Privacy Policy

1. Information We Collect

We collect the following types of information when you use our website:

• Personal information — name, email address, shipping and billing address, phone number (provided when you create an account or place an order)
• Payment information — processed securely by Stripe. We do not store your card details on our servers
• Browsing data — IP address, browser type and version, pages visited, time spent on pages, and referring URLs
• Account data — wishlists, order history, product reviews, and saved preferences

2. How We Use Your Information

We use your personal data for the following purposes:

• Order processing and fulfilment — to process payments, arrange shipping, and send order confirmations
• Account management — to maintain your account, wishlists, and order history
• Customer support — to respond to your enquiries and resolve issues
• Marketing communications — with your consent, to send newsletters and promotional offers. You can unsubscribe at any time
• Fraud prevention — to detect and prevent fraudulent transactions
• Site improvement — to analyse usage patterns and improve our website and services

3. Cookies & Tracking

We use cookies and similar tracking technologies to operate our website, remember your preferences, and understand how you interact with our content. For a detailed breakdown of the cookies we use and how to manage them, please see our Cookie Policy.

4. Data Sharing

We share your data only with trusted third parties who help us operate our business. We never sell your personal data to third parties. Our service providers include:

• Stripe — payment processing
• Shipping carriers — order delivery and tracking
• Email service provider — transactional and marketing emails
• Analytics services — anonymous usage data to improve our site

5. Data Retention

We retain your data only for as long as necessary to fulfil the purposes outlined in this policy:

• Order data is kept for the period required by legal and tax obligations
• Account data is kept until you request deletion of your account
• Marketing consent can be withdrawn at any time by unsubscribing or contacting us

6. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your personal data (“right to be forgotten”)
• Right to data portability — receive your data in a structured, machine-readable format
• Right to restriction — request that we limit the processing of your data
• Right to object — object to the processing of your data for certain purposes
• Right to withdraw consent — withdraw previously given consent at any time

To exercise any of these rights, please email support@sculpturesly.com. We will respond within 30 days.

7. Data Security

We take appropriate technical and organisational measures to protect your personal data, including:

• SSL encryption on all pages and data transmissions
• PCI-DSS compliance via Stripe for all payment processing
• Access controls to limit who can view and process personal data
• Regular security reviews of our systems and practices

8. International Transfers

Your personal data is primarily processed within the European Union. Where data is transferred outside the EU (for example, to service providers), we ensure that appropriate safeguards are in place in accordance with GDPR requirements, such as Standard Contractual Clauses or adequacy decisions.

9. Children’s Privacy

Our website is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child under 16, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will notify registered users by email and update the “last updated” date at the top of this page.