Privacy policy

Last updated: August 13, 2026

This online store is operated by Sarah Rose ("Sarah Rose", "we", "our", "us"), a trading name of Sarah Rose VA. Together with all related content, products and services, we refer to this as the "Services".

Our store runs on the e-commerce platform of Shopify Inc., which hosts our website and supports us in delivering the Services.

In this Privacy Policy we describe which personal information we collect, why we collect it, how we use and protect it, and which rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By visiting our website or placing an order, you confirm that you have read and understood this policy.

1. Who Is Responsible for Your Data

Sarah Rose VA, Boereglop 3, 8899CA, Oost-Vlieland, The Netherlands, is the controller of the personal data described in this policy. You can reach us about any privacy matter at info@sarah-rose.com.

2. What Information We Collect

Depending on how you interact with our store, we may collect:

  • Identity and contact data: your name, email address, phone number, billing address and shipping address.
  • Payment data: payment confirmations and transaction records, processed through secure payment providers. We do not store full card details.
  • Account data: login details, password, saved preferences and settings.
  • Shopping data: products you view, add to your cart, purchase, return or exchange.
  • Technical data: IP address, browser type, device and operating system, cookie identifiers and how you navigate our website.
  • Support data: the content of emails or messages you send to our customer service team, including any attachments.

This information reaches us in three ways: directly from you, for example when you place an order, create an account or contact us; automatically, via cookies and similar technologies while you browse our website; and via third parties that help us run the store, such as Shopify and our payment providers.

3. Why We Use Your Information and Our Lawful Basis

  • Running the store - processing payments, shipping your orders and handling returns, exchanges and refunds. Lawful basis: performance of a contract with you.
  • Improving your experience - remembering your preferences, personalising content and suggesting products that may interest you. Lawful basis: your consent, or our legitimate interest in improving the store.
  • Communication - sending order confirmations and shipping updates, answering your questions and providing support. Lawful basis: performance of a contract, or our legitimate interest in serving customers well.
  • Marketing - where permitted, sending you offers or showing you relevant advertisements. Lawful basis: your consent. You can unsubscribe at any time via the link in our emails.
  • Protection and fraud prevention - securing accounts, detecting suspicious activity and keeping payments safe. Lawful basis: our legitimate interest in protecting the store and its customers.
  • Legal obligations - complying with applicable laws, responding to lawful requests and enforcing our Terms of Service. Lawful basis: compliance with a legal obligation.

4. Who We Share Your Information With

We only share personal information where necessary, with:

  • Shopify Inc., which hosts our store and processes orders on our behalf.
  • Payment providers and delivery partners, including Royal Mail, so payments can be completed and parcels can reach you.
  • Service providers for IT, analytics, advertising and email, who support the operation of our store.
  • Public authorities or courts, where we are legally required to do so.

All partners are contractually bound to protect your information and to use it only for the agreed purpose. We never sell or rent your personal information to anyone.

5. Shopify

Because our store is built on Shopify, Shopify also collects and processes certain data (such as cookies and device information) to operate the platform and provide analytics. You can read more about how Shopify handles personal data at https://www.shopify.com/legal/privacy.

6. Cookies

We use cookies and similar technologies to keep the store working, remember the contents of your cart, understand how the site is used and, where you have given consent, to show you relevant advertising. You can manage or refuse cookies through your browser settings. Refusing certain cookies may affect how parts of the store function.

7. Transfers Outside the United Kingdom

In some cases your personal information may be stored on servers located outside the United Kingdom, for example in the European Union, Canada or the United States. Where this happens, we rely on recognised legal safeguards, such as UK adequacy regulations, the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, so that your data continues to receive an adequate level of protection.

8. How Long We Keep Your Information

We keep personal information no longer than necessary. In practice this means we retain data to fulfill your orders and provide the Services, to meet legal and tax obligations, to resolve any disputes and to enforce our agreements. Order and transaction records are generally kept for 7 years to satisfy accounting and tax requirements. Marketing data is kept until you withdraw your consent. Once information is no longer required, it is securely deleted or anonymised.

9. Your Rights

Under the UK GDPR and the Data Protection Act 2018 you have the right to:

  • request access to the personal data we hold about you;
  • have inaccurate data corrected;
  • have your personal data deleted;
  • restrict or object to certain types of processing, including direct marketing;
  • withdraw your consent where processing is based on consent;
  • receive your data in a portable format.

To exercise any of these rights, email us at info@sarah-rose.com. To protect your data, we may ask you to verify your identity first. We respond to all requests within one month. You will never be treated differently for exercising your privacy rights.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority, at https://ico.org.uk or on 0303 123 1113.

10. How We Protect Your Information

We apply appropriate technical and organisational measures to keep your personal information safe, including encryption in transit and restricted access to order data. At the same time, no online system can ever be completely secure, so we cannot promise absolute protection of data transmitted over the internet.

11. Children

Our Services are not aimed at children under 18 and we do not knowingly collect their personal data. If you believe a minor has provided us with personal information, please contact us so we can remove it.

12. Updates to This Policy

We may revise this Privacy Policy from time to time, for example when our operations or legal requirements change. The most recent version will always be published on this page with an updated "Last updated" date. If we make significant changes, we will clearly communicate this on our website.

13. Contact Us

If you have any questions about this Privacy Policy or about how we handle your data, you can reach us here:

Store Name: Sarah Rose
Email: info@sarah-rose.com
Customer Service Hours: Monday to Friday: 9:00 AM to 5:00 PM (London time). Saturday and Sunday: 9:00 AM to 4:00 PM (London time).

Business Information

Store Name: Sarah Rose
Company Name: Sarah Rose VA
Company Registration Number: 76089347
Business Address: Boereglop 3, 8899CA, Oost-Vlieland, The Netherlands
Email: info@sarah-rose.com

Sarah Rose is a trading name of Sarah Rose VA.