PRIVACY & COOKIES POLICY

Last Updated: 21/07/2026

We are committed to protecting your privacy and ensuring your personal information is handled in a safe and responsible way. This Privacy & Cookies Policy explains how we collect, use, share, and protect information about you when you visit our website (www.enyalye.com) and use our services. This policy complies with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR) where applicable, and other relevant data protection law.

1. COMPANY DETAILS

Registered Name: ENYALYË LTD
Registered Address: 158 St. Pauls Road, Birmingham, England, B12 8LZ
Company Number: 15596138
Email: hello@enyalye.com

2. WHAT DATA WE COLLECT AND WHY

We collect information that helps us provide a seamless shopping experience, improve our services, and meet our legal obligations, including:

Contact information: name, email address, billing and shipping address, and phone number; collected when you place an order, sign up for our newsletter, or contact us for support.
Payment information: processed securely by our payment provider (Shopify Payments); we do not store your full payment details ourselves.
Order information: details of products purchased, preferences, and any order-related communications.
Website usage data: interactions with our website (pages visited, items viewed) and device data (IP address, browser type), collected via cookies and similar technologies.
Marketing preferences: your choices around receiving marketing communications, collected when you opt in to our newsletter or other promotions.

3. HOW WE USE YOUR DATA

We use your data for the following purposes, each with its own legal basis under data protection law:

Processing orders: (fulfilment, payment, order updates): necessary to perform our contract with you.
Customer support: (responding to enquiries, handling complaints): necessary to perform our contract, or our legitimate interest in supporting our customers.
Marketing communications: (product news, offers): only where you've opted in; based on your consent, which you can withdraw at any time.
Improving our services: (analytics, understanding site usage): our legitimate interest in understanding and improving the shopping experience, or your consent where cookie law requires it.
Legal compliance: necessary to meet our legal obligations or respond to lawful requests from public authorities.

4. COOKIES AND TRACKING TECHNOLOGIES

Our website uses cookies and similar technologies to run smoothly, understand how it's used, and - where you've agreed - show relevant advertising. We use Shopify's built-in cookie consent tool to ask for your permission before setting non-essential cookies when you first visit our site.

Types of cookies we use:

Essential cookies: necessary for website functionality and security. These don't require consent, as the site can't work properly without them.
Analytics cookies: help us understand how visitors use our website (e.g., Google Analytics).
Advertising cookies: used to deliver relevant advertising and measure its effectiveness.

Managing cookies: you can accept or decline non-essential cookies via our cookie consent banner, and change your preferences at any time through the cookie settings link on our website, or by adjusting your browser settings. Declining some cookies may affect parts of your experience on our site.

5. HOW WE SHARE YOUR DATA

We do not sell or rent your personal information. We share data only with the following categories of trusted service providers, and only as needed to run our business and fulfil your order:

Shopify: our e-commerce platform and payment processor.
FedEx / Parcelhero: our courier and shipping partners, who receive the delivery details necessary to ship your order.
Google analytics: for understanding website usage, where you've consented to analytics cookies.
Our email marketing platform: if you've opted in to marketing communications.

We require these providers to handle your data securely and only for the purposes we've specified. We do not otherwise share your personal information with third parties without your permission.

6. INTERNATIONAL DATA TRANSFERS

Some of the providers listed above may process data outside the UK and EU (for example, in the United States). Where this happens, we rely on legally recognised safeguards, such as Standard Contractual Clauses, or an applicable adequacy framework like the UK-US Data Bridge, to ensure your data remains protected to UK/EU standards.

7. YOUR RIGHTS

Under UK and EU GDPR, you have the right to:

Access the personal data we hold about you.
Rectify any inaccuracies in your data.
Erasure: request deletion of your data in certain circumstances.
Restricting processing of your data.
Data portability: receive your data in a portable format.
Object to certain processing, including direct marketing.
Withdraw consent at any time, where processing is based on consent.
Lodge a complaint with the UK Information Commissioner's Office (ICO), or your local EU supervisory authority, if you believe your data has been mishandled.

To exercise any of these rights, contact us at hello@enyalye.com. We may request proof of identity before processing your request.

8. DATA SECURITY

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. While we take this seriously, no online transmission or storage can be guaranteed completely secure.

9. DATA RETENTION

We retain personal data only as long as necessary to fulfil the purposes in this policy, such as processing orders, meeting legal obligations, and resolving disputes, and review our retention practices regularly.

10. US CUSTOMERS

We're pleased to welcome customers based in the United States. Certain US state privacy laws (such as California's CPRA) apply once a business crosses specific revenue or data-volume thresholds; ENYALYË does not currently meet these thresholds. That said, we're happy to honour requests from US customers in the same spirit as the rights set out in Section 7. Just contact us at hello@enyalye.com.

11. THIRD-PARTY LINKS

Our website may, in future, link to third-party websites. We're not responsible for their privacy practices, and encourage you to review their policies before sharing personal information.

12. CHANGES TO THIS POLICY

We may update this policy to reflect changes in our practices or legal requirements. Updates will be posted on this page, and significant changes will be notified by email or a website notice.

13. CONTACT US

Questions about this policy or how we handle your data: hello@enyalye.com.

By using our website, you consent to this Privacy & Cookies Policy.