top of page

Privacy Policy

Who we are and how we use your data

Last updated: 27 October 2026

1. Who we are

Nellie Rae is a trading name of Lucas Silva de Souza, a sole trader based in Brazil ("we", "us"). We are the controller of the personal data described in this policy. Contact for privacy questions: nellierae.uk@gmail.com.

2. What data we collect

Order data: your name, delivery address, billing address, email address and phone number (if you give one), and the items you order. Payment data: card payments are handled by our payment provider; we do not see or store your full card number. Messages: what you send us when you contact customer care. Website data: your IP address, device and browser information, and pages you visit, some of it collected with cookies (see section 7). Marketing data: your email address if you sign up to our newsletter.

3. Why we use it and our legal basis

Take, deliver and manage your order, handle returns and refunds: contract (Art. 6(1)(b) UK GDPR). Take payment and prevent fraud: contract and legitimate interests (Art. 6(1)(b), (f)). Answer your messages: legitimate interests (Art. 6(1)(f)). Keep records for tax and accounting: legal obligation (Art. 6(1)(c)). Send marketing emails: consent (Art. 6(1)(a)); you can withdraw it at any time. Non-essential cookies and ad measurement: consent (Art. 6(1)(a)).

4. Who we share it with

We share only what is needed with: Wix.com, which hosts this website and our store; Stripe (and, where used, other payment providers) to process card payments; our suppliers and delivery partners, who receive your name, delivery address and phone number to send your order (today these are marketplace sellers on AliExpress, with orders placed through DSers, and their carriers); Meta (Facebook and Instagram), only if you accept advertising cookies, to measure and improve our ads; accountants, advisers and authorities where the law requires it. We do not sell your personal data.

Transfers, retention, cookies and your rights

5. Transfers outside the UK

Some of these providers, and we ourselves, are outside the UK, including in China (our suppliers) and Brazil (where we operate from). Where we transfer data, we use the safeguards the UK GDPR requires.

6. How long we keep it

Order and accounting records: 6 years, as tax rules require us to keep records. Customer care messages: 2 years after the last message. Newsletter: until you unsubscribe. Cookie data: see the cookie banner for each cookie's lifetime.

7. Cookies

We use cookies that are strictly necessary for the shop (basket, checkout, security). We only use analytics or advertising cookies if you accept them in the cookie banner. You can change your choice at any time by clearing this site's cookies in your browser, which brings the banner back. Declining is as easy as accepting.

8. Your rights

Under the UK GDPR you can ask us to: access your data; correct it; delete it; restrict or object to how we use it; move it to another provider; and withdraw consent at any time. To use any of these rights, email nellierae.uk@gmail.com. We reply within one month. You can also complain to the UK Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint or 0303 123 1113. We would appreciate the chance to help you first.

9. Changes

We may update this policy. The date at the top shows the latest version.

bottom of page