Last updated: 26 October 2026
This policy explains what personal data we collect when you visit eclatgloww.com or buy from us, why we use it, who we share it with and the rights you have under UK data protection law (the UK GDPR and the Data Protection Act 2018).
Who is responsible for your data
The controller of your personal data is WISEREALM LIMITED (trading as Éclat Gloww), company number 05576535, registered office 50b Cleveland Square, London, W2 6DB. For any privacy question or request, email hello@eclatgloww.com.
What we collect
- Order details: your name, email address, phone number, delivery and billing address, the products you buy and your order history.
- Payment information: handled by our payment providers. We never receive or store your full card number.
- Account details, if you create an account: your name, email address and saved addresses.
- Messages: what you send us by email or through our contact form.
- Newsletter: your email address, if you sign up.
- Device and usage data: such as your IP address, browser, the pages you view and what you add to your bag, collected through cookies and similar technologies (see our Cookie policy).
Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Processing, delivering and supporting your order, including returns and refunds | Performance of a contract |
| Sending order confirmations and delivery updates | Performance of a contract |
| Answering your messages | Legitimate interests (helping our customers) |
| Keeping tax and accounting records | Legal obligation |
| Preventing fraud and keeping our shop secure | Legitimate interests and legal obligation |
| Sending our newsletter and marketing emails | Consent (you can unsubscribe at any time) |
| Analytics and advertising cookies | Consent (see our Cookie policy) |
We do not sell your personal data, and we do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
Who we share it with
- Shopify, which hosts our shop and checkout and processes data on our behalf.
- Payment providers (for example Shopify Payments, PayPal or Klarna, depending on how you pay), to take payment and prevent fraud.
- Delivery companies, to deliver your order.
- Email and customer service tools, to send order emails and answer your messages.
- Analytics and advertising partners (such as Google and Meta), only if you accept the relevant cookies.
- Our professional advisers and authorities such as HMRC, where the law requires it.
International transfers
Some of our service providers, including Shopify, process data outside the UK (for example in the European Economic Area, Canada or the United States). Where they do, the transfer is protected by UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Addendum.
How long we keep it
- Order and accounting records: 6 years from the end of the financial year they relate to, as required for tax purposes.
- Customer service messages: up to 2 years after the matter is closed.
- Newsletter data: until you unsubscribe.
- Account data: until you ask us to delete your account, subject to the legal retention periods above.
Your rights
You have the right to access your personal data, to have it corrected, to have it erased, to restrict or object to its use, to data portability, and to withdraw your consent at any time (this doesn't affect processing that happened before you withdrew it). To use any of these rights, email hello@eclatgloww.com. We'll respond within one month.
If you're unhappy with how we handle your data, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113.
Children
Our shop is not intended for children under 18, and we don't knowingly collect their personal data.
Changes to this policy
We may update this policy from time to time. The latest version is always on this page.