Privacy policy

Privacy Policy

Last updated: 02 May 2026

SIACHA respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and share your personal information when you visit our website, place an order, contact us or otherwise interact with SIACHA.

For the purposes of applicable data protection law, SIACHA is the controller of your personal information.

1. Information We Collect

Depending on how you use our website and services, we may collect the following information:

Contact information, such as your name, email address, telephone number, billing address and delivery address.
Order and transaction information, such as the products you purchase, return or cancel, order history, payment status and transaction details.
Payment information, such as your chosen payment method and limited payment information provided to us by our payment processors. Full payment card details are generally processed securely by our payment providers rather than stored directly by SIACHA.
Communications, including information you provide when you contact us regarding an order, return, complaint or other enquiry.
Device and technical information, such as your IP address, browser type, device information and information about how you interact with our website.
Marketing preferences, including whether you have chosen to receive marketing communications from us.

We may also receive information from service providers that help us operate our website and fulfil your orders, including Shopify, payment processors and delivery providers.

2. How We Use Your Information

We use your personal information where necessary to operate SIACHA and provide our services, including to:

process and fulfil your orders;
take and verify payments;
arrange delivery and returns;
communicate with you about your order;
respond to customer service enquiries;
prevent fraud and protect the security of our website;
maintain business, financial and transaction records;
comply with our legal and regulatory obligations;
improve our website, products and customer experience; and
send you marketing communications where permitted by law.

We do not use your personal information for purposes that are incompatible with those described in this Privacy Policy unless permitted or required by law.

3. Our Legal Bases for Using Your Information

Under UK data protection law, we must have a lawful basis for processing your personal information.

Depending on the circumstances, we may rely on:

Contract — where processing is necessary to fulfil an order, process a return or otherwise provide products or services you have requested.

Legal obligation — where we need to process or retain information to comply with legal, tax, accounting or regulatory requirements.

Legitimate interests — where processing is reasonably necessary for our business interests, such as preventing fraud, securing our website, improving our services and managing customer enquiries, provided those interests do not override your rights and freedoms.

Consent — where we ask for your consent, including for certain forms of marketing or optional tracking where required by law. Where we rely on consent, you can withdraw it at any time.

4. Marketing

If you choose to receive marketing communications from SIACHA, we may use your contact information to send you news, product updates, offers and other promotional communications.

You can unsubscribe from marketing emails at any time by using the unsubscribe option included in our emails.

Unsubscribing from marketing will not prevent us from sending you essential service communications, such as order confirmations, delivery updates or information about a return.

5. Cookies and Similar Technologies

Our website may use cookies and similar technologies to operate properly, remember preferences, understand how visitors use the site and, where applicable, support advertising and marketing.

Where required by law, non-essential cookies or similar technologies will only be used with your consent.

You can manage available cookie choices through the cookie controls provided on our website.

6. How We Share Your Information

We do not sell your personal information.

We may share personal information where reasonably necessary with trusted third parties that help us operate SIACHA, including:

Shopify, which hosts and supports our online store;
payment processors and payment service providers;
delivery, courier and fulfilment providers;
IT, hosting, security and technical service providers;
customer service providers;
professional advisers, such as accountants or legal advisers; and
government, regulatory or law enforcement authorities where required by law.

These organisations may process personal information on our behalf or, in some circumstances, as independent controllers under their own privacy policies.

We may also disclose information where necessary to protect SIACHA, our customers or others, investigate fraud or unlawful activity, establish or defend legal claims, or comply with a legal obligation.

7. Shopify

Our online store is powered by Shopify.

Shopify processes certain personal information when you access and use our store so that it can provide its ecommerce platform and related services.

Information submitted through our store may therefore be processed by Shopify and its service providers.

Shopify may process certain information independently for its own purposes in accordance with its own privacy terms. You can find further information through Shopify's Consumer Privacy Policy and Privacy Portal.

8. International Transfers

Some of our service providers, including Shopify and other technology providers, may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we take steps to ensure that appropriate protections are used as required by applicable data protection law.

These protections may include transfers to countries recognised as providing an adequate level of data protection or the use of approved contractual safeguards or other lawful transfer mechanisms.

You can contact us if you would like more information about the safeguards applicable to your personal information.

9. How Long We Keep Your Information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected.

The length of time we retain information may depend on factors including:

how long you remain a customer;
whether the information is needed to fulfil an order or resolve a dispute;
fraud-prevention and security requirements;
applicable limitation periods; and
legal, accounting and tax record-keeping obligations.

When personal information is no longer required, we will delete, anonymise or otherwise securely dispose of it where appropriate.

10. Security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

You are responsible for keeping any account credentials associated with our services confidential.

11. Your Privacy Rights

Depending on applicable law and the circumstances, you may have the right to:

request access to the personal information we hold about you;
request correction of inaccurate or incomplete information;
request deletion of your personal information;
request that we restrict how your information is used;
object to certain uses of your information;
receive certain personal information in a portable format;
withdraw consent where we rely on consent to process your information; and
object to direct marketing at any time.

These rights are not absolute and may be subject to legal exceptions.

To exercise any of these rights, contact us at support@siacha.com.

We may need to request information from you to confirm your identity before completing certain requests.

12. Complaints

If you have a concern about how SIACHA handles your personal information, please contact us first so that we can try to resolve it.

You may also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's data protection regulator.

13. Children's Privacy

Our website and services are not directed at children, and we do not knowingly collect personal information from children where parental or guardian consent would be required by applicable law.

If you believe a child has provided us with personal information in circumstances where they should not have done so, please contact us.

14. Third-Party Websites

Our website may contain links to websites or services operated by third parties.

SIACHA is not responsible for the privacy practices of third-party websites. We recommend reviewing the privacy information provided by any third-party service you choose to use.