Privacy policy

Last updated: 11 October 2026

Bystelle operates the website https://bystelle.shop and is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website, browse our products, make a purchase, contact our customer support team, or otherwise interact with our services.

By using our website, you acknowledge that your personal information may be processed as described in this Privacy Policy. Where applicable law requires consent, we will request it before carrying out the relevant processing.

1. Information We Collect

We may collect the following categories of information when you use our website.

Personal and Contact Information

When you place an order, create an account, complete a form, or contact us, we may collect:

Full name.
Billing address.
Shipping address.
Email address.
Telephone number.
Information you provide when contacting customer support.

Order and Transaction Information

When you purchase a product from Bystelle, we may collect information relating to your transaction, including:

Products purchased and order details.
Order confirmation and transaction references.
Delivery instructions and shipping information.
Payment status and refund information.
Relevant return, exchange, or customer service records.

Payment card details are generally processed by the relevant payment provider. We do not intentionally store complete payment card details on our own systems unless this is expressly required and handled through an appropriately secured and authorized process.

Device and Technical Information

When you visit our website, certain information may be collected automatically, including:

IP address.
Browser type and version.
Device type and operating system.
Language and regional settings.
Pages visited and interactions with our website.
Referring website or source.
Approximate location derived from your IP address.
Cookies and similar tracking identifiers.

Communications and Feedback

If you contact us by email, telephone, or through a website form, we may retain the information you provide to respond to your enquiry, manage your order, resolve a complaint, or improve our customer service.

2. How We Use Your Information

We use personal information for legitimate business purposes, including:

Processing and fulfilling orders.
Arranging shipping and delivery.
Processing payments, refunds, and returns.
Providing order confirmations and service-related notifications.
Responding to enquiries and customer support requests.
Managing our website, products, and online store.
Detecting and preventing fraud, unauthorized transactions, and security incidents.
Maintaining business, accounting, and transaction records.
Meeting applicable legal and regulatory obligations.
Understanding website usage and improving the shopping experience.
Sending marketing communications where permitted by law and, where required, with your consent.
Measuring the performance of advertising and marketing campaigns, subject to applicable cookie and privacy requirements.

We do not use personal information for purposes incompatible with the purposes for which it was collected without an appropriate legal basis or other authorization required by law.

3. Legal Bases for Processing

Where the UK General Data Protection Regulation (UK GDPR) applies, we process personal information on one or more of the following legal bases:

Contract: To process purchases, deliver products, manage payments, and fulfil our obligations to you.

Legal obligation: To comply with applicable tax, accounting, consumer protection, and other legal requirements.

Legitimate interests: To operate and secure our store, prevent fraud, respond to customer enquiries, maintain business records, and improve our services, where those interests are not overridden by your rights and interests.

Consent: To use certain non-essential cookies, carry out consent-based tracking, or send marketing communications where consent is legally required.

You may withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

4. Cookies and Similar Technologies

Our website may use cookies, pixels, tags, and similar technologies to support website functionality and understand how visitors interact with our store.

These technologies may be used to:

Remember shopping cart contents and website preferences.
Enable essential website functions.
Understand website traffic and performance.
Measure marketing campaign effectiveness.
Support advertising and personalized marketing where permitted.

Some cookies are necessary for the operation of the website. Other cookies, including certain analytics and advertising cookies, may require your consent before they are activated.

You can manage available cookie preferences through our cookie banner or settings, where provided. You may also be able to control cookies through your browser settings. Blocking certain cookies may affect website functionality.

5. When We Share Personal Information

We may disclose personal information to third parties when necessary to operate our store, fulfil orders, provide services, or comply with legal obligations.

These parties may include:

Shopify and website service providers: Our online store is hosted and supported through Shopify and related technology providers.

Payment processors: Payment providers process transactions and help detect or prevent fraudulent activity.

Shipping and delivery providers: Couriers and fulfilment partners may receive the information necessary to deliver your order.

Analytics and advertising providers: Where applicable and permitted, these providers help us measure website performance and advertising effectiveness.

Customer support and technical providers: Service providers may help us manage communications, maintain our website, or resolve technical issues.

Professional advisers and authorities: We may disclose information to legal, accounting, regulatory, or law enforcement authorities when required by law or necessary to protect our legal rights.

We do not authorize service providers to use personal information for purposes unrelated to the services they provide to us, subject to their independent legal obligations and applicable law.

6. Shopify and Third-Party Services

Bystelle uses Shopify to provide its online store infrastructure. Information submitted through our store may be processed by Shopify and other service providers involved in operating the website and completing transactions.

Third-party services may have their own privacy policies and data-handling practices. Where you use services operated directly by those providers, their applicable privacy notices may also apply.

We encourage you to review the privacy policies of relevant third-party providers to understand how they process your information.

7. International Data Transfers

Some of our service providers may process or store personal information outside the United Kingdom, including in countries that may have different data protection laws.

Where personal information is transferred internationally, we will take steps required by applicable data protection law to ensure that the transfer is lawful and that appropriate safeguards are in place where necessary.

These safeguards may include an applicable adequacy decision, approved contractual protections, or another lawful transfer mechanism.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including fulfilling orders, providing customer support, maintaining transaction records, resolving disputes, preventing fraud, and meeting legal obligations.

Retention periods depend on the type of information and the reason it was collected.

When personal information is no longer required, we will take appropriate steps to delete it, anonymize it, or securely dispose of it, subject to applicable legal requirements and legitimate recordkeeping needs.

9. Data Security

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure.

These measures may include access controls, secure service providers, and appropriate administrative safeguards.

However, no website, electronic transmission, or storage system can be guaranteed to be completely secure. We therefore cannot guarantee absolute security, although we take reasonable steps to protect the information entrusted to us.

10. Your Privacy Rights

Depending on your circumstances and applicable law, you may have the right to:

Request access to the personal information we hold about you.
Request correction of inaccurate or incomplete information.
Request deletion of personal information where applicable.
Request restriction of certain processing activities.
Object to processing based on legitimate interests.
Request the transfer of certain personal information to you or another provider.
Withdraw consent where processing is based on consent.
Object to direct marketing and request that we stop sending marketing communications.
Lodge a complaint with the relevant data protection authority.

These rights are subject to legal conditions and exceptions. For example, we may need to retain certain transaction records to comply with legal obligations even if you request deletion.

To exercise a privacy right, contact us using the details provided below. We may need to verify your identity before responding.

11. Marketing Communications

We may send promotional emails or other marketing communications where permitted by applicable law.

You can unsubscribe from marketing emails at any time by using the unsubscribe link included in the message or by contacting us directly.

Even if you opt out of marketing communications, we may still send essential messages relating to your orders, deliveries, refunds, account security, or customer service.

We will obtain consent where required and respect applicable rules governing electronic marketing.

12. Children's Privacy

Our website is intended for general shopping by adults and is not specifically directed at children.

We do not knowingly collect personal information from children in circumstances where doing so would violate applicable law. If you believe that a child has provided personal information to us improperly, please contact us so that we can review the matter and take appropriate action.

13. Third-Party Links

Our website may contain links to third-party websites or services. These websites are not controlled by Bystelle, and their privacy practices may differ from ours.

We are not responsible for the privacy policies, content, or security practices of third-party websites. We recommend reviewing the privacy notice of any external website before providing personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, website functionality, service providers, or legal obligations.

Any updated version will be published on this page, together with a revised “Last updated” date.

Where required by law, we will provide additional notice or obtain consent for material changes.

15. Contact Information

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or need further information about how your personal information is handled, please contact us.

Bystelle