Privacy Policy

Last updated: 7 September 2026

This Privacy Policy explains how Shopsyra (“we”, “us”, “our”) collects, uses, shares and protects your personal information when you visit shopsyra.uk, buy personalised jewellery from us, contact us, or receive our marketing emails.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Shopsyra is the data controller of the personal information described in this policy.

Please read this policy carefully. If you do not agree with it, please do not use this website.

Contact details

Business name: Shopsyra
Website: https://shopsyra.uk
Email for privacy questions and data requests: info@shopsyra.uk
Postal address:
3 Glynne Street
Cardiff
CF11 9NS
United Kingdom

If you have any question about this policy or about how we handle your information, email us at info@shopsyra.uk and we will respond within 30 days.

What this policy covers

The information we collect
How we collect it
How and why we use it
Payments and card details
Cookies and similar technologies
Analytics and advertising, including Google
Who we share information with
International transfers
How long we keep information
How we protect information
Your rights and choices
Marketing preferences
Children’s privacy
Regional information (EEA, UK, United States)
Changes to this policy

Information we collect

We only collect the information we need to run the shop, fulfil your order and improve the website. Depending on how you use shopsyra.uk, that may include:

Information you give us

Identity and contact details — your name, billing address, delivery address, email address and telephone number.
Order information — the products you buy, order value, order number, delivery method, order history and any gift message.
Personalisation details — the names, initials, dates, engraving text, birthstones or other wording you ask us to engrave or add to a personalised item. Please note that this text is passed to the person or workshop producing your item so that it can be made to your instructions.
Account information — if you create an account, your username, password (stored in encrypted form), saved addresses and order history.
Communications — the content of messages you send us through the contact form, by email or through social media, including any information you choose to include.
Marketing preferences — whether you have chosen to receive our newsletter, and your subsequent choices about it.
Reviews and content — any product review, rating, comment or photograph you submit to the site. Reviews are published publicly with the name you supply.

Information we collect automatically

Device and connection data — IP address, browser type and version, operating system, device type, screen size and language settings.
Usage data — the pages and products you view, how you reached the site, the links you click, search terms used on the site, items added to the basket or wishlist, and how long you spend on a page.
Cookie identifiers — the identifiers stored by cookies and similar technologies described in the Cookies section below.

Information we receive from others

Payment providers — Stripe confirms to us whether a payment succeeded or failed, along with the payment reference, the card type and the last four digits of the card.
Delivery partners — tracking and delivery status information for your parcel.
Analytics and advertising providers — aggregated and pseudonymised statistics about how visitors reach and use the site.

Special category data. We do not ask for, and do not want to receive, sensitive personal information such as health data, racial or ethnic origin, religious beliefs, or political opinions. Please do not include such information in engraving text or in messages to us.

How we collect information

Directly from you — when you place an order, create an account, subscribe to our newsletter, complete the contact form, leave a review or email us.
Automatically — through cookies and similar technologies as you browse the site, as described below.
From third parties — from our payment processor, delivery partners and analytics providers, as listed above.

How and why we use your information

Under the UK GDPR we must have a lawful basis for each use of your personal information. The table below sets out what we do and why.

What we do	Information used	Lawful basis
Process and fulfil your order, make your personalised item, take payment and deliver it	Identity, contact, order, personalisation, payment confirmation	Performance of a contract with you
Send order confirmations, dispatch notices and service messages about your order	Identity, contact, order	Performance of a contract with you
Handle returns, refunds, faults and customer service enquiries	Identity, contact, order, communications	Performance of a contract; legal obligation (consumer law)
Manage your account and keep you signed in	Account, technical	Performance of a contract; legitimate interests (site security)
Prevent, detect and investigate fraud and misuse of the site	Order, technical, usage	Legitimate interests (protecting our business and customers); legal obligation
Keep accounting, tax and transaction records	Identity, contact, order, payment records	Legal obligation (UK tax and company record-keeping rules)
Understand how the site is used and improve our products, pages and service	Usage, technical, cookie identifiers	Consent (for analytics cookies), or legitimate interests where cookies are strictly necessary
Send marketing emails and newsletters about products and offers	Contact, marketing preferences, order history	Consent (you can withdraw it at any time); soft opt-in for our own similar products where permitted by law
Show and measure online advertising, including advertising on Google	Cookie identifiers, usage, technical	Consent
Respond to legal claims or requests from regulators	Any relevant information	Legal obligation; legitimate interests (establishing or defending legal claims)

Where we rely on consent, you can withdraw it at any time — see Your rights and choices. Withdrawing consent does not affect anything we did lawfully before you withdrew it.

We do not sell your personal information, and we do not share it with third parties for their own independent marketing purposes.

Payments and card details

Card payments on shopsyra.uk are processed by Stripe. Your full card number, expiry date and security code are entered on a payment form supplied by Stripe and are transmitted directly to Stripe. We never see or store your full card details on our servers. We receive only the payment reference, the outcome of the payment, the card type and the last four digits of the card, which we keep so we can identify the transaction and process refunds.

Stripe is an independent data controller for the payment data it processes and handles it under its own privacy policy, which you can read at https://stripe.com/gb/privacy.

Cookies and similar technologies

Cookies are small text files placed on your device when you visit a website. We also use similar technologies such as pixels, tags and local storage. We use them for the following purposes:

Strictly necessary cookies — required for the site to work. They remember what is in your basket, keep you signed in, secure the checkout, and store your cookie choices. These cannot be switched off in our systems.
Functional cookies — remember preferences such as your currency, recently viewed products, wishlist and comparison list.
Analytics and performance cookies — help us understand how visitors find and use the site, which pages are popular, and where pages can be improved. See below.
Advertising cookies — used to measure the performance of our adverts and, where you have agreed, to show you relevant adverts on other websites. See below.

How to control cookies

You can accept or reject non-essential cookies through the cookie banner on the site, and change your choice at any time by clearing your cookies and reloading the page. You can also control cookies in your browser settings — every major browser lets you block or delete cookies, and most let you block third-party cookies specifically. Please be aware that blocking strictly necessary cookies will stop the basket and checkout from working.

Guidance for the common browsers: Chrome, Firefox, Safari, Edge.

Analytics and advertising, including Google

Google Analytics

We use Google Analytics 4, a web analytics service provided by Google, to understand how visitors use shopsyra.uk. Google Analytics sets cookies and collects information such as your device type, browser, approximate location derived from your IP address, the pages you view, the products you look at, and the actions you take on the site. This information is used to produce reports about site usage so we can improve the shop.

Google processes this data on our behalf. You can read how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites, and Google’s own privacy policy at policies.google.com/privacy.

Opting out of Google Analytics: you can decline analytics cookies in our cookie banner, or install the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout.

Google advertising, conversion tracking and remarketing

We advertise our products through Google Ads and use Google’s advertising technologies, including conversion tracking and remarketing (also called retargeting). This means:

Third-party vendors, including Google, use cookies and similar identifiers to serve adverts to you based on your previous visits to shopsyra.uk and to other websites.
Google’s use of advertising cookies enables it and its partners to serve adverts to you based on your visit to our site and/or other sites on the internet.
We use these technologies to measure how many people who see or click our adverts go on to buy something, so we can judge whether our advertising is working. This measurement is done using aggregated, non-identifying reports.
We may create audience lists so that our adverts are shown to people who have already visited the site or viewed particular products. We do not upload sensitive information for this purpose, and we do not use advertising features to identify you personally.

Your choices about personalised advertising:

Opt out of personalised advertising by Google at Google My Ad Center or Google Ads Settings.
Opt out of personalised advertising from many other vendors at Your Online Choices (UK/EU), the Network Advertising Initiative, or the Digital Advertising Alliance.
Reject advertising cookies in our cookie banner, or block third-party cookies in your browser.

Opting out means the adverts you see will be less relevant to you; it does not mean you will stop seeing adverts.

Who we share your information with

We share personal information only where it is necessary, and only with organisations that are required to keep it secure and to use it only for the purpose we have set. We share it with:

Payment processing — Stripe, to take payment and process refunds.
Website hosting and infrastructure — our hosting provider (Hostinger), which stores the website and its database on our behalf.
Makers and suppliers — the workshops and suppliers who produce, engrave and pack your personalised item receive the details needed to make and dispatch it.
Delivery companies — the carrier handling your parcel receives your name, delivery address, email address and telephone number so it can be delivered.
Email and marketing services — the provider we use to send our newsletter (Mailchimp) and the mail service that delivers order and contact-form emails.
Analytics and advertising providers — Google, as described above.
Professional advisers — accountants and, if ever needed, lawyers and insurers.
Authorities — law enforcement, regulators, courts or tax authorities, where we are legally required to disclose information or need to establish or defend legal claims.
A buyer of the business — if we sell or transfer the business, customer records may transfer with it. You would be told about this and this policy would continue to apply to the information transferred.

Our service providers act as our processors and may not use your information for their own purposes. We do not sell, rent or trade your personal information.

International transfers

Some of the providers listed above are based outside the United Kingdom, or store data outside the UK — for example in the European Economic Area or the United States. Where we transfer personal information outside the UK, we make sure it is protected by one of the safeguards allowed under UK data protection law, such as:

a transfer to a country the UK Government has decided offers an adequate level of protection; or
a contract containing the UK International Data Transfer Agreement, or the EU Standard Contractual Clauses together with the UK Addendum; or
for transfers to the United States, certification under the UK Extension to the EU–US Data Privacy Framework where the provider participates in it.

You can ask us for more detail about the safeguards that apply by emailing info@shopsyra.uk.

How long we keep your information

We keep personal information only for as long as we need it, and then delete it or anonymise it.

Information	Retention period
Order, invoice and payment records	6 years after the end of the tax year of the transaction, to meet UK tax and accounting requirements
Personalisation and engraving text	Kept with the order record; removed from production systems once the order is complete and the returns window has closed
Customer account details	For as long as the account is open, and up to 2 years after your last activity, unless you ask us to delete it sooner
Newsletter subscriber details	Until you unsubscribe, and then a minimal suppression record so we do not email you again
Contact form and email correspondence	Up to 2 years after the enquiry is resolved
Website analytics data	Up to 14 months at event level, in line with Google Analytics retention settings
Cookies	From the end of your browsing session up to 24 months, depending on the cookie

How we protect your information

We take appropriate technical and organisational measures to protect personal information against loss, misuse and unauthorised access. These include encryption of traffic to and from the site using HTTPS/TLS, payment pages hosted by a PCI-DSS compliant payment processor, access controls and strong authentication on our administrative accounts, keeping the website software and plugins updated, and limiting access to order data to the people who need it to fulfil your order.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner’s Office, and you, as required by law.

Your rights and choices

Under the UK GDPR you have the following rights over your personal information:

Access — ask for a copy of the personal information we hold about you.
Rectification — ask us to correct information that is inaccurate or incomplete.
Erasure — ask us to delete your information where there is no good reason for us to keep it. We may need to keep order records to meet our legal obligations.
Restriction — ask us to pause our use of your information while a query about it is resolved.
Portability — ask us to provide the information you gave us in a structured, commonly used, machine-readable format, or to send it to another provider.
Objection — object to our use of your information where we rely on legitimate interests, and object at any time to its use for direct marketing.
Withdraw consent — where we rely on consent, withdraw it at any time.
Automated decisions — we do not make decisions about you by automated means that produce legal or similarly significant effects, and we do not carry out automated profiling of that kind.

To exercise any of these rights, email info@shopsyra.uk. We will respond within one month. We may ask you for information to confirm your identity before we act, so that we do not disclose your data to someone else. Exercising your rights is free of charge.

Complaints. If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the UK supervisory authority, the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint, helpline 0303 123 1113.

Marketing preferences

We only send marketing emails to people who have asked for them, or to existing customers about products similar to those they have bought, as permitted by the Privacy and Electronic Communications Regulations. Every marketing email contains an unsubscribe link, and you can also unsubscribe at any time by emailing info@shopsyra.uk. Unsubscribing from marketing does not stop service messages about an order you have placed, such as a dispatch confirmation.

Children’s privacy

This website is intended for adults. We do not knowingly sell to, or collect personal information from, children under 16. If you believe a child has provided us with personal information, please contact info@shopsyra.uk and we will delete it.

Regional information

Visitors in the UK and the European Economic Area

This policy is written to meet the UK GDPR and the Data Protection Act 2018, and reflects the same rights for visitors in the EEA under the EU GDPR. Non-essential cookies, including analytics and advertising cookies, are set only where you have consented through our cookie banner, and you may withdraw that consent at any time.

Visitors in the United States

We do not sell or share personal information as those terms are defined under the California Consumer Privacy Act, and we do not process personal information for cross-context behavioural advertising in exchange for payment. If you are a resident of California or another US state with comparable privacy legislation, you may request access to, correction of, or deletion of your personal information, and you will not be discriminated against for exercising those rights. Email info@shopsyra.uk to make a request.

Links to other websites

Our site may contain links to other websites and to our social media pages. This policy applies only to shopsyra.uk. We are not responsible for the privacy practices of other websites, and we encourage you to read their privacy policies before providing information to them.

Changes to this policy

We may update this policy from time to time — for example if we change the services we use or if the law changes. The date at the top of this page shows when it was last updated. If we make a significant change we will make that clear on the website, and where required we will ask for your consent again. Please check this page from time to time.

Contact us

Questions, requests or complaints about this Privacy Policy or about your personal information should be sent to info@shopsyra.uk. You can also reach us through the contact form on our Contact us page.