Privacy Policy

At Poshasyou, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you interact with us through our website.

By using our website, you agree to the practices described in this Privacy Policy.

Who We Are

Poshasyou is a UK-based fashion e-commerce platform offering women’s, men’s, and kids’ clothing, jewellery, watches, footwear, toys, beauty products, bags, sportswear, and more.

For the purposes of data protection law, Poshasyou acts as the Data Controller of your personal information.

If you have any questions about this Privacy Policy, you can contact us at:
📧 [email protected]

Data We Collect

We only collect the personal data necessary to provide our services, which may include:

Identity & Contact Data: your name, email address, and phone number.
Transaction Data: details relating to your purchases and order history.
Marketing Preferences: your preferences regarding receiving marketing and newsletters.

We do not collect sensitive personal data (such as health information, ethnicity, or biometric data).

How We Use Your Data

We use your personal data for the following purposes:

To process and fulfil your orders.
To communicate with you about your orders or account.
To send you email newsletters and marketing communications (only if you have opted in).
To keep you informed about promotions, offers, and updates (including retargeting ads in the future).
To comply with legal, tax, and accounting obligations.

Sharing Your Personal Data

We may share your personal data with:

Delivery partners (e.g., couriers) to deliver your orders.
Payment processors to handle transactions securely.
IT service providers that help us manage our website or systems.
Regulatory or legal bodies, if required by law.

All third parties are bound by confidentiality and data protection obligations.

Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases to process your data:

Contractual necessity: to fulfil your orders and provide services.
Consent: when you subscribe to marketing communications or newsletters.
Legal obligation: to meet tax and accounting requirements.
Legitimate interest: to improve our services and maintain business operations.

Data Retention

We retain your personal data only for as long as necessary:

Order records: kept for 6 years for legal and tax purposes.
Marketing preferences: retained until you unsubscribe or withdraw consent.
Inactive accounts: deleted after 6 years of inactivity.

Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or loss.

Children’s Privacy

Poshasyou does not knowingly collect personal data from children under 16 years old. If you are under 16, please do not use our website or provide your personal information. Parents or guardians who believe their child has submitted data should contact us immediately.

Your Rights under GDPR

As a UK resident, you have the following rights:

Right to access – request a copy of your personal data.
Right to rectification – correct inaccurate or incomplete data.
Right to erasure – request deletion of your personal data where applicable.
Right to restrict processing – request suspension of data use in certain cases.
Right to object – object to processing for marketing or legitimate interests.
Right to data portability – request transfer of your data to another provider.
Right to withdraw consent – withdraw consent for marketing at any time.

You may exercise these rights by contacting us at [email protected].

International Transfers

As Poshasyou operates in the UK, we comply with UK GDPR and the Data Protection Act 2018. If personal data is transferred outside the UK, we will ensure it is protected through legally approved safeguards.