Privacy Policy

Who is responsible for your data

The data controller for this website and our online shop is SIGNATURE APPAREL LIMITED (company number 08048514), trading as ELVANTTO. Our registered office is listed on our Legal information page. For any privacy question or request, email support@elvantto.shop.

What we collect

• Order information: your name, billing and delivery address, email address, phone number, the items you buy, and your order history.
• Account information: if you create an account, your login email and a securely hashed password.
• Messages: what you send us through the contact form or by email.
• Payment information: payments are handled by our payment providers. We receive confirmation of payment, the payment method type and the last four digits of a card, but never your full card number or security code.
• Technical information: your IP address, browser type and the country your visit comes from, used to show prices in the right currency and to keep the shop secure. Your country is estimated from your IP address using the DB-IP country database (IP geolocation by DB-IP); the lookup happens on our server and your IP address is not sent to DB-IP.

Why we use it and our legal basis

We do not sell your personal data, and we do not use it for advertising profiles. We only send marketing emails if you have asked to receive them, and every email includes an unsubscribe link.

Who we share it with

We share personal data only with service providers who help us run the shop, and only as much as they need:

• Payment providers (such as Stripe and PayPal) to take payments and prevent fraud. They act as independent controllers for some processing; see their own privacy notices.
• Delivery carriers to deliver your parcel and send tracking updates.
• Our website hosting and email providers, which store the shop’s data on our behalf.
• GTranslate and its machine-translation service, only if you choose a language other than English: the page text is sent to the translation service to be translated.
• Authorities, where we are required to by law.

International transfers

Some of our providers process data outside the UK and the European Economic Area, for example in the United States. Where this happens, we rely on adequacy regulations or on standard contractual clauses (including the UK International Data Transfer Addendum) to protect your data.

How long we keep it

• Order and transaction records: 6 years after the end of the financial year of purchase, as required for tax and accounting.
• Customer accounts: until you ask us to close your account, or after 3 years without activity.
• Contact form messages and emails: 2 years after the conversation ends.

Your rights

Under UK and EU data protection law you have the right to access your personal data, to have it corrected or deleted, to restrict or object to its use, to data portability, and to withdraw consent at any time where we rely on consent. To use any of these rights, email support@elvantto.shop. We reply within one month.

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office (ico.org.uk) or to the data protection authority in your country. We would appreciate the chance to resolve your concern first.

Cookies

We use only the cookies needed to run the shop. See our Cookie policy for the full list.

Security

The whole website is served over an encrypted HTTPS connection. Access to customer data is limited to the people who need it to fulfil orders and answer questions.

Children

Our shop is intended for adults. We do not knowingly collect data from children under 16.

Changes to this policy

We may update this policy when our services or the law change. The date at the top of the page shows when it was last updated.