Privacy Policy — Draft

Privacy Policy

Last updated: 29 October 2026

SEZAY FINDS LTD
Company number: 17539420
Registered in England and Wales
Registered office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Email: sezayfinds@hotmail.com

SEZAY FINDS LTD is the controller of personal data described in this policy, except where another organisation acts as an independent controller for its own purposes.

1. Personal data we collect

Depending on how you use the store, we may collect contact details, billing and delivery details, order and transaction information, customer-service communications, device and browser information, IP address, cookie and similar-technology data, and information about how you interact with our store.

Payment card information is handled by payment service providers and Shopify's checkout environment as applicable. We do not intentionally store full card numbers on our own systems.

2. Why we use personal data

We use personal data to process and deliver orders, take payment, provide customer support, prevent fraud and abuse, comply with legal and accounting obligations, maintain and improve the store, measure performance, and send marketing where permitted.

3. Lawful bases

Where UK GDPR or similar law applies, our lawful bases may include performance of a contract, compliance with legal obligations, our legitimate interests (for example fraud prevention, security, customer service and improving our business), and consent where consent is required, including for certain marketing and non-essential tracking technologies.

4. Who receives personal data

We may share personal data with service providers that help us operate the store, including Shopify, payment providers, fulfilment partners, shipping carriers, customer-support providers, fraud-prevention providers, analytics providers and advertising partners that we actually use. We also disclose information where required by law or to protect legal rights.

We do not state that we “never share” personal information because some disclosures are necessary to operate an online store and certain advertising disclosures may be treated as “sale”, “sharing” or targeted advertising under some U.S. state laws.

5. International transfers

Because we operate internationally and use global service providers, personal data may be processed outside your country. Where data-protection law requires safeguards for an international transfer, we use an available lawful transfer mechanism or rely on another permitted basis.

6. Retention

We keep personal data only for as long as reasonably necessary for the purposes described in this policy, including order administration, customer support, fraud prevention, dispute handling, and tax, accounting and legal obligations. Retention periods vary by record type and legal requirement.

7. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, obtain a portable copy of certain data, withdraw consent, and complain to a data-protection authority. You may also have rights to opt out of certain targeted advertising, sale or sharing of personal information under applicable U.S. state laws.

To exercise a privacy right, contact sezayfinds@hotmail.com. We may need to verify your identity before completing a request.

8. UK complaints

If UK data-protection law applies, you may have the right to complain to the UK Information Commissioner's Office. We encourage you to contact us first so we can try to resolve the issue.

9. Children

Our store is not directed to children. We do not knowingly use the store to solicit personal data from children in a manner prohibited by applicable law.

10. Security

We use reasonable technical and organisational measures designed to protect personal data. No online service can guarantee absolute security.

11. Changes

We may update this policy to reflect changes to our practices, services or legal obligations. The latest revision date appears at the top of this page.