Privacy Policy

Effective 23 July 2026. This notice explains how BRAVO BRV LIMITED collects, uses, shares and protects personal information for the Stefanel UK store.

BRAVO BRV LIMITED, trading as Stefanel UK, is the controller for the personal information described in this notice.

Company number: 15692889. Registered office: Apartment 1219 Nobel Way, Uhaus Vita Living East, Manchester, England, M1 7FY. Privacy enquiries can be sent to info@stefanel.uk or made by telephone on +44 7831 006609.

Identity and contact details: name, billing and delivery address, email address and telephone number.
Order and account details: products purchased, order value, returns, refunds, delivery status, account profile and saved addresses. For a gift card sent to someone else, this also includes the recipient's name and email address, your message and any scheduled send date.
Payment-related details: payment status, method and transaction references. Shopify and its payment partners process full card or wallet credentials; we do not receive your complete card number or security code.
Communications: messages, return reasons, complaints, customer-service records and newsletter choices.
Technical and usage details: IP address, browser and device information, security logs and interactions needed to operate and protect the site.
Local shopping data: basket and wishlist contents stored in your browser. This remains on your device unless you use checkout or another feature that sends it to us or Shopify.

We receive information directly from you when you order, use Shopify's passwordless customer account, submit a return, join the newsletter, contact us or complete another form.

We also receive relevant order, payment, fraud-screening, fulfilment and delivery updates from Shopify, payment providers, Royal Mail and service providers acting on our behalf.

To take and fulfil orders, process payments, deliver goods or a digital gift card to your chosen recipient, provide account features and handle returns or refunds — necessary for our contract with you or steps you ask us to take before a contract.
To meet legal duties, including tax, accounting, product-safety, consumer-law and regulatory obligations — necessary to comply with law.
To answer enquiries and resolve complaints — contract where related to an order, and otherwise our legitimate interest in providing customer care.
To prevent fraud, misuse and security incidents, maintain records and establish or defend legal claims — our legitimate interests in protecting customers and the business, and legal obligation where applicable.
To improve the store and understand service performance using proportionate operational information — our legitimate interests, provided your interests and rights do not override them.
To send email marketing or personalise offers — your consent where required. You can withdraw consent at any time without affecting earlier lawful use.

We do not sell your personal information.

Our catalogue uses Shopify's Storefront services. Checkout, passwordless customer accounts, order status and self-serve return requests are hosted securely by Shopify. Customers sign in with the email used at checkout and a one-time verification code; no password is required.

Shopify and payment providers may act as our processors for store services and may also process certain information for their own legal or security purposes. Their interfaces display any additional privacy information that applies to those services.

Shopify and payment providers for checkout, payment, customer accounts, order management, fraud checks and returns.
Royal Mail and fulfilment partners for dispatch, delivery, tracking, return labels and claims.
Hosting, database, email, communications, customer-support, security and professional-service providers that need the information to provide services to us.
Regulators, law enforcement, courts, tax authorities and advisers where disclosure is required or reasonably necessary to protect legal rights.
A buyer, investor or successor if the business or its assets are reorganised or transferred, subject to appropriate confidentiality and data-protection safeguards.

Some providers may process personal information outside the United Kingdom. Where UK data-protection law requires a safeguard, we use an adequacy regulation, the UK International Data Transfer Agreement or Addendum, or another lawful transfer mechanism, together with supplementary protections where appropriate. You may contact us for more information about the relevant safeguards.

We keep personal information only as long as reasonably necessary for the purpose collected, including legal, accounting, fraud-prevention and dispute requirements. Typical periods are:

order, payment, refund and accounting records: generally six years after the relevant financial year or transaction;
customer-service and complaint records: for the life of the enquiry and normally up to two years after closure, longer where a claim or legal duty requires it;
newsletter records: until you unsubscribe or we stop the list, with a minimal suppression record retained to honour your opt-out;
security and operational logs: for the shortest practical period, normally up to 12 months unless an incident requires longer retention;
Shopify customer profiles: while the account is active and thereafter as needed for orders, legal duties or deletion requests.

We may anonymise information so it no longer identifies you and use that anonymous information for statistical purposes.

You can unsubscribe from marketing using the link in an email or by contacting us. Withdrawing marketing consent does not stop necessary service messages about an order, return, security issue or policy change.

Consent to personalised offers is optional and is separate from consent to receive general news and promotions.

Depending on the circumstances, UK data-protection law may give you rights to:

be informed and obtain access to your personal information;
correct inaccurate or incomplete information;
request erasure or restriction of use;
object to processing based on legitimate interests and object at any time to direct marketing;
receive certain information in a portable format;
withdraw consent; and
ask for safeguards around solely automated decisions that have legal or similarly significant effects.

These rights are not absolute and lawful exceptions may apply. To make a request, email info@stefanel.uk. We may ask for proportionate information to confirm your identity and will normally respond within one month.

We use technical and organisational safeguards designed to protect information, restrict access and reduce accidental loss, misuse or unauthorised disclosure. No internet service is completely risk-free.

The store is not directed to children and online purchases must be made by an adult. Please contact us if you believe a child has provided personal information without appropriate authority.

Please raise a privacy concern with us first. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.

See our Cookie Policy for details of browser storage used by this storefront and the Shopify services reached from it.

We may update this notice when our services, providers or legal obligations change. The effective date at the top identifies the current version. Material changes will be highlighted where appropriate.