Privacy Policy

Last updated: 28 August 2026

Ryella is a family-run UK business. This Privacy Policy explains what personal information we collect, why we use it, who we share it with and the choices available to you.

Information we collect

When you visit our website, place an order, contact us or join our email list, we may collect:

Your name, email address, telephone number, billing address and delivery address
Order, payment and transaction information
Personalisation details, such as a name, age, wording, hair colour, eye colour or chosen design
Messages and other information you provide when contacting us
Technical information such as your IP address, device, browser and website activity collected through cookies and similar technologies

Payment information is processed securely by Shopify and the payment providers available at checkout. Ryella does not receive or store your complete payment-card details.

How we use your information

We use personal information to:

Process, personalise, dispatch and deliver your order
Take payment and prevent fraud
Provide order updates and customer support
Manage returns, refunds and complaints
Maintain our business, accounting and legal records
Improve our website, products and customer experience
Send marketing emails when you have chosen to receive them

Personalisation information relating to a child is used only to create and fulfil the requested product. It is not used to market directly to children.

Our lawful reasons for using information

We process information where it is necessary to fulfil our contract with you, comply with a legal obligation, pursue our legitimate business interests or where you have given consent. You can withdraw marketing consent at any time by using the unsubscribe link in an email or contacting us.

Who we share information with

We share information only where necessary with trusted service providers, including Shopify, payment providers, Royal Mail and other delivery providers, website and technology providers, professional advisers, and authorities where required by law. These providers receive only the information needed to perform their services.

International transfers

Some service providers may process information outside the United Kingdom. Where this occurs, we rely on appropriate legal safeguards required by UK data-protection law.

How long we keep information

We keep personal information only for as long as reasonably necessary to fulfil the purposes described above, meet tax and accounting requirements, resolve disputes and comply with legal obligations. Marketing information is kept until you unsubscribe or ask us to delete it, unless we must retain limited information to record your request.

Cookies

Our website uses essential cookies to operate the storefront, basket and checkout. With your permission, it may also use analytics or marketing cookies to understand website use and improve our services. You can manage non-essential cookies through the cookie settings shown on the website and through your browser.

Your data-protection rights

Depending on the circumstances, you may have the right to ask for access to your personal information, correction of inaccurate information, deletion, restriction, portability, or to object to certain uses. You may also withdraw consent at any time where consent is the lawful basis.

You have the right to object to direct marketing at any time.

Security

We use reasonable technical and organisational measures, together with Shopify and our service providers, to protect personal information. No internet service can be guaranteed completely secure.