Privacy Policy

Last updated: 24 September 2026

Deqalli operates this online store and website, including all related information, content, features, tools, products and services (the "Services"), in order to provide you with our products and shopping experience.

Our store is powered by Shopify. This Privacy Policy explains how we collect, use, disclose and otherwise process your personal information when you visit or use the Services, make a purchase or other transaction, or otherwise communicate with us.

For the purposes of applicable UK data protection law, including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018, Deqalli is the controller of the personal information described in this Privacy Policy unless otherwise stated.

Please read this Privacy Policy carefully to understand how we handle your personal information.

Personal Information We Collect

When we use the term "personal information", we mean information that identifies you or relates to an identifiable individual. It does not include information that has been anonymised so that you can no longer reasonably be identified.

Depending on how you interact with our Services, we may collect or process the following categories of personal information:

• Contact information, including your name, billing address, delivery address, telephone number and email address.
• Payment and financial information, including payment method, payment confirmation, transaction information and other information required to process your payment. Payment card information may be processed directly by Shopify or our payment service providers.
• Account information, including your username, password, account preferences and settings where you create an account.
• Order and transaction information, including products that you view, add to your basket, purchase, return, exchange or cancel and information about previous transactions.
• Communications, including information you provide when contacting our customer service team or otherwise communicating with us.
• Device and technical information, including information about your device, browser, network connection, IP address and other online identifiers.
• Usage information, including information about how and when you access, use and navigate our website and Services.
• Marketing and preference information, including your marketing preferences and information about how you interact with our marketing communications where applicable.

How We Collect Personal Information

We may collect personal information:

• Directly from you, for example when you place an order, create an account, contact us or provide information through our website.
• Automatically, when you visit or use our website, including through cookies and similar technologies.
• From service providers that assist us with services such as payment processing, hosting, analytics, fulfilment, delivery and customer support.
• From business, advertising and marketing partners, where permitted by applicable law.

How We Use Your Personal Information

We may use your personal information for the following purposes:

Providing our Services

We process personal information to provide products and Services to you, including to:

• process and fulfil orders;
• process payments;
• arrange delivery;
• manage returns, exchanges and refunds;
• maintain and manage customer accounts;
• provide customer support;
• send information relating to your order or account; and
• otherwise perform our contract with you.

Marketing and Advertising

Where permitted by law, we may use personal information to send you marketing and promotional communications and to provide or measure advertising.

Where consent is required, we will request your consent before sending marketing communications. You may unsubscribe from marketing emails at any time by using the unsubscribe link included in those communications.

Unsubscribing from marketing communications does not prevent us from sending you non-marketing communications, such as order confirmations, delivery updates or messages concerning your account.

Security and Fraud Prevention

We may process personal information to protect our customers and business, including to detect, investigate and prevent fraud, unauthorised transactions, security incidents or other unlawful or harmful activity.

Customer Service and Communication

We use personal information to respond to enquiries, provide customer support and maintain our relationship with you.

Legal and Regulatory Obligations

We may process personal information where necessary to comply with applicable laws, regulations, legal processes or requests from competent authorities, and to establish, exercise or defend legal claims.

Our Lawful Bases for Processing

Under UK data protection law, we must have a lawful basis for processing your personal information.

Depending on the circumstances, we may rely on:

• Contract – where processing is necessary to enter into or perform our contract with you, such as processing your order and arranging delivery.
• Legitimate interests – where processing is necessary for our legitimate business interests and those interests are not overridden by your rights and interests, for example fraud prevention, website security, improving our Services and certain forms of marketing.
• Consent – where you have given us permission to process information for a particular purpose, such as certain marketing activities or non-essential cookies where consent is required.
• Legal obligation – where processing is necessary for us to comply with a legal or regulatory obligation.

Where we rely on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Cookies and Similar Technologies

We and our service providers may use cookies and similar technologies to operate our website, remember your preferences, understand how visitors use our Services, improve our website and, where permitted, provide advertising.

Where required by UK law, non-essential cookies and similar technologies will only be used after you have provided the required consent.

You may manage your cookie choices using the cookie settings made available through our website.

How We Disclose Personal Information

We may disclose personal information to third parties where necessary for the purposes described in this Privacy Policy, including:

• Shopify, which provides our ecommerce platform and related services;
• payment service providers that process payments and help prevent fraud;
• fulfilment, logistics and shipping providers involved in preparing and delivering orders;
• IT, cloud hosting and technology providers that help operate our business;
• analytics, advertising and marketing providers, where permitted by law;
• professional advisers, such as legal, accounting or insurance advisers where necessary;
• government, regulatory or law enforcement authorities where disclosure is required or permitted by law; and
• parties involved in a business transaction, such as a merger, acquisition, restructuring or sale of all or part of our business.

We do not require third parties acting on our behalf to use your information for purposes unrelated to the services they provide to us.

Shopify

Our store is hosted by Shopify. Shopify processes personal information in connection with your access to and use of our store and provides the technology that enables us to operate our ecommerce Services.

Information you submit through our store may therefore be processed by Shopify and its service providers in countries other than the country in which you live.

Shopify may also process certain information as an independent controller for its own purposes, depending on the Shopify services and features involved.

For more information about Shopify's privacy practices, please visit Shopify's Privacy Policy.

Third-Party Websites and Services

Our Services may contain links to websites, platforms or services operated by third parties.

We are not responsible for the privacy, security or content of websites or services that we do not control. If you follow a third-party link, we recommend reviewing the privacy policy of that third party before providing personal information.

Children's Personal Information

Our Services are not intended for children, and we do not knowingly collect personal information from children where doing so would be unlawful.

If you are a parent or guardian and believe that a child has provided us with personal information inappropriately, please contact us using the details below.

Security of Your Information

We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of transmission or electronic storage is completely secure and we cannot guarantee absolute security.

How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to:

• provide our Services;
• maintain business and transaction records;
• meet tax, accounting and other legal requirements;
• resolve disputes;
• prevent fraud; and
• establish, exercise or defend legal claims.

The applicable retention period depends on the nature of the information and the purposes for which it is processed.

Your Rights Under UK Data Protection Law

Depending on the circumstances, you may have the following rights in relation to your personal information:

• Right of access – the right to request a copy of personal information we hold about you.
• Right to rectification – the right to ask us to correct inaccurate or incomplete personal information.
• Right to erasure – the right to ask us to delete personal information in certain circumstances.
• Right to restrict processing – the right to ask us to restrict how we process your information in certain circumstances.
• Right to data portability – the right, in certain circumstances, to receive personal information you provided to us in a structured, commonly used and machine-readable format and to have that information transferred to another organisation.
• Right to object – the right to object to certain processing based on legitimate interests and to object at any time to the use of your information for direct marketing.
• Right to withdraw consent – where processing is based on consent, the right to withdraw that consent at any time.
• Rights relating to solely automated decisions – where applicable, you may have rights relating to decisions made solely through automated processing that produce legal or similarly significant effects.

These rights are not absolute and may be subject to legal conditions, exemptions and limitations.

To exercise any of these rights, please contact us at info@deqalli.nl.

We may need to verify your identity before responding to a request. We will respond within the time periods required by applicable UK data protection law.

We will not discriminate against you for exercising your data protection rights.

International Transfers

Some of our service providers, technology partners, fulfilment providers or other recipients of personal information may be located outside the United Kingdom. As a result, your personal information may be transferred to, accessed from or processed in countries outside the UK.

Where UK data protection law treats such a transfer as a restricted transfer, we will take appropriate steps to ensure that the transfer is lawful.

Depending on the circumstances, these steps may include:

• transferring information to a country or organisation covered by UK adequacy regulations;
• using appropriate contractual safeguards, such as the UK International Data Transfer Agreement (IDTA) or the UK International Data Transfer Addendum to the European Commission's Standard Contractual Clauses, where applicable; or
• relying on another lawful transfer mechanism or exception permitted under UK data protection law.

Complaints

If you have concerns about how we collect or use your personal information, we encourage you to contact us first so that we can try to resolve your concern.

You also have the right to make a complaint to the UK's data protection regulator, the Information Commissioner's Office (ICO).

You can find further information about the ICO and how to make a complaint at ico.org.uk.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, Services, legal requirements or other operational reasons.

When we make changes, we will publish the updated Privacy Policy on this website and update the "Last updated" date above.

Contact

If you have any questions about this Privacy Policy, our privacy practices or would like to exercise your data protection rights, please contact us:

Email: info@deqalli.nl

For the purposes of applicable UK data protection law, Deqalli is the controller of the personal information described in this Privacy Policy unless otherwise stated.