Privacy Policy

Privacy Policy — Tibetan Soul

Effective date: 17 May 2026 Last updated: 17 May 2026

This Privacy Policy describes how Tibetan Soul ("we", "us", or "our") collects, uses, and shares personal information when you visit, interact with, or make a purchase from tibetan-soul.co.uk (the "Site").

1. Information We Collect

1.1 Information you provide to us

When you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including:

Your name
Billing and shipping address
Email address
Phone number (optional)
Payment information (credit card numbers, PayPal account)
Order history and preferences

We refer to this information as "Order Information".

1.2 Information we collect automatically

When you browse the Site, we automatically collect certain information about your device and your interaction with the Site:

IP address
Browser type and version
Operating system
Referring URL and pages visited
Time and date of access
Cookies and similar tracking technologies

We refer to this information as "Device Information".

1.3 Marketing communications

If you subscribe to our newsletter or accept marketing communications, we collect your email address and, where applicable, your phone number to send you product updates, promotions, and brand content.

2. How We Use Your Information

We use the personal information we collect to:

Fulfil orders placed through the Site (including processing payments, arranging shipping, providing invoices, and managing returns)
Communicate with you about your order, account, or customer service requests
Send marketing communications (with your consent, where required by law)
Detect and prevent fraud, abuse, or illegal activity
Improve and personalise the Site experience
Comply with our legal obligations
Conduct analytics to understand how our customers interact with our Site

3. Legal Basis for Processing (UK & EU GDPR)

If you are based in the United Kingdom or the European Economic Area, we process your personal information based on the following legal grounds:

Performance of a contract: to fulfil your orders and provide our services
Consent: for marketing communications and non-essential cookies (you may withdraw consent at any time)
Legitimate interests: to improve our products and services, prevent fraud, and ensure security
Legal obligation: to comply with applicable tax, accounting, and consumer protection laws

4. Sharing Your Personal Information

We share your personal information with third parties to help us provide our services. These include:

Shopify — our e-commerce platform host. Learn more about how Shopify uses your personal information at: https://www.shopify.com/legal/privacy
Payment processors (Stripe, PayPal, etc.) — to process your payments securely
Shipping carriers — to deliver your orders
Email marketing providers — to send you communications (with your consent)
Analytics providers (Google Analytics, Meta Pixel) — to understand how customers use our Site
Advertising platforms (Meta, Google, Pinterest) — to deliver targeted advertising
Customer service tools — to respond to your enquiries

We may also disclose your personal information to comply with applicable laws and regulations, respond to a subpoena, search warrant, or other lawful request, or otherwise protect our rights.

5. International Data Transfers

Some of our service providers (including Shopify, Stripe, Google, Meta, and Pinterest) may store or process your data outside the United Kingdom and the European Economic Area, including in the United States. In these cases, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO) or the European Commission.

6. Behavioural Advertising

We use your Personal Information to provide you with targeted advertisements or marketing communications that we believe may be of interest to you. For example:

We use Google Analytics to help us understand how customers use the Site. Read more at: https://policies.google.com/privacy
We use Meta (Facebook & Instagram) advertising tools. Opt out at: https://www.facebook.com/settings/?tab=ads
We use Pinterest advertising tools. Opt out at: https://policy.pinterest.com/en-gb/privacy-policy
We use Google advertising tools. Opt out at: https://adssettings.google.com

You can opt out of targeted advertising more broadly at: http://optout.aboutads.info

7. Cookies

We use cookies and similar tracking technologies on the Site. Cookies are small data files placed on your device that allow us to recognise you, remember your preferences, and understand how you use our Site.

You can manage your cookie preferences at any time via our cookie consent banner or through your browser settings. Disabling cookies may impact the functionality of the Site.

Categories of cookies we use:

Essential cookies — required for the Site to function (login, shopping cart, checkout)
Analytics cookies — help us understand traffic and Site usage
Marketing cookies — used to deliver personalised ads
Preference cookies — remember your settings (language, currency)

8. Data Retention

When you place an order through the Site, we will retain your Order Information for our records unless and until you ask us to erase it, generally for a period of 7 years (in line with UK tax and accounting obligations).

Marketing data is retained until you unsubscribe or withdraw your consent.

9. Your Rights (UK & EU GDPR)

If you are a resident of the United Kingdom or the European Economic Area, you have the following rights regarding your personal information:

Right of access — you can request a copy of the personal information we hold about you
Right to rectification — you can ask us to correct inaccurate or incomplete information
Right to erasure ("right to be forgotten") — you can ask us to delete your personal information
Right to restrict processing — you can ask us to limit how we use your data
Right to data portability — you can request your data in a structured, machine-readable format
Right to object — you can object to certain types of processing (e.g., direct marketing)
Right to withdraw consent — at any time, where processing is based on consent
Right to lodge a complaint with the UK Information Commissioner's Office (ICO): https://ico.org.uk

To exercise any of these rights, contact us at contact@tibetan-soul.co.uk.

10. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), including:

The right to know what personal information we collect, use, and share
The right to request deletion of your personal information
The right to opt out of the sale of your personal information (we do not sell personal information)
The right to non-discrimination for exercising your CCPA rights

To exercise these rights, contact us at contact@tibetan-soul.co.uk.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include:

Encryption of payment data (PCI-DSS compliance through Shopify)
HTTPS encryption across the entire Site
Restricted access to personal data on a need-to-know basis
Regular security reviews and updates

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

12. Children's Privacy

Our Site is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the updated version on this page with a revised "Last updated" date. We encourage you to review this Privacy Policy periodically.

14. Contact Us

For more information about our privacy practices, to ask questions, or to file a complaint, please contact us:

Tibetan Soul Email: contact@tibetan-soul.co.uk Website: https://tibetan-soul.co.uk

This Privacy Policy was last updated on 17 May 2026.