Privacy Policy

PRIVACY POLICY

Last updated: 9 September 2026

Ellie Cork operates this online store and website, including all information, content, features, tools, products and services offered through it (collectively, the "Services"), in order to provide you with a simple, secure and enjoyable shopping experience.

Our store is hosted on Shopify, which allows us to provide our online sales services.

This Privacy Policy explains how we collect, use and share your personal data when you visit our website, use our Services, make a purchase or interact with us in any way.

If there is any conflict between our Terms and Conditions and this Privacy Policy, this Privacy Policy will prevail with regard to the collection, processing and disclosure of your personal data.

Please read this Privacy Policy carefully. By using our Services, you acknowledge that you have read and understood how we process your personal data as described in this Privacy Policy.

PERSONAL DATA WE COLLECT

"Personal data" means any information that directly or indirectly identifies or can be used to identify a natural person.

Data that has been anonymised or aggregated so that it can no longer be linked to an identifiable person is not considered personal data.

Depending on how you use our Services, your country of residence and applicable regulations, we may collect and process the following categories of data.

CONTACT INFORMATION

We may collect:

• First and last name
• Billing address
• Shipping address
• Phone number
• Email address

PAYMENT INFORMATION

To process your orders, we may collect information relating to payments, including:

• Credit or debit card information
• Financial account information
• Payment method used
• Payment confirmation
• Transaction history

Payment information is processed by secure payment providers and is used only in connection with processing your orders and related payment transactions.

ACCOUNT INFORMATION

If you create an account on our website, we may collect:

• Username
• Encrypted password
• Account preferences
• Personal settings
• Security questions, where applicable

ORDER INFORMATION

We may collect information relating to:

• Products viewed
• Products added to your cart
• Wishlist items
• Orders placed
• Returns
• Exchanges
• Cancellations
• Purchase history

CUSTOMER SERVICE COMMUNICATIONS

We retain information that you choose to provide when contacting us, including:

• Email communications
• Contact forms
• Customer service communications

This information is used to respond to your requests, resolve potential issues and improve the quality of our customer service.

DEVICE INFORMATION

When you visit our website, we may automatically collect certain technical information, such as:

• IP address
• Browser type
• Operating system
• Device type
• Unique identifiers
• Browser language
• Time zone

WEBSITE USAGE INFORMATION

We may collect information about how you use our online store, including:

• Pages viewed
• Time spent on the website
• Products viewed
• Browsing activity
• Interactions with the website
• Date and time of visits

This information helps us improve your shopping experience and the functionality of our website.

SOURCES OF YOUR PERSONAL DATA

We may collect your personal data from different sources.

DIRECTLY FROM YOU

When you:

• Create an account
• Place an order
• Complete a form
• Contact us
• Subscribe to our newsletter
• Use our Services

AUTOMATICALLY

When you browse our website, certain information may be collected automatically through:

• Cookies
• Similar technologies
• Log files
• Analytics tools

THROUGH OUR SERVICE PROVIDERS

We may receive certain information from partners who help us provide our Services, including:

• Shopify
• Payment service providers
• Shipping and delivery providers
• Cloud service providers
• Customer support services
• Analytics providers

THROUGH THIRD-PARTY PARTNERS

In certain circumstances, we may receive information from business or marketing partners, where permitted by applicable law.

HOW WE USE YOUR PERSONAL DATA

We use your personal data only for legitimate purposes connected with the management and provision of our Services.

PROVIDING OUR SERVICES

We use your data to:

• Process your orders
• Manage payments
• Arrange deliveries
• Manage returns and exchanges
• Create and manage your account
• Remember your preferences
• Provide a personalised shopping experience
• Suggest products that may be of interest to you

MARKETING AND COMMUNICATIONS

Where you have provided the required consent, we may use your data to:

• Send newsletters
• Communicate promotional offers
• Send commercial communications
• Provide personalised advertising
• Recommend products that may be of interest to you

You may withdraw your consent at any time.

SECURITY AND FRAUD PREVENTION

Your personal data may also be used to:

• Verify your identity
• Protect accounts and transactions
• Prevent fraudulent activity
• Detect unauthorised access
• Maintain the security of our website and Services

We recommend that you never share your login credentials with other people.

CUSTOMER SERVICE

We use your data to:

• Respond to your questions
• Resolve potential issues
• Provide assistance before and after your purchase
• Improve the quality of our customer service

LEGAL OBLIGATIONS

We may use or disclose your personal data where required by law, including to:

• Comply with legal and regulatory obligations
• Respond to requests from competent authorities
• Protect our legal rights
• Prevent unlawful activities
• Enforce our Terms and Conditions

HOW WE SHARE YOUR PERSONAL DATA

In certain circumstances, we may share your personal data with third parties for legitimate purposes and in accordance with this Privacy Policy.

This may include the following situations.

SERVICE PROVIDERS

We work with third-party companies that help us operate our online store and provide our Services.

These providers may process your personal data only to the extent necessary to perform the services entrusted to them.

They may include:

• Shopify
• Payment service providers
• Shipping and delivery providers
• Cloud hosting services
• IT service providers
• Customer support providers
• Analytics providers
• Order management providers

BUSINESS AND MARKETING PARTNERS

Where permitted by applicable law, we may share certain information with business, advertising or marketing partners in order to:

• Display personalised advertisements
• Improve the effectiveness of advertising campaigns
• Analyse marketing performance
• Offer products and services that may be of interest to you

Where required by applicable law, such processing will only take place with your prior consent.

AT YOUR REQUEST

We may share your personal data when you request or expressly authorise us to do so, including when you:

• Place an order
• Use third-party services or applications
• Connect to our website through external platforms
• Share content through social media

LEGAL OBLIGATIONS

We may disclose your personal data when necessary to:

• Comply with legal obligations
• Respond to requests from competent authorities
• Comply with judicial decisions or court orders
• Prevent fraud or illegal activities
• Protect our legal rights
• Protect our customers and website

SHOPIFY AND DATA PROCESSING

Our online store uses Shopify, which hosts our website and provides the tools necessary to manage orders, payments and other e-commerce functions.

When you use our website, certain personal information may also be processed by Shopify to enable our Services to function properly.

Shopify may process information in order to:

• Process orders
• Manage payments
• Maintain platform security
• Prevent fraudulent activity
• Optimise its services
• Provide e-commerce features

Some data may be transferred to and processed in countries other than your country of residence, in accordance with applicable data protection laws.

For more information about how Shopify processes personal data, please refer to Shopify's Privacy Policy available on its official website.

THIRD-PARTY WEBSITES

Our website may contain links to websites or services operated by third parties.

Once you leave the Ellie Cork website, we are not responsible for how those third parties collect, use or process your personal data.

We therefore recommend that you carefully review the privacy policies of any third-party websites or services you use.

The presence of external links on our website does not constitute an endorsement or recommendation of their content or privacy practices.

SOCIAL MEDIA

If you choose to interact with us through social media platforms such as Facebook, Instagram, Pinterest or other similar services, certain information may be shared with those platforms in accordance with their own privacy policies.

We recommend reviewing the privacy policies of the social media platforms you use to understand how your information may be processed.

PROTECTION OF MINORS

Our Services are not intended for children.

We do not knowingly collect personal data from individuals below the minimum age required by applicable law in their country of residence.

If we become aware that we have accidentally collected personal data from a child, we will take reasonable steps to delete that information as soon as possible.

If you believe that a child has provided us with personal data, please contact us at:

support@elliecork.com

DATA SECURITY

Protecting your personal data is a priority for Ellie Cork.

We implement appropriate technical, organisational and administrative measures designed to protect your data against:

• Unauthorised access
• Misuse
• Accidental loss
• Unauthorised modification
• Unauthorised disclosure
• Destruction

Although we take appropriate measures to protect your information, no computer system or method of transmitting data over the Internet can guarantee absolute security.

We therefore recommend using strong passwords and never sharing your account credentials with third parties.

DATA RETENTION

We retain your personal data only for as long as necessary to:

• Provide the Services you request
• Manage your account
• Process your orders
• Comply with tax and accounting obligations
• Comply with legal obligations
• Resolve disputes
• Establish, exercise or defend our legal rights

At the end of the applicable retention period, data will be securely deleted or anonymised, unless a longer retention period is required by law.

YOUR RIGHTS

Depending on your country of residence, you may have one or more rights under applicable data protection legislation.

These rights may be subject to certain limitations or exceptions provided by law.

RIGHT OF ACCESS

You have the right to know whether we process your personal data.

You may request a copy of the information we hold about you, including details about:

• The categories of data processed
• The purposes of processing
• The recipients of your data
• The applicable retention period
• Your data protection rights

RIGHT OF RECTIFICATION

You have the right to request the correction or updating of inaccurate or incomplete personal data.

We will take reasonable steps to update relevant information as soon as possible.

RIGHT TO ERASURE

You may request the deletion of your personal data where:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw your consent
• You object to the processing
• The processing is unlawful
• Deletion is required by law

However, we may need to retain certain information where necessary to comply with legal obligations or protect our legal rights.

RIGHT TO RESTRICTION OF PROCESSING

In certain circumstances, you may request that we restrict the processing of your personal data.

During this period, we will continue to retain the relevant information but will only use it where permitted by applicable law.

RIGHT TO DATA PORTABILITY

You may have the right to receive personal data that you have provided to us in a structured, commonly used and machine-readable format.

Where technically possible and legally applicable, you may also request that your data be transmitted directly to another controller.

RIGHT TO OBJECT

You may have the right to object to the processing of your personal data where processing is based on our legitimate interests.

If you exercise this right, we will stop the relevant processing unless we can demonstrate compelling legitimate grounds for continuing the processing or the law requires us to continue.

WITHDRAWAL OF CONSENT

Where processing is based on your consent, you may withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before your consent was withdrawn.

MARKETING COMMUNICATIONS

We may send you:

• Newsletters
• Promotional offers
• Commercial communications
• Information about our products
• Advertising campaigns

You can unsubscribe at any time by clicking the "Unsubscribe" link included in our marketing emails or by contacting us directly.

Even after withdrawing your consent to marketing communications, we may continue to send communications that are strictly necessary in relation to your orders, account or Services you have requested.

HOW TO EXERCISE YOUR RIGHTS

You may exercise your data protection rights at any time by contacting us at:

Email: support@elliecork.com

For security reasons, we may ask you to verify your identity before processing your request.

We will respond to your request within the timeframe required by applicable data protection legislation.

AUTHORISED REPRESENTATIVE

Where permitted by applicable law, you may authorise another person to submit data protection requests on your behalf.

Before processing such a request, we may ask for proof of authorisation and may verify your identity.

NON-DISCRIMINATION

Exercising your data protection rights will not result in discriminatory treatment.

We will not restrict your access to our Services or apply different conditions to you simply because you choose to exercise your rights under applicable data protection laws.

COOKIES AND SIMILAR TECHNOLOGIES

Our website uses cookies and similar technologies to improve your browsing experience, ensure the proper functioning of our online store, analyse traffic and, where applicable, provide personalised content and advertising.

Cookies may be classified into the following categories:

NECESSARY COOKIES

These cookies are essential for the proper functioning of our website.

Without them, certain features may not be available or function correctly.

ANALYTICS COOKIES

These cookies help us understand how visitors use our website and help us continuously improve our Services.

MARKETING COOKIES

These cookies may be used to provide more relevant advertising based on your interests, both on our website and on third-party platforms, where permitted by applicable law and where the required consent has been obtained.

You may manage or change your cookie preferences through your browser settings or, where available, through the cookie management banner on our website.

LEGAL BASIS FOR PROCESSING

FOR RESIDENTS OF THE EEA AND THE UNITED KINGDOM

If you are resident in the European Economic Area (EEA) or the United Kingdom, we process your personal data only where a valid legal basis permits us to do so, including:

• Performance of a contract
• Your consent
• Compliance with a legal obligation
• Our legitimate interests, provided that these interests do not override your fundamental rights and freedoms

Processing is carried out in accordance with the General Data Protection Regulation (GDPR), where applicable, and other applicable data protection laws.

COMPLAINTS

If you believe that the processing of your personal data violates applicable data protection legislation, you have the right to lodge a complaint with the competent data protection supervisory authority in your country of residence, place of work or the place where the alleged infringement occurred.

We encourage you to contact us first so that we can review the issue and attempt to resolve it as quickly as possible.

You can contact us at:

support@elliecork.com

INTERNATIONAL DATA TRANSFERS

Your personal data may be processed or stored outside your country of residence.

This may occur when we work with global service providers, such as Shopify, or other technology partners necessary to operate our online store.

Where personal data is transferred to countries that do not provide an equivalent level of protection under applicable data protection laws, appropriate safeguards may be implemented, including:

• Standard Contractual Clauses approved by the European Commission
• Contractual agreements in accordance with applicable regulations
• Other safeguards recognised under applicable law

Our aim is to ensure that your personal data receives an appropriate level of protection regardless of where it is processed.

DATA RETENTION

We retain personal data only for as long as necessary to:

• Provide the Services you request
• Manage our relationship with customers
• Process orders, payments and deliveries
• Comply with tax and accounting obligations
• Comply with legal obligations
• Resolve potential disputes
• Protect and enforce our legal rights

At the end of the applicable retention period, information will be securely deleted or anonymised unless a longer retention period is required by law.

UPDATES TO THIS PRIVACY POLICY

We may periodically update this Privacy Policy to reflect:

• Changes in legislation
• Regulatory developments
• Changes to our Services
• The addition of new website features
• Improvements to our security measures

The most recent version will always be published on this page together with its latest update date.

We recommend reviewing this Privacy Policy periodically to remain informed about how we process your personal data.

CONTACT

For any questions about this Privacy Policy, the processing of your personal data or the exercise of your data protection rights, you can contact us at any time.

Ellie Cork

Email: support@elliecork.com

We are committed to responding to your requests as quickly as possible and, in all cases, within the timeframes required by applicable law.

ADDITIONAL INFORMATION

By using the Ellie Cork website and Services, you acknowledge that you have read and understood this Privacy Policy.

If any provision of this Privacy Policy is found to be invalid or unenforceable, the remaining provisions will remain fully valid and enforceable.

This Privacy Policy is governed by applicable laws relating to data protection and electronic commerce.

THANK YOU

Thank you for placing your trust in Ellie Cork.

Protecting your privacy and personal data is one of our priorities. We are committed to providing a secure, transparent and trustworthy shopping experience while respecting applicable data protection requirements.