Privacy policy

Who we are

SHANYUE HE is a small independent clothing atelier. For any privacy question or request, contact us at [email protected] — we answer personally.

What we collect and why

Order data: when you place an order we collect your name, email address, phone number (optional), delivery address and the items you bought. We use this to fulfil your order, send order updates, and meet our legal bookkeeping obligations (legal bases: performance of a contract and legal obligation).

Support requests: if you contact us about an order we keep your message and contact details to resolve the request (legal basis: performance of a contract).

Shop analytics: we run our own privacy-first analytics on our own server. Without your consent, visits are counted using a daily-rotating anonymous identifier that cannot follow you across days, and your IP address is never stored. If you accept analytics cookies, a random visitor identifier (cookie "syh_vid") lets us recognise returning visits for up to one year (legal basis: consent). We never use third-party advertising or tracking services.

Payment data: card payments are processed by Stripe on their secure pages. Your card number never touches our server. Stripe's processing is covered by Stripe's own privacy policy.

Cookies and local storage

We use a small number of first-party cookies: "syh-locale" and "syh-currency" remember your language and currency choice (strictly functional), "syh_consent" remembers your analytics choice, and "syh_vid" (only after you accept) supports our own visit statistics. Your shopping cart and wishlist are stored only in your browser's local storage and are not sent to us until you place an order.

How long we keep data

Order records are kept for as long as required by tax law (typically 6 years in the UK). Support messages are kept while the request is open and for a reasonable period after. Analytics events are aggregate statistics tied to an anonymous or random identifier, never to your name.

Who we share data with

Only what is needed to run the shop: Stripe (payments), our email provider (transactional emails such as order confirmations), and the postal carrier delivering your parcel (name, address, phone where required). We never sell personal data.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to or restrict processing, and withdraw analytics consent at any time. Email [email protected] and we will respond within one month. You also have the right to complain to your data-protection authority (in the UK, the ICO).