Privacy policy

Here is the Privacy Policy tailored for Celeste Wynn. It complies with the UK GDPR, Data Protection Act 2018, Privacy and Electronic Communications Regulations (PECR), and Australian Privacy Act 1988 (APPs), aligning with Shopify Payments Australia requirements.

Privacy Policy

Last updated: September 2026

At Celeste Wynn ("we", "us", or "our"), operated by Usman Raza, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit or make a purchase from our store.

This policy applies to customers in the United Kingdom and internationally, in accordance with the UK General Data Protection Regulation (UK GDPR), the UK Data Protection Act 2018, and the Australian Privacy Act 1988 (Cth).

1. Data Controller & Contact Information

For the purposes of applicable data protection laws, the data controller responsible for your personal information is:

  • Store Name: Celeste Wynn

  • Business Operator: Usman Raza

  • Contact Email: celeste.wynn@outlook.com

  • Contact Phone: +61 2 8541 5784

  • Business Address: 45 Bow Avenue, Parklea, New South Wales, Postcode 2768, Australia

2. Personal Information We Collect

When you visit or interact with our store, we collect personal information necessary to provide our services to you:

A. Device & Usage Information

  • Data collected: IP address, browser type, time zone, device model, operating system, pages viewed, search terms, and how you interact with our site.

  • Purpose: To load the site accurately, perform analytics, optimize user experience, and detect potential security risks or fraud.

  • Source: Collected automatically via cookies, log files, web beacons, and tags.

B. Order & Payment Information

  • Data collected: Name, billing address, shipping address, payment information (including payment card details processed securely via Shopify Payments), email address, and phone number.

  • Purpose: To fulfill orders, process payments, arrange shipping, issue invoices/order confirmations, communicate with you, and screen orders for fraud.

  • Source: Provided directly by you when making a purchase.

C. Customer Support Information

  • Data collected: Name, email address, order details, and any correspondence sent to us.

  • Purpose: To assist with inquiries, manage returns/refunds, and resolve service issues.

3. Legal Bases for Processing (UK GDPR)

Under UK data protection laws, we process your personal data under the following legal bases:

  • Contractual Necessity: Processing is required to perform our contract with you (e.g., fulfilling and delivering your orders).

  • Legal Obligation: Processing is required to comply with financial, tax, or statutory consumer protection obligations.

  • Legitimate Interests: Processing is necessary for our legitimate business interests (e.g., fraud prevention, site security, improving customer service), provided these do not override your rights.

  • Consent: Where you have given explicit consent (e.g., subscribing to direct marketing emails or accepting non-essential cookies).

4. How We Share Your Personal Data

We share your personal information with third-party service providers to help us operate our business and deliver services to you:

  • Shopify: We use Shopify to power our online store. Shopify Payments processes your payment transactions securely. You can read how Shopify uses your personal information here: https://www.shopify.com/legal/privacy.

  • Shipping & Logistics Partners: We share your delivery name, shipping address, and phone number with courier services to deliver your orders.

  • Analytics Providers: We may use service providers (e.g., Google Analytics) to help us understand how customers use our store.

We do not sell, rent, or trade your personal information to third parties.

5. Cross-Border Data Transfers

Because our business is operated from Australia while selling to customers in the United Kingdom:

  • Your personal data will be transferred, processed, and stored in Australia and on secure servers hosted by Shopify worldwide.

  • When transferring data outside the UK, we ensure appropriate safeguards are implemented in compliance with UK GDPR standards (e.g., Standard Contractual Clauses or Shopify’s Binding Corporate Rules).

6. Cookies & Tracking Technologies

We use cookies to improve browsing experience, analyze traffic, and remember store preferences.

  • Essential Cookies: Necessary for the function of the store (e.g., keeping items in your shopping cart, secure checkout).

  • Analytics & Performance Cookies: Help us collect statistics on site traffic and usage patterns.

  • Functional Cookies: Remember your settings and choices to provide a personalised experience.

You can control or disable non-essential cookies through your web browser settings. Please note that disabling essential cookies may impact site functionality.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, including complying with tax, accounting, and legal requirements. When personal data is no longer required, it is securely deleted or anonymised.

8. Your Legal Rights (UK Consumers)

If you reside in the United Kingdom, you have statutory rights under the UK GDPR regarding your personal data:

  • Right of Access: Request a copy of the personal information we hold about you.

  • Right to Rectification: Request correction of inaccurate or incomplete personal data.

  • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to legal record-keeping obligations.

  • Right to Restrict Processing: Request that we limit how we process your personal data.

  • Right to Data Portability: Request a machine-readable copy of your data for transfer to another service provider.

  • Right to Object: Object to processing based on legitimate interests or direct marketing.

  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please email us at celeste.wynn@outlook.com.

Complaints

If you believe we have handled your data unfairly, you have the right to lodge a complaint with the UK supervisory authority:

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. The updated version will be posted on this page with a revised "Last updated" date.

Compliance Review & Required Information List

Before publishing this policy on your Shopify store, please review and ensure the following:

  1. Cookie Banner Configuration: Ensure your Shopify store has a compliant UK cookie banner enabled to obtain explicit consent for non-essential tracking cookies before activation.

  2. Shopify Admin Settings: Verify that your Store Details under Shopify Settings (Store address, Business Name, Contact Email) exactly match Usman Raza, Celeste Wynn, and 45 Bow Avenue, Parklea, NSW 2768, Australia.

  3. Third-Party Apps Check: If you install marketing or retargeting apps (e.g., Meta Pixel, Klaviyo, TikTok Pixel), explicitly mention them in Section 4.