PRIVACY POLICY

Blemishvera ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our Site, make a purchase, or interact with us.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Blemishvera is the data controller for the personal data you provide to us. Our contact details are:

Email: service@blemishvera.com

If you have any questions about this policy or our data practices, please contact us using the details above.

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

Category	Examples
Identity Data	Full name, username, title, date of birth (if provided)
Contact Data	Email address, billing address, shipping address, phone number
Order Data	Products purchased, order history, payment information (processed by our payment gateways – we do not store full card details)
Technical Data	IP address, browser type and version, time zone setting, device type, operating system, and other technology on the devices you use to access our Site
Usage Data	Information about how you use our Site, including pages visited, products viewed, search queries, and referral sources
Marketing Data	Your preferences for receiving marketing communications and your engagement with our emails

3. How We Use Your Personal Data

We use your personal data for the following lawful purposes:

Purpose	Lawful Basis (UK GDPR)
To process and fulfil your orders, including payment, dispatch, and delivery	Performance of a contract
To manage your account and provide customer support	Performance of a contract / Legitimate interest
To send you order confirmations, shipping updates, and service-related communications	Performance of a contract
To improve our Site, products, and services	Legitimate interest
To prevent fraud and maintain security	Legitimate interest / Legal obligation
To send you marketing communications (with your explicit consent, where required)	Consent (for email marketing)
To comply with legal obligations (e.g., tax, VAT, record-keeping)	Legal obligation

We will not use your personal data for purposes incompatible with those listed above without informing you.

4. Sharing Your Personal Data

We share your personal data with the following categories of third parties:

Service Providers: Payment processors (e.g., Shopify Payments, PayPal), shipping carriers (e.g., Royal Mail, DPD), IT and hosting providers, email marketing platforms, and analytics providers.
Professional Advisors: Legal, accounting, and regulatory advisors where necessary.
Law Enforcement: Where required by law or to protect our legal rights.

All third parties are contractually required to keep your data secure and only use it for the specific services they provide to us.

We do not sell or rent your personal data to third parties for their own marketing purposes.

5. International Transfers

If you are located outside the UK, your personal data may be transferred to countries outside the UK (e.g., where our service providers are based). We ensure that any such transfers are protected by appropriate safeguards, such as:

Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO);
Transfers to countries with an adequacy decision from the UK Government.

For more information, please contact us.

6. Data Retention

We will retain your personal data only for as long as necessary to fulfil the purposes for which we collected it, including:

To satisfy any legal, accounting, or tax obligations (e.g., UK tax law requires us to keep order records for 6 years);
To resolve disputes and enforce our agreements.

After this period, your data will be securely deleted or anonymised.

7. Your Rights

Under the UK GDPR, you have the following rights:

Right	Description
Right to Access	Request a copy of the personal data we hold about you.
Right to Rectification	Request correction of inaccurate or incomplete data.
Right to Erasure	Request deletion of your personal data in certain circumstances (e.g., where consent is withdrawn and there is no legal basis for continued processing).
Right to Restriction	Request restriction of processing in certain circumstances.
Right to Data Portability	Request transfer of your data to another service provider in a structured, machine-readable format.
Right to Object	Object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent	Withdraw consent at any time where we are relying on consent (e.g., for marketing emails).
Right to Complain	Lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.

To exercise any of these rights, please contact us at [Insert Email]. We will respond within 30 days as required by law.

8. Cookies

We use cookies to enhance your experience on our Site, analyse traffic, and personalise content. You can manage your cookie preferences through your browser settings. For more details, please see our [Cookie Policy] (if available).

9. Children's Privacy

Our Site and products are not intended for children under the age of 16. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with the "Last Updated" date. We encourage you to review this policy periodically.