Privacy Policy

DIANASTEPINA LTD ("we", "our", "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website at dianastepina.shop.

1. Who We Are

DIANASTEPINA LTD is a company registered in England and Wales. Our registered address is 443 Kingsland Road, London, England, E8 4AU. You can contact us at info@dianastepina.shop or +44 7401441325.

2. Information We Collect

We may collect the following categories of personal data:

• Identity Data: first name, last name
• Contact Data: email address, phone number, billing address
• Financial Data: payment card details (processed securely by Stripe — we never store card data)
• Transaction Data: details of products purchased and payment history
• Technical Data: IP address, browser type, device information, pages visited
• Communications Data: messages you send us via email or contact forms

3. How We Use Your Information

We use your personal data for the following purposes:

• To process and fulfil your orders
• To send you order confirmations and transactional emails
• To respond to your enquiries and provide customer support
• To improve our website and services
• To comply with legal obligations
• To prevent fraud and ensure website security

4. Legal Basis for Processing

We process your personal data on the following legal bases: (a) performance of a contract — to fulfil your orders; (b) legitimate interests — to improve our services and prevent fraud; (c) legal obligation — to comply with applicable laws; (d) consent — where you have explicitly consented to processing.

5. Sharing Your Data

We do not sell your personal data to third parties. We may share data with:

• Stripe: our payment processor, for secure transaction handling
• Email service providers: for transactional and marketing emails (where consent is given)
• Netlify: our website hosting provider
• Legal authorities: where required by law

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, and for a minimum of six years to comply with UK tax and accounting regulations.

7. Your Rights

Under UK GDPR, you have the following rights:

• The right to access your personal data
• The right to rectification of inaccurate data
• The right to erasure ("right to be forgotten")
• The right to restrict processing
• The right to data portability
• The right to object to processing

To exercise any of these rights, please contact us at info@dianastepina.shop.

8. Cookies

Our website uses essential cookies to maintain your shopping cart and ensure the website functions correctly. We do not use tracking or advertising cookies without your consent.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All payment processing is handled by Stripe, which is PCI DSS compliant.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page. Continued use of our website after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at info@dianastepina.shop or write to us at 443 Kingsland Road, London, England, E8 4AU.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.