Privacy policy

Cleaves Privacy Policy

Effective date: 14 January 2026
Contact: contact@cleaves.shop

Cleaves (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal data when you visit our website (the “Site”), contact us, or make a purchase.

This policy is intended to meet UK privacy expectations, including the UK GDPR and the Data Protection Act 2018.

1) What personal data we collect

We may collect the following categories of personal data:

A. Information you provide

Identity details (name)
Contact details (email address, phone number if provided)
Shipping and billing details (address, postcode, country)
Order details (products purchased, order number, transaction history)
Customer support communications (emails/messages you send us)

B. Information collected automatically

Device and browser information
IP address and general location (derived from IP)
Site usage data (pages visited, time spent, clicks, referral source)
Cookies and similar tracking technologies (see Section 9)

C. Payment information

Payments are processed by third-party payment providers.
We do not store full payment card details. We may receive limited payment-related information (e.g., payment status, last 4 digits depending on provider, transaction IDs).

2) How we use your data

We use your personal data to:

Process and fulfil orders (payment confirmation, shipping, returns, refunds)
Provide customer support and respond to enquiries
Send service messages (order confirmations, delivery updates, policy/terms updates)
Prevent fraud and protect the Site
Improve the Site, products, and customer experience
Comply with legal obligations (tax, accounting, consumer rights)
Send marketing emails only if you have opted in (you can opt out anytime)

3) Legal bases for processing (UK GDPR)

We process personal data under these legal bases:

Contract: to fulfil your order and provide customer service
Legitimate interests: to operate, improve, and secure our business and Site (balanced against your rights)
Legal obligation: to comply with applicable laws and regulations
Consent: for optional marketing communications and certain cookies (where required)

4) How we share your data

We may share your data with trusted third parties only as needed to operate our store, including:

Payment processors (to process payments)
Shipping and logistics partners (to deliver your order)
E-commerce and technology providers (store platform, hosting, analytics, customer support tools)
Fraud prevention and security providers
Professional advisers (accountants, legal advisers) when necessary
Authorities if required by law, regulation, or legal process

We do not sell your personal data.

5) International transfers

Because orders are shipped from China, and because some of our service providers may operate internationally, your data may be transferred outside the UK.

Where international transfers occur, we take steps designed to ensure appropriate safeguards are in place, such as:

Transfers to countries recognised as providing adequate protection, and/or
Use of contractual protections (such as the UK International Data Transfer Agreement or UK Addendum where applicable), and/or
Other safeguards permitted by UK data protection law.

6) Data retention

We keep personal data only for as long as necessary for the purposes set out in this policy, including:

To fulfil orders and provide support
To handle returns/refunds and disputes
To meet legal, tax, and accounting obligations

Retention periods vary depending on data type and legal requirements. When no longer needed, we securely delete or anonymise data.

7) Your rights (UK)

You may have the right to:

Access your personal data
Correct inaccurate or incomplete data
Request deletion of your data (in certain situations)
Restrict or object to processing (in certain situations)
Data portability (where applicable)
Withdraw consent at any time (where processing is based on consent)
Complain to the UK Information Commissioner’s Office (ICO)

To exercise your rights, email: contact@cleaves.shop
We may need to verify your identity before responding.

8) Security

We use reasonable administrative, technical, and physical safeguards designed to protect your personal data. No method of transmission or storage is 100% secure, but we work to reduce risk and prevent unauthorised access.

9) Cookies and tracking technologies

We use cookies and similar technologies to:

Enable core site functionality (e.g., cart and checkout)
Remember preferences
Understand how the Site is used and improve performance
Support marketing/advertising where applicable (only as permitted)

You can control cookies through your browser settings and, where provided, through on-site cookie preference tools. Blocking some cookies may affect Site functionality.

10) Marketing communications

If you opt in to marketing:

We may send you promotional emails about new products and offers.
You can unsubscribe at any time using the link in the email or by contacting contact@cleaves.shop.

We will still send essential service emails related to your order.

11) Children’s privacy

Our Site is not intended for children. We do not knowingly collect personal data from children.

12) Changes to this Privacy Policy

We may update this policy from time to time. The “Effective date” above reflects the latest version. Continued use of the Site after changes means you accept the updated policy.