Privacy policy
Privacy Policy
Last updated: 7 August 2026
At Fashion Floora, we take your privacy seriously. This Privacy Policy explains what personal data we collect, how we collect it, why we use it, who we share it with, how long we keep it, and the rights you have over it.
This policy applies to fashionfloora.com and to any orders you place with us.
1. Who We Are
Fashion Floora is a trading name of ADSTEAK LTD, a company registered in England and Wales.
- Registered office: 24-26 Arcadia Avenue, Fin009, London, N3 2JU, United Kingdom
- Email: contact@fashionfloora.com
- Phone: [FILL — your business phone number]
ADSTEAK LTD is the data controller for the personal data described in this policy. That means we decide what data is collected and why, and we are legally responsible for how it is handled.
2. What Information We Collect, and How
We collect the following categories of personal data:
Information you give us directly
- Contact details — name, email address, phone number
- Delivery and billing addresses
- Order details — the items you bought, sizes, colours, order value
- Correspondence — messages you send us by email or through our contact form, including any photos you send us to support a return or damage claim
- Marketing preferences — if you subscribe to our email list
- Account details — if you create an account, your login credentials (passwords are stored encrypted by Shopify and are never visible to us)
Information we collect automatically
- Device and browser information — IP address, browser type and version, operating system, screen resolution, device type
- Usage data — pages viewed, products viewed, time on site, referring website, what you added to your cart, whether you completed checkout
- Cookie and pixel data — see Section 4
Payment information
We do not collect, see, or store your full card number, expiry date, or security code. Card payments are processed directly by Shopify Payments and, where you choose it, PayPal. We receive only the last four digits of your card, the card type, and confirmation that the payment succeeded or failed.
3. Why We Use Your Information, and Our Lawful Basis
Under UK GDPR we must have a lawful basis for each use of your data. Ours are:
| What we use it for | Lawful basis |
|---|---|
| Processing and delivering your order, including passing your address to our fulfilment partner and carrier | Performance of a contract |
| Sending order confirmations, dispatch notices and tracking updates | Performance of a contract |
| Handling returns, refunds, exchanges and damage claims | Performance of a contract |
| Answering your questions and providing customer support | Performance of a contract / legitimate interests |
| Detecting and preventing fraudulent orders and chargebacks | Legitimate interests |
| Understanding how our site is used so we can improve it | Legitimate interests / consent for non-essential cookies |
| Sending marketing emails about new arrivals and offers | Consent |
| Showing you personalised advertising (see Section 5) | Consent |
| Keeping accounting and tax records | Legal obligation |
Where we rely on legitimate interests, we have considered whether our interest is outweighed by your rights, and you can object at any time — see Section 10.
Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect anything we did lawfully before you withdrew it.
4. Cookies and Similar Technologies
Cookies are small text files placed on your device. We use four categories:
- Strictly necessary — these make the site work. They remember what's in your cart, keep you logged in, and secure the checkout. These cannot be switched off.
- Analytics — these tell us how many people visit, which products they look at, and where they leave the site. We use Google Analytics and Shopify's built-in analytics.
- Advertising — these let us measure whether our ads worked and show you relevant ads elsewhere. See Section 5.
- Functional — these remember preferences such as your currency or region.
Analytics, advertising and functional cookies are only set if you consent to them through our cookie banner. You can change or withdraw your choice at any time using the cookie preferences link in our footer, or by clearing cookies in your browser settings.
Blocking strictly necessary cookies in your browser will stop the cart and checkout from working.
5. Advertising and Personalisation
We advertise on Google, including Google Shopping and Search, and we may advertise on social platforms. To do this, and only where you have consented, we use tracking technologies including the Google tag, Google Ads conversion tracking, and Google Analytics.
These technologies allow us and our advertising partners to:
- Measure which ads led to a visit or a purchase
- Show you products you previously viewed on our site (remarketing)
- Build audiences of people with similar interests
- Show you advertising that is personalised to your browsing and purchase behaviour
We do not share your name, email address or payment details with advertising platforms for this purpose. Where an email address is used to match an audience, it is hashed before it is sent.
You can opt out of personalised advertising at any time:
- Withdraw advertising cookie consent using the link in our footer
- Adjust your Google ad settings at myadcenter.google.com
- Opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on
We do not sell your personal data. We have never sold personal data and we have no plans to.
6. Who We Share Your Information With
We share your data only with the parties below, only for the purposes stated, and only to the extent needed:
- Shopify Inc. — hosts our online store, processes orders, and stores customer and order records on our behalf
- Shopify Payments and PayPal — process your payment and carry out fraud checks
- CJ Dropshipping — our order fulfilment partner. They receive your name, delivery address and phone number so your order can be picked, packed and dispatched.
- Delivery carriers — receive your name, address and phone number to deliver your parcel and provide tracking
- Customs authorities — where an order crosses a border, we or our carrier must provide the recipient's name, address and details of the contents so the parcel can clear customs
- Google LLC — analytics and advertising, as described in Section 5
- Professional advisers — accountants and, if ever required, lawyers
- Law enforcement or regulators — where we are legally required to disclose
Each of these is bound by a contract requiring them to protect your data and to use it only for the purposes we specify. We do not sell, rent or trade your personal data to anyone.
7. International Transfers
We are based in the United Kingdom, and some of the companies we work with are outside it. This means your data may be transferred to and stored in countries including Canada, the United States and China.
Where we transfer personal data outside the UK, we rely on one of the following safeguards:
- A UK adequacy decision, where the destination country has been assessed as providing adequate protection
- The UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses
In particular, your name, delivery address and phone number are transferred to our fulfilment partner in China so that your order can be dispatched. This transfer is covered by the contractual safeguards above and is limited to what is necessary to deliver your order.
8. How Long We Keep Your Information
- Order and transaction records — 6 years after the end of the financial year in which the order was placed, as required by UK tax law
- Customer accounts — for as long as your account is open, plus 12 months after you close it
- Customer service correspondence — 3 years from the date of your last contact
- Marketing subscriber data — until you unsubscribe, plus a permanent suppression record so we do not email you again by mistake
- Analytics data — up to 26 months
- Abandoned cart data — 30 days
When a retention period ends, we delete the data or anonymise it so it can no longer identify you.
9. How We Keep Your Information Secure
Our store runs on Shopify, which is certified to PCI DSS Level 1 — the highest level in the payment card industry. All traffic on our site is encrypted using TLS, shown by the padlock in your browser's address bar.
Access to customer data is limited to the people who need it to run the business, protected by strong passwords and two-factor authentication. Payment card details never reach our systems.
No method of transmitting or storing data is completely secure, and we cannot guarantee absolute security. If a data breach occurs that is likely to result in a risk to your rights, we will report it to the ICO within 72 hours and tell you directly where the law requires it.
10. Your Rights
Under UK GDPR you have the right to:
- Be informed about how we use your data — this policy
- Access a copy of the personal data we hold about you
- Rectification — have inaccurate or incomplete data corrected
- Erasure — ask us to delete your data, where we have no overriding legal reason to keep it
- Restrict processing — ask us to pause using your data while a dispute is resolved
- Data portability — receive your data in a machine-readable format, or have it sent to another provider
- Object — to processing based on legitimate interests, and to direct marketing at any time
- Withdraw consent at any time, where consent is the basis we rely on
- Not be subject to automated decision-making that has a legal or similarly significant effect. We do not carry out any such decision-making.
To exercise any of these rights, email contact@fashionfloora.com. We will respond within one month. There is no charge. We may ask you to confirm your identity before we act, so that we do not disclose your data to someone else.
You can unsubscribe from marketing emails instantly using the link at the bottom of any of them.
If you are unhappy with how we have handled your data, please tell us first and we will try to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, by phone on 0303 123 1113, or by post to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
11. California Residents — CCPA and CPRA
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you additional rights. We comply with the CCPA and CPRA in respect of California residents.
In the 12 months before the date of this policy, we have collected the categories of personal information described in Section 2: identifiers, customer records, commercial information, internet activity, and geolocation data inferred from IP address. We collect it from you directly and automatically through your use of our site, as described in Section 2. We use it for the purposes in Section 3 and disclose it for business purposes to the parties in Section 6.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising within the meaning of the CCPA. We have not sold or shared personal information in the preceding 12 months, and we do not knowingly sell or share the personal information of anyone under 16.
As a California resident you have the right to:
- Know what personal information we collect, use, disclose and — if applicable — sell or share
- Request a copy of the specific pieces of personal information we hold about you
- Request deletion of your personal information
- Request correction of inaccurate personal information
- Opt out of the sale or sharing of your personal information
- Limit the use of sensitive personal information — we do not collect sensitive personal information as defined by the CCPA
- Not be discriminated against for exercising any of these rights. We will not deny you goods or services, charge you a different price, or give you a lower quality of service.
To exercise any of these rights, email contact@fashionfloora.com with the subject line "California Privacy Request". We will verify your identity by matching the details you provide against our records, and respond within 45 days. You may use an authorised agent, in which case we will ask for written proof of their authority.
12. Children's Privacy
Our store is intended for adults. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us their data, email contact@fashionfloora.com and we will delete it.
13. Links to Other Websites
Our site may link to other websites — for example a delivery carrier's tracking page. We are not responsible for how those sites handle your data. Please read their privacy policies before giving them any information.
14. Changes to This Policy
We may update this Privacy Policy from time to time — for example if we change a supplier or add a new tool to the site. Any changes will be posted on this page with a new "Last updated" date at the top. If a change materially affects how we use your data, we will email subscribers directly.
15. Contact Us
If you have any question about this policy, or want to exercise any of your rights, contact us:
- Company: ADSTEAK LTD, trading as Fashion Floora
- Email: contact@fashionfloora.com
- Phone: [FILL — your business phone number]
- Address: 24-26 Arcadia Avenue, Fin009, London, N3 2JU, United Kingdom
- Response time: We reply within 24 hours, Monday to Friday