Privacy policy

Last Updated: August 7, 2026

Privacy Policy

This Privacy Policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, regulated by the UK Information Commissioner’s Office (ICO). It explains how Yarina (“we”, “us”, “our”) collects, uses, stores, and protects your personal data when you visit, browse, or purchase products from our website www.yarina.com, as well as your legal data rights as a UK and European Economic Area resident.
By using our website and services, you confirm that you have read and agreed to this Privacy Policy.

1. Data Controller Information

Yarina is the data controller for all personal data processed through this website, an independent online fashion retailer based in Aberdeen City, Scotland, United Kingdom.
Website: www.yarina.com
Email: hello@yarina.com
Phone: +44 7802 588946
Registered Business Address:
Yarina
Cotton Street, Aberdeen City, Scotland AB11 5EG, United Kingdom
Data Protection Enquiry: All UK GDPR subject access requests, data correction, deletion and complaint requests can be submitted via our official email address.

2. Personal Data We Collect

We only collect lawful, necessary personal data in compliance with UK GDPR Article 13 and 14, including data you actively provide and automatically collected technical data.

Data You Provide Voluntarily

Full name, email address, contact telephone number, UK billing and delivery address, Scottish/UK postcode, order purchase records, payment confirmation information, customer support messages, return and refund application details.

Transaction & Order Data

When completing checkout, we record purchased items, order numbers, delivery methods, order status and transaction records. All payment processing is completed by UK FCA-regulated payment providers. Yarina does not store full bank card details on our servers, complying with UK financial data security and PCI DSS standards.

Automatically Collected Technical Data

Device type, browser version, IP address, UK Greenwich Mean Time zone, website browsing records, page access logs, referral sources, cookie data and advertising interaction records. This data is used for website optimization, fraud prevention and service improvement within UK GDPR legal boundaries.

3. Lawful Basis for Data Processing

We process your personal data based on the following legal grounds under UK GDPR:
  • Contract Performance: To process, fulfil and deliver your online orders, handle returns and after-sales services
  • Legitimate Interest: Optimize website user experience, prevent fraudulent transactions, improve product and service quality
  • Legal Compliance: Retain transaction records to comply with UK HMRC tax and accounting regulations and Scottish trading standards requirements
  • Explicit Consent: Send optional marketing emails and deploy analytics cookies only with your active consent

4. How We Use Your Personal Data

All data usage is limited to legitimate business purposes compliant with UK data protection laws and Scottish retail regulations:
  • Process, pack and dispatch your UK domestic orders accurately across England, Scotland, Wales and Northern Ireland
  • Respond to your enquiries regarding products, shipping, returns and refunds
  • Send order confirmations, delivery updates and important policy notifications
  • Maintain website security and prevent illegal or fraudulent transactions
  • Conduct opt-in marketing activities and user behaviour analysis
  • Fulfill legal record-keeping obligations required by UK HMRC and Scottish commercial trading standards

5. Third-Party Data Processors (UK/EU Regulated)

Our website operates on Shopify UK platform. We only share necessary data with UK/EU-based service providers who have signed data processing agreements compliant with UK GDPR, including UK payment processors, Royal Mail/DPD/DHL logistics providers, website analytics tools and customer support systems. Third parties are prohibited from using your data for unrelated commercial purposes.

6. Cookies & PECR Compliance

This website uses cookies in compliance with the UK Privacy and Electronic Communications Regulations (PECR). We deploy strictly necessary cookies for checkout and core website functions, and analytical/marketing cookies only after you provide explicit consent. You may adjust or withdraw cookie preferences at any time via our website cookie settings panel.

7. Data Sharing & Disclosure

We will never sell, rent or trade your personal data for commercial purposes. We only disclose your data when required by UK law, court orders or ICO regulatory requirements, or share limited data with trusted third-party processors essential for order fulfilment.

8. Your UK GDPR Legal Rights

As a UK/EEA resident, you hold the following statutory data rights:
  • Right of access: Request a full copy of your stored personal data
  • Right of rectification: Correct inaccurate or incomplete personal data
  • Right of erasure: Request deletion of your personal data where no legal retention obligation applies
  • Right of restriction: Restrict data processing under specific circumstances
  • Right of data portability: Receive your data in a machine-readable format
  • Right to object: Opt out of marketing and legitimate-interest processing
  • Right to lodge a complaint: Raise disputes with the Information Commissioner’s Office (ICO)
You may submit all data rights requests via our official support email.

9. Data Retention Periods (UK HMRC Compliance)

  • Order and financial transaction records: Retained for 7 years to comply with UK HMRC tax and accounting statutory requirements
  • Marketing contact data: Deleted immediately after you unsubscribe
  • Customer support records: Retained for 12 months after case closure
  • Anonymous analytics data: Anonymized and cleared within 90 days

10. Data Security Protection

We adopt end-to-end SSL encryption, enterprise firewalls and strict access control mechanisms to protect your personal and transaction data. In the event of a personal data breach, we will follow ICO mandatory notification procedures and inform affected users within the statutory timeframe required by UK GDPR.

11. Children’s Data Protection

Our website and products are not intended for children under 16 years old. We do not knowingly collect personal data from minors. If you become aware of minor data collection, contact us immediately for full data deletion.

12. Policy Updates

We may update this Privacy Policy to comply with revised UK GDPR, Data Protection Act 2018 or ICO regulations. All updates will be published on this page with the latest revision date.

13. Contact Information

Brand Name: Yarina
Website: www.yarina.shop
Email: hello@yarina.shop
Phone: +44 7802 588946
Business Address:
2 Links Pl, Aberdeen AB11 5DY, United Kingdom
Support Hours: Monday – Saturday: 9:00 AM – 6:00 PM GMT | Sunday: Closed
We respond to all data protection and customer enquiries within 24–48 working hours.