Privacy policy
Shiza Collection respects your privacy. This policy explains what personal data we collect, why we use it, who we share it with and the rights you have under the UK GDPR, the Data Protection Act 2018 and the Data (Use and Access) Act 2025.
Who We Are
Shiza Collection is the data controller for the personal data described on this page. Our details are at the bottom, and you can contact us about anything here at info@shizacollection.shop.
What Data We Collect
Information you give us
- Name, email address and phone number
- Delivery and billing address
- Order details and payment confirmation (we never see or store your full card number)
- Photos and messages you send through the Return Center, by email or by phone
Information we collect automatically
- IP address, browser type and device
- Pages you view, time spent on the site and how you arrived
- Data from cookies and similar technologies, explained in our Cookie Policy
Why We Use Your Data and Our Legal Basis
- To take, deliver, return and refund your orders: we need it to carry out our contract with you
- To answer questions and deal with complaints: our legitimate interest in giving good customer service
- To prevent fraud and keep our website secure: our legitimate interest in protecting customers and the business
- To keep accounting and tax records: a legal obligation
- To send marketing emails: only with your consent, which you can withdraw whenever you like
- To understand how our website is used: your consent, where cookies require it
We do not sell your personal data.
Who We Share Data With
We share data only with companies that help us run the shop:
- Shopify and Shopify Payments: host our store, take payments and process refunds
- Royal Mail, DPD and Evri: deliver your parcel and handle return labels
- Google Analytics: shows us, in grouped form, how visitors use the site
We may also share data when the law requires it, for example with HMRC, the police or a court.
Automated Fraud Checks
Shopify and our payment provider use automated tools to spot possible fraud. These tools only flag an order. A person at Shiza Collection decides whether to hold or cancel it, and you can ask us to review that decision.
Transfers Outside the UK
Some providers, including Shopify and Google, process data outside the UK. When this happens, we rely on approved safeguards, such as the UK-US data bridge where it applies, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
How Long We Keep Data
- Order, invoice and refund records: 6 years, to meet tax and accounting rules
- Customer service and return messages and photos: up to 2 years after our last contact
- Marketing preferences: until you unsubscribe
- Analytics data: according to the retention period set in our analytics tool
When we no longer need data, we delete it or make it anonymous.
Marketing Emails
If you sign up, we will email you news and offers. Every email has an unsubscribe link, or you can write to us at any time.
Your Rights
You can ask us to:
- Give you a copy of the personal data we hold about you
- Correct anything that is wrong or incomplete
- Delete your data where we have no reason to keep it
- Restrict how we use your data
- Move your data to another service
- Stop using your data where we rely on legitimate interests
- Stop marketing or withdraw consent
Email info@shizacollection.shop. We reply within one month, and we may ask you to confirm your identity first. There is no charge unless a request is clearly excessive or repeated. We carry out reasonable and proportionate searches to find your data.
Data Protection Complaints
If you are unhappy with how we have handled your data, please tell us at info@shizacollection.shop and put "Data complaint" in the subject line. We acknowledge every data protection complaint within 30 days, look into it, and keep you updated without unreasonable delay.
If you are still not satisfied, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Keeping Data Safe
Our website uses encrypted connections, and we limit who can see customer information. No system is completely risk-free, but we take sensible steps to protect your data and will tell you and the ICO if a breach puts you at risk.
Children
Our website is for adults. You must be 18 or over to buy from us, and we do not knowingly collect data from children. If you think a child has given us their data, tell us and we will delete it.
Changes to This Policy
If we update this policy, the new version will be posted here with a new date at the top.
Contact Us
Shiza Collection
Email: info@shizacollection.shop
Phone: +447594300013
Address: 168 Alum Rock Rd, Alum Rock, Birmingham B8 1HU, United Kingdom
Hours (UK time): Monday – Friday, 11 AM – 7 PM | Saturday – Sunday, 11 AM – 8 PM