Privacy policy
PRIVACY POLICY
Last updated: 16 July 2026
1. WHO WE ARE
My Charm Bar is operated by [INSERT FULL LEGAL NAME], trading as My Charm Bar.
For the purposes of UK data protection law, [INSERT FULL LEGAL NAME] is the data controller responsible for the personal information described in this Privacy Policy.
Our contact details are:
Trading name: My Charm Bar
Legal owner: [INSERT FULL LEGAL NAME]
Email: thecharmbarcompanyuk@gmail.com
Address: [CONFIRM AND INSERT BUSINESS CONTACT ADDRESS]
This Privacy Policy explains how we collect, use, store and share personal information when you:
• Visit mycharmbar.com
• Create or manage an account
• Place or discuss an order
• Participate in one of our TikTok Lives
• Contact us through email, social media or another channel
• Submit a return, refund or product issue
• Leave a review
• Otherwise interact with My Charm Bar
Our online store is hosted and powered by Shopify.
2. PERSONAL INFORMATION WE COLLECT
The personal information we collect depends on how you interact with us.
We may collect the following categories of information.
Identity and contact information
This may include:
• Your name
• Billing address
• Delivery address
• Email address
• Telephone number
• Social media username or TikTok username
Order and transaction information
This may include:
• Products viewed or ordered
• Bracelet, necklace, badge, base or charm selections
• Personalisation instructions
• TikTok Live order selections
• Shopping basket information
• Order number
• Order date
• Delivery method
• Payment status
• Discounts used
• Returns, refunds, replacements or cancellations
• Previous transactions with us
Payment information
Payments are processed by Shopify and our payment providers.
They may collect payment card details, bank information and billing information directly from you.
My Charm Bar does not normally receive or store your complete payment card number. We generally receive limited payment information such as:
• Payment confirmation
• Payment method
• Billing details
• Transaction reference
• Payment status
• Limited card details, such as the final digits of the card
Account information
Where customer accounts are available, this may include:
• Account username
• Email address
• Saved addresses
• Order history
• Account preferences
• Account security information
Passwords and other authentication information are handled through Shopify or the relevant account provider.
TikTok Live and social media information
When you interact with us through TikTok or another social media platform, we may collect:
• Your public username
• Comments or messages you send
• Product and charm selections
• Screenshots or notes needed to match your selection to an order
• Information you voluntarily include in messages
• Records of customer service conversations
Information posted publicly during a live stream may also be visible to TikTok, other viewers and users of that platform.
Customer service, return and claim information
When you contact us about an order, return, refund, damaged item, missing charm or other issue, we may collect:
• Your order number
• Your account and contact details
• Your description of the issue
• Photographs or videos of the item
• Photographs of packaging and delivery labels
• Correspondence between you and My Charm Bar
• Information relating to a refund, replacement or dispute
We use this information to investigate and resolve the matter, maintain appropriate business records and protect against fraudulent claims.
Reviews and other content
When you submit a review, photograph, comment or other content, we may collect:
• Your name or chosen display name
• Review rating
• Review text
• Photographs or videos
• The product purchased
• Information showing whether the review relates to a verified order
Some review information may be displayed publicly on our website.
Device, website and usage information
When you visit our website, we and our service providers may collect:
• IP address
• Browser type
• Device type
• Operating system
• Approximate location derived from your IP address
• Website pages viewed
• Links or buttons selected
• Products viewed
• Basket activity
• Referring website
• Date and time of visits
• Cookie and similar technology identifiers
Marketing information
This may include:
• Whether you have agreed to receive marketing
• Your marketing preferences
• Whether you opened or interacted with a message
• Products you viewed, purchased or placed in your basket
• Your cookie and advertising preferences
Fraud and security information
We may collect or generate information used to:
• Verify transactions
• Protect customer accounts
• Identify suspicious orders
• Prevent fraud
• Protect our website and business
• Investigate misuse of our services
We do not intentionally ask you to provide sensitive or special-category personal information. Please do not send information about your health, religion, ethnicity, political opinions or other sensitive matters unless it is genuinely necessary.
3. HOW WE COLLECT PERSONAL INFORMATION
We may collect personal information:
• Directly from you when you order, contact us, create an account or make a return
• Through comments and messages during TikTok Lives or other social media interactions
• Automatically when you visit our website
• Through cookies, pixels and similar technologies
• From Shopify and other companies that provide services to us
• From payment providers
• From delivery and tracking providers
• From review platforms
• From fraud-prevention and security providers
• From social media platforms where you interact with us
• From publicly available sources where legally permitted
4. HOW AND WHY WE USE YOUR INFORMATION
UK data protection law requires us to have a lawful basis for using personal information.
The lawful bases we rely on are explained below.
Processing and fulfilling orders
We use personal information to:
• Accept and process orders
• Take and confirm payments
• Match TikTok Live selections with website orders
• Assemble selected products
• Deliver orders
• Provide order and delivery updates
• Manage customer accounts
• Process returns, refunds and replacements
Our lawful basis is that the processing is necessary to perform our contract with you or to take steps requested by you before entering into a contract.
Customer service
We use personal information to:
• Answer questions
• Respond to messages
• Resolve order problems
• Investigate damaged, missing, incorrect or faulty items
• Handle complaints
• Arrange repairs, replacements or refunds
Our lawful bases are:
• Performance of our contract with you
• Compliance with our legal obligations
• Our legitimate interests in providing customer service, maintaining accurate records and resolving disputes
Accounting, taxation and legal compliance
We use and retain certain personal information to:
• Maintain accounting and transaction records
• Meet taxation requirements
• Comply with consumer, data protection and other legal obligations
• Respond to valid requests from regulators, courts or law enforcement
• Establish, exercise or defend legal claims
Our lawful basis is compliance with our legal obligations. Where applicable, we may also rely on our legitimate interests in protecting and administering our business.
Fraud prevention and website security
We use personal information to:
• Identify suspicious transactions
• Protect customer accounts
• Prevent fraud and misuse
• Secure our website, systems and business
• Investigate suspected illegal or malicious conduct
Our lawful bases are:
• Our legitimate interests in protecting customers and our business
• Compliance with legal obligations where applicable
Improving our products and services
We may use order information, customer feedback, website activity and aggregated information to:
• Understand which products customers are interested in
• Improve our website
• Improve our customer service
• Review product quality
• Develop new products
• Understand how customers use the store
Our lawful basis is our legitimate interest in understanding and improving our products, website and customer experience.
Where non-essential cookies or similar technologies are involved, we will obtain consent where required.
Marketing communications
We may send marketing emails or messages where:
• You have given us consent; or
• We are otherwise permitted to do so under applicable electronic marketing rules, including where the existing-customer exemption applies
You can unsubscribe at any time by:
• Selecting the unsubscribe link in a marketing email
• Changing your available marketing preferences
• Emailing thecharmbarcompanyuk@gmail.com
Withdrawing from marketing does not stop us from sending necessary service communications about your orders, account, delivery, returns or legal matters.
Where consent is required, consent is our lawful basis.
Where the law allows us to market to an existing customer without separate consent, our lawful basis is our legitimate interest in promoting relevant My Charm Bar products. You retain the right to object at any time.
Advertising and personalisation
With your consent where required, we and our advertising partners may use cookies, pixels and similar technologies to:
• Measure advertising performance
• Show relevant advertisements
• Understand whether an advertisement led to a visit or purchase
• Personalise website or advertising content
• Build audiences for advertising campaigns
You can manage these choices through the cookie-preference controls available on our website.
Reviews
We may use personal information to:
• Invite customers to leave reviews
• Verify that a review relates to an order
• Publish submitted reviews
• Respond to reviews
• Identify fraudulent or abusive reviews
Our lawful basis is our legitimate interest in obtaining genuine customer feedback, helping customers make informed choices and improving our products.
Where consent is required for a particular use, we will rely on consent.
5. COOKIES AND SIMILAR TECHNOLOGIES
Our website uses cookies and similar technologies.
Some cookies are necessary for the website to function. These may be used to:
• Keep the website secure
• Maintain your shopping basket
• Process checkout
• Remember essential settings
• Prevent fraud
• Provide requested website functions
We may also use optional cookies for:
• Analytics
• Advertising
• Marketing
• Personalisation
• Measuring website performance
Where required, optional cookies will not be used until you provide consent.
You can accept, reject or change your choices through the cookie banner or Cookie Preferences link available on the website.
Blocking certain cookies may affect how some website features operate.
6. HOW WE SHARE PERSONAL INFORMATION
We only disclose personal information where it is reasonably necessary for the purposes described in this Privacy Policy.
We may share information with the following categories of recipient.
Shopify
Our online store is hosted by Shopify.
Shopify processes information relating to:
• Website visits
• Customer accounts
• Orders
• Checkout
• Payments
• Fraud prevention
• Store analytics
• Customer privacy settings
• Other Shopify services enabled on our store
More information about Shopify’s handling of customer personal information is available at:
https://privacy.shopify.com/en
Payment providers
Payment providers process payments, refunds, payment verification and fraud checks.
Delivery and tracking providers
We share delivery information with postal services, couriers and tracking providers so that they can deliver and track orders.
Website, technology and cloud providers
These companies help us operate, secure, maintain and host our website, email, files and business systems.
Review providers
Where we use a review platform, it may process order, email and review information so that customers can receive review invitations and submit verified reviews.
Marketing, analytics and advertising providers
Subject to your consent where required, these providers may help us:
• Analyse website use
• Measure advertising
• Operate advertising campaigns
• Send marketing communications
• Personalise advertisements or content
Professional advisers
We may disclose information to accountants, insurers, legal advisers and other professional advisers where reasonably necessary.
Government authorities and legal recipients
We may disclose personal information where required by law or where reasonably necessary to:
• Comply with a lawful request
• Enforce our terms and policies
• Protect our rights
• Prevent fraud or crime
• Establish, exercise or defend legal claims
• Protect customers or other people
Business transfers
If My Charm Bar is sold, reorganised or transferred, personal information may be disclosed to professional advisers, prospective buyers or the new owner where legally permitted.
We require service providers processing information on our behalf to handle it securely and only for authorised purposes.
7. SHOPIFY NETWORK SERVICES
Shopify may provide features that use information from interactions with our store and other Shopify merchants to improve services, security, analytics, personalisation or advertising.
Where Shopify independently determines how personal information is used for these services, Shopify may act as a separate data controller.
You can find further information about Shopify’s use of customer information and available privacy rights at:
https://privacy.shopify.com/en
The exact Shopify features used by our store may depend on the privacy and Shopify Network Intelligence settings enabled in our Shopify account.
8. INTERNATIONAL TRANSFERS
Some of our service providers may process or store personal information outside the United Kingdom.
Where personal information is transferred outside the UK, we take steps to ensure that the transfer is legally protected.
Depending on the circumstances, this may include:
• Transferring information to a country covered by UK adequacy regulations
• Using the UK International Data Transfer Agreement
• Using the UK Addendum to approved contractual clauses
• Relying on another legally permitted transfer safeguard or exception
You may contact us for further information about the safeguards used for relevant international transfers.
9. HOW LONG WE KEEP PERSONAL INFORMATION
We do not keep personal information for longer than reasonably necessary.
Our usual retention approach is as follows:
Order, payment and accounting records
We normally keep order, transaction, payment and accounting records for up to six years after the end of the relevant accounting period, or for longer where required by law.
Customer service and return records
We normally retain customer-service, return, refund and complaint records for up to six years where necessary to maintain transaction records, resolve disputes and protect legal rights.
Photographs and evidence submitted for product claims
We normally retain photographs, videos and other evidence for as long as necessary to investigate and resolve the claim.
We may retain them for longer where reasonably necessary for fraud prevention, payment disputes, complaints or legal claims.
Customer accounts
We retain account information while the account remains active and afterwards for as long as reasonably necessary to meet legal obligations, resolve disputes and prevent fraud.
Marketing information
We retain marketing information until you unsubscribe, withdraw consent or object.
We may retain limited suppression information afterwards so that we can record and respect your request not to receive marketing.
Reviews
Published reviews may remain visible while the relevant product or website remains active.
We may retain records required to verify the review, handle disputes or prevent fraudulent reviews.
Website and technical information
Retention periods for cookie, analytics, security and technical information depend on:
• The type of technology used
• The relevant provider’s settings
• Security requirements
• Whether consent has been withdrawn
• Our legitimate operational needs
We periodically review the information we hold and delete or anonymise it when it is no longer needed.
10. SECURITY
We use reasonable technical and organisational measures designed to protect personal information from:
• Unauthorised access
• Accidental loss
• Improper use
• Alteration
• Disclosure
• Destruction
Access to personal information is limited to people and providers who reasonably need it for authorised business purposes.
No online system or method of transmission is completely secure. You should avoid sending complete payment card information, passwords or other highly sensitive information through ordinary email or social media messages.
11. YOUR DATA PROTECTION RIGHTS
Depending on the circumstances, UK data protection law may give you the following rights:
Right of access
You may ask whether we process your personal information and request a copy of it.
Right to rectification
You may ask us to correct inaccurate or incomplete personal information.
Right to erasure
You may ask us to delete personal information in circumstances where the right applies.
Right to restrict processing
You may ask us to restrict how we use personal information in certain circumstances.
Right to data portability
You may ask to receive certain personal information in a structured, commonly used and machine-readable format, or ask us to transfer it to another organisation where technically feasible.
Right to object
You may object to processing based on legitimate interests.
You have an absolute right to object to personal information being used for direct marketing.
Right to withdraw consent
Where we rely on consent, you may withdraw it at any time.
Withdrawal does not affect processing that took place lawfully before consent was withdrawn.
Rights relating to automated decisions
Where applicable, you may have rights relating to decisions made solely through automated processing that produce legal or similarly significant effects.
We may use automated tools to assist with fraud and security checks. Where legally required, appropriate safeguards and opportunities for human review will be provided.
Exercising your rights
To exercise a right, email:
thecharmbarcompanyuk@gmail.com
Please explain which right you wish to exercise and provide enough information for us to identify the relevant records.
We may request reasonable information to confirm your identity. This is intended to prevent personal information being disclosed to the wrong person.
Data protection rights are not absolute and certain legal exemptions may apply.
We will respond without undue delay and normally within one month. Where a request is particularly complex, the legal response period may be extended and we will explain this to you.
12. CHILDREN’S INFORMATION
Our website is not intended for children under 13 to use independently.
A parent or guardian should place an order or contact us on behalf of a child under 13.
We do not knowingly collect personal information directly from a child under 13 where parental consent is legally required.
If you believe that a child has provided personal information to us improperly, please contact us so that we can investigate and take appropriate action.
13. DATA PROTECTION COMPLAINTS
If you are concerned about how we have collected or used your personal information, please contact us first at:
thecharmbarcompanyuk@gmail.com
Please include:
• Your name
• Your contact details
• A description of the issue
• The outcome you are seeking
• Any relevant order number or correspondence
We will:
• Provide a clear way for you to submit the complaint
• Acknowledge the complaint within 30 days
• Investigate the complaint appropriately
• Keep you informed where reasonably necessary
• Communicate the outcome of our investigation
You also have the right to complain to the Information Commissioner’s Office.
Information Commissioner’s Office
Website: https://ico.org.uk/
14. THIRD-PARTY WEBSITES AND SOCIAL MEDIA
Our website may link to websites, services and social media platforms operated by other organisations.
Those organisations control their own privacy practices. We are not responsible for how an unrelated third party collects or uses information after you leave our website.
You should review the relevant third party’s privacy notice before providing personal information.
15. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy to reflect:
• Changes in our business
• New products or services
• Changes to Shopify or other providers
• Changes to legal requirements
• Changes to how we use personal information
The revised policy will be published on our website with an updated revision date.
Where required by law, we will provide additional notice of significant changes.
16. CONTACT US
Questions, data protection requests and complaints should be sent to:
My Charm Bar
Operated by: [INSERT FULL LEGAL NAME]
Email: thecharmbarcompanyuk@gmail.com
Address: [CONFIRM AND INSERT BUSINESS CONTACT ADDRESS]