Privacy policy

 Camrhisa Designs

PRIVACY POLICY • UPDATED 19 SEPTEMBER 2026

Website privacy notice for camrhisadesigns.com

Privacy Policy

Camrhisa Designs respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what personal information we collect, why we use it, who we may share it with, how long we keep it, and the rights you have under UK data protection law.

This policy applies when you visit camrhisadesigns.com, place an order, create or use an account, contact us, sign up to receive marketing, participate in our loyalty or review features, or otherwise interact with Camrhisa Designs.

1. Who we are

Camrhisa Designs is a UK sole-trader business. For the purposes of UK data protection law, Camrhisa Designs is the data controller of the personal information described in this policy.

Contact email: info@camrhisadesigns.com

Postal address: 38 Llewelyn Street, Pentre, Wales, CF41 7BW, United Kingdom.

2. Personal information we collect

Depending on how you use our website and services, we may collect:

• Contact information, such as your name, email address, telephone number, billing address and delivery address.

• Order and transaction information, such as products purchased, order history, payment confirmation, returns, refunds and delivery information.

• Account information, such as account details and information used to manage or secure your account.

• Shopping and engagement information, such as products viewed, items placed in your basket, loyalty activity, reviews, referrals and gift-card activity where those features are used.

• Communications you send to us, including customer-service enquiries and other correspondence.

• Technical and usage information, such as IP address, device and browser information, network information and information about how you interact with our website.

• Marketing preferences, including whether you have chosen to receive marketing communications and records of your preferences.

• Information received from service providers where necessary to operate the website, fulfil orders, process payments, prevent fraud, provide analytics or deliver other services to us.

We do not normally receive or store your full payment-card details. Payments are processed by the payment providers made available through our store.

3. How and why we use your information

We only use personal information where we have a lawful basis to do so. Depending on the circumstances, we may use your information:

• To process and fulfil orders, take payment, arrange delivery, manage returns and refunds, and provide customer service. We generally do this because it is necessary to perform our contract with you or to take steps at your request before entering into a contract.

• To comply with legal and regulatory obligations, including accounting, tax, product-safety and record-keeping requirements.

• To protect our website, customers and business, prevent or investigate fraud or misuse, maintain security, and establish, exercise or defend legal claims. Where applicable, we rely on our legitimate interests in operating and protecting our business, provided those interests are not overridden by your rights and interests.

• To operate, maintain and improve our website and services, understand how they are used and improve the customer experience. Depending on the activity, we may rely on legitimate interests or consent where consent is required.

• To respond to enquiries and communicate with you about your orders, account or requests.

• To send direct marketing where permitted by law. Where consent is required, we will ask for it. In circumstances where the law permits us to market to existing customers without fresh consent, we will only do so subject to the applicable rules and an opportunity to opt out. You can unsubscribe from marketing at any time.

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects unless we tell you separately and have a lawful basis to do so.

4. Marketing

If you sign up for Camrhisa Designs marketing, we may send you emails about products, launches, offers, news and other Camrhisa content.

Where consent is required, signing up is voluntary and is not a condition of making a purchase. You can withdraw your consent or opt out at any time by using the unsubscribe link in a marketing email or by contacting us.

We may also use the existing-customer “soft opt-in” where permitted by the Privacy and Electronic Communications Regulations 2003 (PECR). This may allow us to market our own similar products to customers whose details we obtained during a sale or negotiation for a sale, provided we gave them a clear opportunity to opt out when their details were collected and in every subsequent marketing message.

We keep appropriate records of marketing preferences so that we can respect your choices.

5. Cookies and similar technologies

Our website uses cookies and similar technologies. Some are strictly necessary for the website and checkout to work. Others may be used for functions such as preferences, analytics or advertising.

Where UK law requires consent, non-essential cookies and similar technologies will not be used unless you have made the relevant choice through our cookie controls. You can review or change your choices using the Cookie Preferences control on our website.

For more information about Shopify cookies, you may also refer to Shopify's cookie information. The cookies and technologies actually used on our store may change as website features, apps and services change.

6. Who we share personal information with

We may share personal information where necessary with trusted organisations that help us operate Camrhisa Designs, including:

• Shopify, which provides our ecommerce platform and related services.

Our store is hosted by Shopify. Shopify collects and processes personal information when you visit or make a purchase from our store in order to provide its services to us and to you.

We have Shopify Network Intelligence enabled. This means Shopify may process information about your interactions with Camrhisa Designs together with information about your interactions with other Shopify merchants and with Shopify to provide Enhanced Services. These services may include providing a more personalised experience, helping to make advertising more relevant and helping us understand how customers interact with our store and advertising.

Information may be shared with Shopify and other service providers in countries outside the United Kingdom where necessary to provide these services. International transfers are handled as described in the International Transferssection below.

You can learn more about how Shopify processes personal information in the Shopify Consumer Privacy Policy. You can also use the Shopify Privacy Portal to learn about and exercise applicable privacy rights relating to Shopify's processing of your information.

• Payment processors and payment providers used to process transactions.

• Delivery, fulfilment and shipping providers used to send orders to you, including suppliers who fulfil an order on our behalf where applicable.

• IT, website, cloud-storage, security, analytics, customer-support and other service providers.

• Marketing and advertising providers where we use those services and have a lawful basis to do so.

• Professional advisers, insurers, regulators, law-enforcement bodies, courts or public authorities where disclosure is necessary or required by law.

• A buyer, seller or adviser in connection with a genuine sale, transfer or restructuring of the business, where applicable.

Service providers may only receive the information reasonably necessary for the relevant purpose and may have their own legal responsibilities for the information they process.

7. International transfers

Some of our service providers, including ecommerce, technology, payment or marketing providers, may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer complies with UK data protection law. Depending on the destination and provider, this may include relying on UK adequacy regulations or using appropriate contractual safeguards such as the UK International Data

Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful transfer mechanism.

8. How long we keep your information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to fulfil orders, provide customer service, maintain business and accounting records, comply with legal obligations, resolve disputes and establish or defend legal claims.

Different types of information may therefore be kept for different periods. When information is no longer required, we will delete it or anonymise it where reasonably practicable, subject to any legal or technical retention requirements.

9. Security

We take reasonable organisational and technical measures to protect personal information. However, no website, internet transmission or electronic storage system can be guaranteed to be completely secure.

You are responsible for keeping any account credentials confidential. If you believe your account or personal information has been compromised, please contact us.

10. Your UK data protection rights

Depending on the circumstances, UK data protection law may give you rights including:

• The right to be informed about how your personal information is used.

• The right to request access to personal information we hold about you.

• The right to ask us to correct inaccurate or incomplete information.

• The right to ask us to erase your personal information in certain circumstances.

• The right to ask us to restrict processing in certain circumstances.

• The right to object to certain processing, including an absolute right to object to direct marketing.

• The right to data portability in certain circumstances.

• The right to withdraw consent at any time where we rely on consent. Withdrawal does not affect processing that was lawful before consent was withdrawn.

• Rights relating to solely automated decision-making where applicable.

These rights are not absolute and may be subject to legal conditions or exemptions. We may need to verify your identity before responding to a request.

To exercise your rights, contact us at info@camrhisadesigns.com.

11. Complaints

If you have a concern about how Camrhisa Designs uses your personal information, please contact us first so that we can try to resolve it.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator. Information about making a complaint is available from the ICO at ico.org.uk.

12. Children's information

Our website and products are not directed at children for the purpose of collecting their personal information,

and we do not knowingly collect personal information from children where we do not have a lawful basis to do so.

If you believe a child has provided personal information to us inappropriately, please contact us so that we can consider the appropriate action.

13. Third-party websites and services

Our website may contain links to third-party websites, services or social-media platforms. Those organisations operate under their own privacy notices and practices. We are not responsible for the privacy practices of websites or services that we do not control.

14. Changes to this Privacy Policy

We may update this Privacy Policy when our practices, website features, service providers or legal obligations change. The current version will be published on our website with an updated date.

If a change materially affects how we use personal information, we will take any additional steps required by law.

15. Contact us

For questions about this Privacy Policy, to exercise a data protection right, or to raise a privacy concern, contact:

Camrhisa Designs Email: info@camrhisadesigns.com Postal address: 38 Llewelyn Street, Pentre, Wales, CF41 7BW, United Kingdom.