Privacy Policy

ARABELLA DRESSES LIMITED ('Arabella Dresses', 'we', 'us', 'our') is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website at arabelladresseslim.com, make a purchase, contact us, or interact with us in any other way. Arabella Dresses is registered in Scotland under company number SC642117. Our registered address is 140 Bruntsfield Place, Edinburgh, EH10 4ER. You can contact us by email at [email protected] or by telephone on +441312617304.

We collect personal data in the following circumstances: when you place an order through our website or in our boutique; when you contact us by email, telephone, or through our website contact form; when you sign up to receive our newsletter or marketing communications; and when you browse our website, during which certain technical data is collected automatically.

When you place an order, we collect the information necessary to process and fulfil it. This includes your name, delivery address, email address, telephone number, and order details. Payment information is processed securely by our third-party payment provider. We do not store your card details on our systems — payment data is handled entirely by the payment gateway, which operates under its own security standards and data protection obligations.

When you contact us by email, telephone, or through our contact form, we collect the information you provide in that communication, including your name, contact details, and the content of your message. We use this information solely to respond to your enquiry and to provide the service you have requested.

If you choose to subscribe to our newsletter or marketing communications, we collect your email address and, where provided, your name. Subscription to marketing communications is entirely optional and separate from the order process. You may withdraw your consent to receive marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting us directly.

When you visit our website, certain technical data is collected automatically by our web server and any analytics tools we use. This may include your IP address, browser type and version, operating system, referring URL, pages visited, and the date and time of your visit. This data is used to understand how our website is used and to improve its performance and content. Where we use cookies or similar technologies, these are described in our Cookie Policy.

We process your personal data on the following legal bases: performance of a contract, where processing is necessary to fulfil your order or respond to a pre-contractual enquiry; legitimate interests, where we have a legitimate business interest in processing your data that is not overridden by your rights; consent, where you have given us specific consent to process your data for a particular purpose, such as receiving marketing emails; and compliance with a legal obligation, where we are required to process your data to comply with applicable law.

We share your personal data with third parties only where necessary to provide our services. This includes our payment processing provider, our delivery and logistics partners, and our email service provider where used for order confirmations and marketing. We do not sell your personal data to third parties, and we do not share it for purposes unrelated to the services we provide.

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Order data is typically retained for six years in accordance with UK tax and accounting obligations. Marketing data is retained until you withdraw your consent or request deletion.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Our website uses HTTPS encryption for all data transmitted between your browser and our server. Access to personal data within our organisation is restricted to those who need it to perform their role.

Under UK data protection law, you have the following rights in relation to your personal data: the right to access a copy of the data we hold about you; the right to rectification of inaccurate or incomplete data; the right to erasure of your data in certain circumstances; the right to restrict processing of your data in certain circumstances; the right to data portability in certain circumstances; the right to object to processing based on legitimate interests; and the right to withdraw consent at any time where processing is based on consent. To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.

Our website is not directed at children under the age of 16, and we do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

Order confirmation and dispatch notification emails are service messages sent as part of the fulfilment of your order. These are not marketing communications and are sent regardless of your marketing preferences. Marketing emails are sent only to those who have given their consent.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post any updated version on our website with a revised effective date. If you have any questions about this Privacy Policy or our data practices, please contact us at [email protected] or write to us at 140 Bruntsfield Place, Edinburgh, EH10 4ER.

How long we keep information

We keep customer, order, and enquiry records only as long as needed for the purposes described in this policy and to meet legal, tax, and accounting duties in the United Kingdom. Typical retention includes: active order and delivery correspondence for the fulfilment period plus a reasonable support window; complete order ledgers for the period required by HMRC; marketing consent logs until you withdraw consent or object; and website security logs for a limited technical retention period.

International transfers

Where we use service providers outside the UK, we ensure appropriate safeguards (such as UK-approved standard contractual clauses or adequacy decisions, where applicable) so your rights remain protected. You may request further detail about specific processors by emailing [email protected].

Automated decisions and profiling

ARABELLA DRESSES LIMITED does not rely on solely automated decisions that produce legal or similarly significant effects in relation to customers. Basic fraud checks or payment authorisation may be performed by banks or payment partners under their own policies.

Your rights in practice

1. Access: You may ask what personal data we hold and receive a copy in a commonly used format where feasible.
2. Rectification: Tell us if contact or address details change so we can update your order profile.
3. Erasure: You may request deletion where there is no overriding legal reason to retain the data.
4. Restriction or objection: Available in specific circumstances, for example while a dispute is resolved.
5. Portability: Where processing is based on consent or contract and is automated, you may request structured transfer to another controller where technically possible.

To exercise any right, email [email protected]. We will confirm identity where needed and respond within one calendar month (extensions permitted by law for complex requests). Telephone: +441312617304.

Supervisory authority

If you remain concerned about how we use personal data, you may contact the Information Commissioner's Office (ICO) in the United Kingdom. We nevertheless encourage you to contact Arabella Dresses first so we can try to resolve the matter quickly.