Last updated: 26 July 2026

ESSILRO (“we”, “us” or “our”) is the controller of the personal information described in this Privacy Policy. This policy explains how we collect, use, disclose and protect personal information when you visit essilro.com, place an order, create an account, subscribe to marketing or contact us.

Information we collect

Depending on how you interact with us, we may collect:

• identity and contact information, including your name, email address, telephone number, billing address and delivery address;
• order and transaction information, including products viewed or purchased, returns, refunds and correspondence;
• account information and preferences;
• payment-related information. Payments are processed by Shopify and selected payment providers; we do not receive your full payment-card number;
• device, browser, IP address, cookie, usage and security information; and
• marketing preferences and responses.

How we use personal information

• to take payment, fulfil and deliver orders and provide order updates;
• to administer accounts, returns, refunds and customer support;
• to prevent fraud, protect the website and comply with legal obligations;
• to improve our website, services and customer experience;
• to send marketing where you have consented or where otherwise permitted by law; and
• to establish, exercise or defend legal claims.

Our lawful bases

Under UK data protection law, we rely on one or more lawful bases depending on the purpose: performance of a contract, compliance with a legal obligation, our legitimate interests in operating and protecting the business and improving services, and consent where required. You can withdraw consent at any time without affecting earlier lawful processing.

How we receive information

We collect information directly from you, automatically through the website and cookies, and from service providers such as Shopify, payment processors, delivery partners, fraud-prevention providers and analytics or marketing providers.

Who we share information with

We share only what is reasonably necessary with Shopify, payment processors, fulfilment and delivery partners, technology and hosting providers, professional advisers, fraud-prevention and security providers, analytics and marketing providers, regulators, law-enforcement bodies and parties involved in a corporate transaction. These recipients may act as processors or independent controllers under their own privacy notices.

Shopify

Our store is hosted by Shopify. Information submitted through the store is processed by Shopify to provide and improve its services. Read the Shopify Consumer Privacy Policy or use the Shopify Privacy Portal.

International transfers

Some service providers may process information outside the United Kingdom. Where required, we use recognised safeguards such as adequacy regulations or approved contractual protections.

Retention

We keep personal information only for as long as reasonably necessary for the purpose collected, including to fulfil orders, maintain records required by tax and consumer law, resolve disputes and protect legal rights. Retention periods vary according to the information and applicable obligations.

Cookies and similar technologies

We and our providers use cookies and similar technologies to operate the store, remember preferences, understand website use, prevent fraud and, where permitted, support analytics and marketing. You can manage non-essential cookies through the consent controls provided on the website and through your browser. Disabling necessary cookies may affect site functionality.

Marketing

You may unsubscribe from marketing emails at any time using the link in the message or by contacting us. We may still send service communications about an order or account. You have an absolute right to object to direct marketing.

Your rights

Subject to applicable law, you may have rights to access, correct or erase your personal information; restrict or object to processing; receive portable information; withdraw consent; and complain to a supervisory authority. We may need to verify your identity before acting on a request.

Security

We use reasonable organisational and technical measures designed to protect personal information. No method of transmission or storage is completely secure, so please do not send full payment-card details or other unnecessary sensitive information by email.

Children

ESSILRO is intended only for adults aged 18 and over. We do not knowingly sell to or collect personal information from children through the store.

Complaints

Please contact us first so we can try to resolve your concern. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.

Changes to this policy

We may update this policy to reflect operational, legal or regulatory changes. The current version and its update date will be published here.

Contact us

For privacy questions or to exercise your rights, email info@essilro.com.