Legal
Privacy Policy
Last updated 7 October 2026
This policy explains what personal information Cravelia collects when you use our website and shop with us, how we use it, and the rights you have over it. We keep it as short and plain-language as we can.
Who we are
Cravelia is a boutique fashion retailer selling limited autumn/winter collections through this website. For UK data protection purposes, Cravelia is the controller of the personal information described here.
Cravelia
Email: cravelia@outlook.com
Website: cravelia.com
What we collect
Account details: your name, email address, password (stored only as a secure, encrypted verification record), and any phone number or delivery address you choose to save to your account.
Order details: the items you order, the discount code used, your email address, and the payment status of your order. This lets us fulfil your order, email you confirmations and shipping updates, and let you track your order.
Cart contents: if you leave items in your basket without checking out, we store a snapshot of your basket so we can send you a reminder email. You can empty your basket at any time to remove it.
Marketing choices: if you enter your email into our spin-to-win game or newsletter signup, we store your email address and, where relevant, the discount code you won.
Website usage: we collect basic analytics about how visitors use the site, such as pages viewed. We do not use this to build advertising profiles.
Payments
All card payments are processed by Stripe, our payment provider. When you pay, your card details are entered directly into Stripe's secure payment form and are never seen or stored by Cravelia. Stripe acts as an independent controller of your payment data; you can read Stripe's privacy policy on their website.
How we use your information
To take payment and fulfil your order (contractual necessity).
To send transactional emails: order confirmations, shipping and delivery updates (contractual necessity).
To remind you about an abandoned basket (legitimate interest — you may ask us to stop at any time).
To send marketing emails you signed up for (consent — you can unsubscribe from any email or by contacting us).
To keep the website working, secure and improving (legitimate interest).
Who we share information with
We only share personal information with service providers that help us run the store: our payment processor (Stripe), our hosting and email delivery providers, and our website analytics. We never sell your data, and we do not share it for other companies' advertising.
How long we keep it
Order records are kept for up to six years so we can meet tax and consumer-law record-keeping duties. Abandoned-basket snapshots and marketing records are deleted or anonymised when they are no longer needed. You can also ask us to delete your account information at any time.
Your rights
Under UK GDPR you have the right to access a copy of your data, correct it, delete it, restrict or object to our use of it, and to withdraw consent for marketing at any time. To exercise any of these, email cravelia@outlook.com and we will respond within one month.
If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office (ico.org.uk).
Security
Your account is protected by an email verification step, and order records can only be viewed by you (and our admin team for fulfilment). Card data never touches our systems. The website is served over an encrypted connection.
Changes to this policy
If we change this policy we will update it on this page with a new 'last updated' date.