal authority, we will take reasonable steps to delete that information as soon as possible.

If you believe that a child has provided us with personal information, please contact us using the details provided in this Privacy Policy.

7. How We Use Your Personal Information

We only collect and use your personal information where we have a lawful reason to do so.

Depending on how you interact with us, we may use your personal information to:

Process Your Orders

We use your information to:

process and fulfil your orders;
arrange payment;
deliver your purchases;
provide order confirmations and updates;
process returns, refunds and exchanges;
provide customer support relating to your order.

Manage Your Account

If you create an account, we use your information to:

create and manage your account;
allow you to log in securely;
remember your preferences;
store your order history;
improve your shopping experience.

Respond to Enquiries

When you contact us, we use your information to:

answer your questions;
investigate issues;
respond to complaints;
provide customer support.

Improve Our Website and Services

We use website usage information to help us:

understand how visitors use our website;
improve navigation and functionality;
identify technical problems;
improve website performance;
develop new products and services.

Where required by law, we will obtain your consent before using cookies or similar technologies for analytics or marketing purposes.

Prevent Fraud and Protect Our Business

We may use your information to:

verify your identity;
detect fraudulent transactions;
prevent misuse of our website;
investigate suspicious activity;
protect our customers and business.

Marketing Communications

If you have chosen to receive marketing communications, we may send you information about:

new product launches;
promotions and special offers;
events;
news about Studio Wyle.

You may unsubscribe from marketing emails at any time by:

clicking the "Unsubscribe" link in any marketing email; or
contacting us directly.

We will never sell your personal information to third parties for their own marketing purposes.

Legal and Regulatory Obligations

We may process your information where necessary to:

comply with legal obligations;
respond to lawful requests from regulators or law enforcement;
establish, exercise or defend legal claims;
protect our legal rights.

8. Our Lawful Bases for Processing

Under the UK General Data Protection Regulation (UK GDPR), we must have a lawful basis for processing your personal information.

Depending on the circumstances, we rely on one or more of the following lawful bases.

Contract

We process personal information because it is necessary to fulfil our contract with you.

This includes:

processing orders;
arranging payment;
delivering goods;
providing customer support;
processing refunds and returns.

Without this information, we would be unable to provide the products or services you have requested.

Legal Obligation

We process certain information where required by law.

For example, we may retain financial records to comply with tax, accounting and consumer protection legislation.

Legitimate Interests

We process certain information where it is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms.

These legitimate interests include:

improving our website;
preventing fraud;
securing our systems;
analysing website performance;
responding to enquiries;
managing customer relationships;
improving our products and services.

Where we rely on legitimate interests, we carefully consider the impact on your privacy.

Consent

Where required by law, we rely on your consent before:

sending certain marketing communications;
placing non-essential cookies on your device;
using certain advertising technologies.

You may withdraw your consent at any time.

Withdrawal of consent does not affect any processing carried out before consent was withdrawn.

9. Who We Share Your Information With

We treat your personal information with care and only share it where necessary.

We may share your information with the following categories of organisations.

Shopify

Our online store is hosted by Shopify.

Shopify processes personal information on our behalf in order to:

operate our online store;
process orders;
provide website functionality;
assist with fraud prevention;
improve the services provided through the Shopify platform.

To learn more about how Shopify processes personal information, please visit Shopify's Privacy Policy.

Payment Providers

Payments are processed securely through trusted third-party payment providers.

These providers receive the information necessary to process your payment securely.

We do not have access to your full payment card details.

Delivery Companies

We share the information necessary to deliver your order with our chosen delivery providers.

This may include:

your name;
delivery address;
telephone number (where required);
email address (where required for delivery updates).

Professional Advisers

Where necessary, we may share information with professional advisers including:

accountants;
solicitors;
insurers;
auditors.

They are required to keep your information confidential.

IT and Website Providers

We use trusted providers who help us operate our website and business systems.

These providers may have access to personal information only where necessary to perform services on our behalf and are required to process your information securely and in accordance with applicable data protection laws.

Marketing Providers

If you have consented to receive marketing communications, we may use trusted email marketing providers to send newsletters and promotional emails on our behalf.

These providers process your information only in accordance with our instructions.

Legal Requirements

We may disclose your personal information where required to do so by law, including:

complying with court orders;
responding to lawful requests from public authorities;
protecting our legal rights;
preventing fraud or criminal activity.

Business Changes

If Studio Wyle is sold, merged or reorganised, customer information may be transferred as part of that transaction.

Any new owner will continue to use your personal information in accordance with this Privacy Policy unless you are notified otherwise.

10. International Transfers

Some of the organisations we work with, including Shopify and certain technology providers, may process or store your personal information outside the United Kingdom.

Where personal information is transferred outside the UK, we take appropriate steps to ensure it remains protected in accordance with UK data protection law.

These safeguards may include:

transfers to countries recognised by the UK Government as providing an adequate level of data protection;
the use of the UK International Data Transfer Agreement (IDTA) or other approved contractual safeguards;
other lawful transfer mechanisms permitted under the UK GDPR.

You may contact us if you would like further information about the safeguards we use for international data transfers.

11. How Long We Keep Your Information

We only retain your personal information for as long as it is necessary for the purposes for which it was collected, including to satisfy legal, accounting and regulatory requirements.

Typical retention periods include:

Information	Typical Retention Period
Customer orders and invoices	6 years after the end of the relevant financial year
Payment transaction records	6 years (financial records only – we do not store full payment card details)
Customer enquiries	Up to 2 years after the enquiry has been resolved
Customer accounts	Until you delete your account or after a prolonged period of inactivity, unless we are required to retain information by law
Marketing preferences	Until you unsubscribe or withdraw your consent
Website analytics	Up to 26 months, depending on the analytics service used
Product reviews	Until you request removal or where we have a legitimate reason to retain them

Where we no longer need your personal information, we will securely delete it or anonymise it so that it can no longer be linked to you.

12. Keeping Your Information Secure

We take the security of your personal information seriously.

We use appropriate technical and organisational measures designed to protect your information against unauthorised access, accidental loss, misuse, alteration or disclosure.

These measures include, where appropriate:

secure website encryption (SSL/TLS);
password-protected systems;
secure payment processing through trusted payment providers;
restricted access to personal information;
regular software and security updates;
monitoring for fraudulent or malicious activity.

Although we take reasonable steps to protect your information, no method of transmitting information over the internet or storing electronic data is completely secure.

For this reason, we cannot guarantee absolute security, but we continually review and improve our security measures.

If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will comply with our obligations under UK data protection law, including notifying the Information Commissioner's Office (ICO) and affected individuals where required.

13. Cookies and Similar Technologies

Our website uses cookies and similar technologies to improve your browsing experience, remember your preferences, analyse website traffic and support certain website features.

Cookies are small text files placed on your device when you visit a website.

We use the following categories of cookies:

Strictly Necessary Cookies

These cookies are essential for the operation of our website.

They enable functions such as:

shopping basket functionality;
secure checkout;
user authentication;
fraud prevention;
website security.

These cookies do not require your consent.

Analytics Cookies

Analytics cookies help us understand how visitors use our website so that we can improve its performance and functionality.

These cookies collect information such as:

pages visited;
time spent on the website;
navigation patterns;
device and browser information.

We will only use analytics cookies where you have given your consent through our cookie banner.

Marketing Cookies

Marketing cookies help us understand the effectiveness of our advertising and may be used to show you relevant advertisements on other websites.

These cookies may be placed by us or by trusted third-party advertising partners.

Marketing cookies are used only where you have provided your consent.

Managing Cookies

You can manage or withdraw your cookie preferences at any time using our cookie settings or by adjusting your browser settings.

Please note that disabling certain cookies may affect the functionality of parts of our website.

Further information can be found in our Cookie Policy.

14. Marketing Communications

We would like to keep you informed about new products, collections, promotions and other news relating to Studio Wyle.

Where required by law, we will only send marketing communications if:

you have given your consent; or
we are otherwise permitted to do so under the Privacy and Electronic Communications Regulations (PECR).

You may withdraw your consent or unsubscribe from marketing communications at any time by:

clicking the "Unsubscribe" link included in our marketing emails;
contacting us using the details provided in this Privacy Policy.

Please note that even if you opt out of marketing communications, we may still send you important service messages relating to your orders, your account or changes to our legal policies.

We do not sell your personal information to third parties for their own marketing purposes.

Where we use third-party email marketing providers, they process your personal information only on our behalf and in accordance with our instructions.

15. Your Privacy Rights

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have a number of rights regarding your personal information.

These rights are not absolute and may be subject to certain legal exemptions.

Right to Access

You have the right to request confirmation of whether we process your personal information and, if we do, to receive a copy of that information.

This is commonly known as a Subject Access Request.

Right to Correct Your Information

If you believe that any personal information we hold about you is inaccurate or incomplete, you have the right to ask us to correct or update it.

Right to Erasure

In certain circumstances, you may ask us to delete your personal information.

This is sometimes known as the "Right to be Forgotten."

We may not always be able to delete information where we are legally required to retain it, for example for tax, accounting or legal purposes.

Right to Restrict Processing

You may ask us to restrict how we use your personal information in certain circumstances, such as while a complaint about the accuracy of the information is being investigated.

Right to Object

You have the right to object to our processing of your personal information where we rely on our legitimate interests.

You also have the absolute right to object to your personal information being used for direct marketing.

Right to Data Portability

Where processing is based on your consent or is necessary for the performance of a contract, and carried out by automated means, you may request a copy of your personal information in a structured, commonly used and machine-readable format.

You may also request that we transfer that information directly to another organisation where technically feasible.

Right to Withdraw Consent

Where we rely on your consent to process personal information, you may withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of any processing carried out before consent was withdrawn.

Rights Related to Automated Decision-Making

Studio Wyle does not make decisions about you based solely on automated processing or profiling that produce legal or similarly significant effects.

If this changes in the future, we will update this Privacy Policy accordingly.

16. Exercising Your Rights

If you wish to exercise any of your privacy rights, please contact us using the details provided at the end of this Privacy Policy.

To help protect your information, we may ask you to verify your identity before responding to your request.

We will respond to requests within one month where required by law. If your request is particularly complex or involves multiple requests, we may extend this period where permitted by law, and we will inform you if this is necessary.

There is normally no charge for exercising your rights. However, where requests are manifestly unfounded, excessive or repetitive, we may charge a reasonable administrative fee or refuse the request where permitted by law.

17. Your Choices

You can manage how we use your information in several ways.

You may:

update your account information by logging into your customer account (where available);
unsubscribe from marketing emails at any time using the link included in those emails;
manage your cookie preferences through our cookie banner or browser settings;
contact us to update, correct or delete your personal information;
request a copy of the personal information we hold about you.

Please note that opting out of marketing communications will not prevent us from sending important service-related messages about your orders or your account.

18. Complaints

We hope that we can resolve any concerns you have about how we handle your personal information.

If you have any questions or concerns, please contact us first using the details below and we will do our best to resolve the issue promptly and fairly.

If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent authority for data protection.

Information about how to make a complaint can be found on the ICO's website:

https://www.ico.org.uk

Telephone: 0303 123 1113

Making a complaint to the ICO will not affect any other legal rights or remedies you may have.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

changes in the law;
changes to our business practices;
improvements to our website or services;
changes to the technology we use.

The latest version of this Privacy Policy will always be available on our website.

Where changes significantly affect how we use your personal information, we will take reasonable steps to notify you where appropriate.

The "Last Updated" date at the top of this Privacy Policy indicates when it was most recently revised.

20. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your privacy rights or would like further information about how we use your personal information, please contact us.

Studio Wyle