Privacy policy

Last updated: 2 September 2026

1. Introduction

Gianela respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how Gianela ("Gianela", "we", "us" or "our") collects, uses, shares and protects your personal data when you:

- visit https://gianela.com;
- create or use an account;
- place or attempt to place an order;
- subscribe to marketing communications;
- contact our customer service team; or
- otherwise interact with our website or services.

For the purposes of United Kingdom data protection law, Gianela is the controller of the personal data described in this Privacy Policy.

Please read this Privacy Policy carefully. It should be read together with our Cookie Policy and any other privacy notice we provide when collecting personal data from you.

2. Personal Data We Collect

The personal data we collect depends on how you interact with Gianela.

Information you provide directly

We may collect:

- your full name;
- billing and delivery addresses;
- email address and telephone number;
- order and transaction details;
- products and variants selected;
- account login details, if you create an account;
- marketing and cookie preferences;
- return, refund and exchange information;
- messages sent to customer service;
- reviews or other content you voluntarily submit; and
- any other information you choose to provide.

If you do not provide information that is necessary to enter into or perform a contract with you, we may be unable to complete your purchase or provide the requested service.

Payment information

Payments are processed by Shopify and authorised third-party payment providers. Gianela does not directly store complete payment-card numbers or security codes.

Payment providers may collect card details, billing information and other data required to authorise and process a transaction in accordance with their own privacy notices. We may receive limited payment-related information, such as the payment status, payment method, transaction identifier and fraud-screening result.

Information collected automatically

When you use our website, we and our service providers may collect:

- IP address;
- browser type and version;
- device type and operating system;
- device identifiers;
- approximate location derived from your IP address;
- pages and products viewed;
- referring website or source;
- search and navigation activity;
- date and time of visits;
- shopping-basket activity;
- checkout interactions;
- advertising interactions; and
- website performance, diagnostic and security information.

This information may be collected through cookies, pixels, tags, server logs and similar technologies. Non-essential cookies are used only with your consent. Please see Section 6 and our Cookie Policy for further information.

Information received from third parties

We may receive personal data from third parties that help us operate our business, including:

- Shopify;
- payment processors;
- fraud-prevention providers;
- warehouses, fulfilment providers and delivery carriers;
- analytics and advertising providers, where you have consented to the relevant cookies;
- customer-service providers;
- social media platforms; and
- applications connected to our Shopify store.

The data we receive depends on the service provided and the privacy choices you make.

3. How and Why We Use Personal Data

United Kingdom data protection law requires us to have a lawful basis for processing personal data. We rely on the following lawful bases where appropriate.

Performance of a contract

We process personal data when necessary to:

- process, verify and fulfil orders;
- process payments;
- send order confirmations and service messages;
- arrange delivery and provide tracking information;
- process cancellations, returns, exchanges and refunds;
- provide customer service; and
- create and manage customer accounts.

Legitimate interests

Where our interests are not overridden by your rights and interests, we may process personal data to:

- prevent and investigate fraud or unauthorised transactions;
- protect the security and functionality of our website;
- troubleshoot technical problems;
- improve our products, services and customer experience;
- produce aggregated business and website-performance insights;
- manage and defend legal claims; and
- protect the rights, property and safety of Gianela, our customers and others.

Legal obligations

We may process personal data to comply with legal and regulatory requirements, including accounting, tax, consumer-protection, fraud-prevention and law-enforcement obligations.

Consent

Where required, we rely on your consent to:

- place or use non-essential analytics, advertising and personalisation cookies;
- use data collected through those technologies for advertising measurement, remarketing or personalised advertising; and
- send electronic marketing communications when consent is required.

You may withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before it was withdrawn.

4. Marketing Communications

We may send promotional emails when you have consented to receive them or where otherwise permitted by the Privacy and Electronic Communications Regulations 2003 (PECR).

You can stop receiving marketing emails at any time by:

- selecting the unsubscribe link in a marketing email; or
- contacting info@gianela.com.

We will stop using your personal data for direct marketing if you object. Unsubscribing from marketing does not prevent us from sending necessary communications about orders, delivery, accounts, returns, refunds or security.

5. Targeted Advertising and Your Privacy Choices

With your consent, we and our advertising partners may use cookies, pixels and similar technologies to measure advertising performance and show advertisements that may be more relevant to your interests.

We do not place or use non-essential advertising cookies before receiving your consent. You may accept or reject these cookies and change or withdraw your consent at any time through the cookie-preference tool on our website.

You have the right to object at any time to the use of your personal data for direct marketing, including related profiling. You can exercise this right through our cookie-preference tool or by contacting info@gianela.com.

6. Cookies and Similar Technologies

We use cookies and similar technologies for the following purposes:

- Strictly necessary cookies: required for core website functions such as security, shopping-basket features and checkout. These cookies do not require consent where they are strictly necessary.
- Functional cookies: used to remember choices and provide enhanced website features.
- Analytics cookies: used to understand website traffic, customer interactions and performance.
- Advertising cookies: used to measure campaigns, support remarketing and personalise advertising.

We ask for your consent before using functional, analytics or advertising cookies where consent is required. Rejecting non-essential cookies will not prevent you from making a purchase, although some optional website features may be affected.

You can manage or withdraw your cookie consent at any time through the cookie-preference tool on our website. You can also control cookies through your browser settings, although disabling strictly necessary cookies may affect website functions.

For information about cookies used through Shopify, please see Shopify's consumer privacy information at https://privacy.shopify.com.

7. How We Share Personal Data

We share personal data only when necessary for the purposes described in this Privacy Policy.

Shopify

Our store is hosted by Shopify. Shopify processes data required to provide hosting, checkout, payment, security, analytics and other e-commerce services.

Payment providers

We share transaction and payment-related data with payment providers to authorise payments, prevent fraud, issue refunds and complete transactions.

Delivery and fulfilment providers

We share names, delivery addresses, contact details, order contents and other necessary information with warehouses, fulfilment providers and delivery carriers.

Business and technology providers

We may share data with providers that support website operation, customer service, email delivery, account management, fraud prevention, information security, analytics, advertising, marketing, returns, refunds and business administration.

These providers may process personal data only for the relevant services, subject to applicable law and contractual safeguards.

Advertising and analytics partners

Where you have consented to the relevant cookies, we may share online identifiers, device data, website activity and purchasing activity with analytics and advertising partners for measurement, remarketing and personalised advertising.

Legal and regulatory disclosures

We may share personal data where reasonably necessary to:

- comply with applicable law, regulation, legal process or a lawful request from a public authority;
- enforce our agreements and policies;
- detect or prevent fraud and security incidents;
- protect the rights, property or safety of Gianela, our customers or others; or
- establish, exercise or defend legal claims.

Business transactions

If Gianela is involved in a merger, acquisition, financing, restructuring or sale of all or part of its business or assets, personal data may be disclosed or transferred as part of that transaction, subject to applicable data-protection law.

We do not sell personal data for monetary compensation.

8. International Transfers

Some of our service providers may process personal data outside the United Kingdom. Where personal data is transferred to a country that has not been recognised as providing an adequate level of protection, we use appropriate safeguards required by United Kingdom data-protection law. These may include the United Kingdom International Data Transfer Agreement, the United Kingdom Addendum to approved standard contractual clauses, or another legally recognised safeguard.

You may contact us for further information about the safeguards relevant to your personal data.

9. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to:

- process and document transactions;
- fulfil orders and provide customer service;
- maintain tax and accounting records;
- prevent fraud;
- resolve disputes;
- enforce agreements;
- comply with legal obligations; and
- establish, exercise or defend legal claims.

Retention periods depend on the type of data, why it was collected, legal requirements and operational needs. When personal data is no longer required, we securely delete or anonymise it unless the law requires or permits continued retention.

10. Data Security

We use appropriate administrative, technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

No website, transmission method or storage system can be guaranteed to be completely secure. Please do not send complete payment-card numbers, passwords or other highly sensitive information through ordinary email or unsecured communication channels.

You are responsible for keeping your account credentials confidential. Please contact us if you suspect unauthorised access to your account.

11. Children's Privacy

Our website is intended for adults and is not directed at children. We do not knowingly collect personal data directly from children under the age of 13.

If you believe that a child has provided personal data to us without appropriate permission, please contact info@gianela.com. We will investigate and delete the data where required by law.

12. Your United Kingdom Data-Protection Rights

Subject to applicable conditions and exceptions, you may have the right to:

- be informed about how we use your personal data;
- request access to the personal data we hold about you;
- request correction of inaccurate or incomplete personal data;
- request deletion of your personal data;
- request restriction of our processing;
- receive certain personal data in a structured, commonly used and machine-readable format and transmit it to another controller;
- object to processing based on legitimate interests;
- object at any time to direct marketing, including related profiling;
- withdraw consent at any time where processing is based on consent; and
- not be subject to a decision based solely on automated processing that produces legal or similarly significant effects, except where permitted by law.

These rights are not absolute. We may retain or continue processing data where permitted or required by law, including to complete a transaction, maintain legally required records, prevent fraud, or establish, exercise or defend legal claims.

We do not currently make decisions about customers based solely on automated processing that produce legal or similarly significant effects. Our payment and fraud-prevention providers may use automated tools when assessing transactions. Please contact us if you would like further information about a relevant decision.

13. How to Exercise Your Rights

To submit a privacy request, contact:

Email: info@gianela.com
Subject: Privacy Request

Please describe the right you wish to exercise and provide enough information for us to locate the relevant account or transaction.

We may need to verify your identity before completing a request. We will request only information reasonably necessary to verify and process it.

We normally respond without undue delay and within one month of receiving a valid request. Where a request is complex or several requests are made, the response period may be extended by up to two further months as permitted by law. We will tell you if an extension is necessary.

There is normally no fee for exercising your rights. We may charge a reasonable fee or refuse to act where a request is manifestly unfounded or excessive, as permitted by law.

14. Complaints

If you have a concern about how we use your personal data, please contact us first so that we can try to resolve it.

You also have the right to complain to the Information Commissioner's Office (ICO), the United Kingdom data-protection regulator:

Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113

15. Third-Party Links

Our website may contain links to websites or services operated by third parties. Gianela does not control and is not responsible for the privacy, security, content or practices of independent third-party services. Please review their privacy notices before providing personal data.

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our business practices, website features, service providers or legal obligations.

When we update it, we will revise the "Last updated" date at the top of this page. If a change materially affects how we process personal data, we will provide additional notice where required by law.

17. Contact Us

For questions, concerns, complaints or privacy requests, contact:

Store name and data controller: Gianela
Office address: 4 Bold Place, Liverpool, L1 9DN, United Kingdom
Email: info@gianela.com
Telephone: +44 7472 153321

Customer service hours:
Monday to Saturday, 09:00 to 17:00 (United Kingdom time)

We aim to respond to general customer-service enquiries within 12 hours.