Ria Christie Collections

Privacy and cookies policy

Ria Christie Collections | riachristiecollections.com

Last updated: February 2026

Registered company: Ryefield Investments Limited, trading as Ria Christie Collections

 

Part 1: Privacy Policy

1. Introduction

We are committed to protecting the privacy of everyone who visits and shops at riachristiecollections.com. This Privacy Policy explains what personal data we collect, how we use it, how we protect it, and what rights you have over it.

This policy applies to all users of our website and all customers who purchase from us. It covers personal data we collect online, by email, and through the order process.

We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018), and the Data (Use and Access) Act 2025 (DUAA). The Information Commissioner’s Office (ICO) is our supervisory authority.

If you have any questions about how we handle your data, please contact us at [email protected].

2. Who We Are (Data Controller)

The data controller responsible for your personal data is:

Ryefield Investments Limited, trading as Ria Christie Collections

Suite B, (inside) ARUN House, ARUN Building, Arundel Road

Uxbridge, Greater London, UB8 2RP, United Kingdom

Email: [email protected]

3. What Personal Data We Collect

We collect the following categories of personal data:

3.1 Data you provide to us

• Your name, delivery address, billing address, email address, and telephone number when you place an order

• Your email address when you register for an account or subscribe to our newsletter

• Your payment details — processed securely by our payment provider, PayPal and Stripe and others that we may integrate in the future. We do not store your card details.

 

3.2 Data we collect automatically

• Technical data, including your IP address, browser type and version, operating system, and device information

• Usage data, including pages visited, time spent on our website, referral sources, and navigation paths

 

3.3 Data from third parties

We may receive data from payment processors (PayPal) and analytics providers (Google Analytics) in connection with your use of our website and purchases.

4. Our Legal Basis for Processing Your Data

Under the UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:

• Fulfilment of a contract — to process and deliver your orders and manage your account

• Legal obligation — to comply with our legal and regulatory obligations (e.g. tax and fraud prevention)

• Legitimate interests — to improve our website, prevent fraud, and administer our business

Consent — where we send you marketing emails or place non-essential cookies on your device. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent given before withdrawal.

5. How We Use Your Personal Data

We use your personal data to:

•Process and fulfil your orders, including dispatch and delivery

•Send you order confirmations, invoices, and delivery updates

•Manage your account and respond to your enquiries and complaints

•Send you marketing emails and newsletters, where you have consented or where the soft opt-in applies

•Personalise your experience on our website

•Analyse how our website is used so we can improve it

•Prevent and detect fraud and protect the security of our website

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects. We will not supply your personal data to any third party for their own direct marketing purposes without your explicit consent.

6. Who We Share Your Data With

We share your personal data only where necessary. The third parties we work with include:

•Payment processors (PayPal) — to process payments securely on our behalf. See PayPal’s privacy policy at paypal.co.uk.

•Postal and courier services — to fulfil and deliver your order (e.g. Royal Mail).

•Analytics providers (Google Analytics) — to understand website usage. See Section 11 for more details.

•Professional advisers and regulators — where required by law or to establish, exercise, or defend legal rights.

We may also disclose your data if required to do so by law, in connection with legal proceedings, or to prevent fraud.

In the event that we sell or transfer our business or assets, your personal data may be transferred to a prospective buyer as part of that transaction. Any new owner will be required to use your personal data in accordance with this policy.

7. International Data Transfers

Your personal data may be transferred to, and processed in, countries outside the UK. Where this happens, we take steps to ensure your data receives an equivalent level of protection, including:

•Using providers covered by UK adequacy decisions or appropriate safeguards

•Ensuring our processors are contractually bound to protect your data to UK GDPR standards

For example, Google Analytics may process data in the United States. Google operates under Standard Contractual Clauses approved by the ICO. For more information, visit google.com/policies/privacy.

8. How Long We Keep Your Data

We keep your personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Our general retention periods are:

•Order and transaction data: 7 years (to comply with HMRC tax record-keeping requirements)

•Account data: retained while your account is active and deleted within 12 months of account closure on request

•Marketing preferences: until you unsubscribe or withdraw consent

We may retain data for longer if required by law, or if it is necessary for legal proceedings or regulatory compliance.

9. How We Protect Your Data

We take the security of your personal data seriously. We use appropriate technical and organisational measures to protect it against unauthorised access, loss, misuse, or disclosure. These include:

•SSL/TLS encryption for all data transmitted through our website

•Secure, password-protected and firewall-protected servers

•Limiting access to your personal data to employees who need it to perform their role

Please note: the transmission of data over the internet is inherently not completely secure. While we take all reasonable steps to protect your data, we cannot guarantee the security of data you transmit to us. Any transmission is at your own risk. You are responsible for keeping your account password confidential. We will never ask you for your password by email.

10. Your Rights Under UK GDPR

Under the UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

•Right of access — you may request a copy of the personal data we hold about you (a Subject Access Request). We must respond within one month, free of charge in most cases.

•Right to rectification — you may ask us to correct inaccurate or incomplete personal data.

•Right to erasure — you may ask us to delete your personal data in certain circumstances (‘right to be forgotten’).

•Right to restrict processing — you may ask us to pause processing of your data in certain circumstances.

•Right to data portability — you may ask us to provide your data in a machine-readable format.

•Right to object — you may object to processing based on legitimate interests or for direct marketing purposes.

•Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please email us at [email protected]. We will respond within one month. We may need to verify your identity before processing your request.

Please note: Subject Access Requests are free of charge in most cases. We may charge a reasonable fee only where a request is manifestly unfounded, excessive, or where you request additional copies of previously provided data.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.

11. Third-Party Websites

Our website may contain links to third-party websites. We do not control those websites and are not responsible for their privacy practices. We encourage you to read the privacy policy of any website you visit.

12. Marketing Communications

We may send you marketing emails if you have opted in, or if you have purchased from us and have not opted out (the ‘soft opt-in’ under PECR).

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email we send you, or by emailing us at [email protected]. We will action your request promptly.

13. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. When we do, we will update the ‘Last updated’ date at the top of this page. We encourage you to review this policy periodically. Where changes are significant, we will notify you by email or by a prominent notice on our website.

 

Part 2: Cookies Policy

14. What Are Cookies?

A cookie is a small text file placed on your device (computer, tablet, or smartphone) by a website you visit. Cookies help websites remember you and your preferences, and help website owners understand how their sites are being used.

Cookies can be:

• Session cookies — temporary cookies that are deleted when you close your browser.

• Persistent cookies — cookies that remain on your device until they expire or you delete them.

Cookies do not usually contain information that identifies you personally, but personal data we hold about you may be linked to information stored in cookies.

15. The Cookies We Use

We use the following categories of cookies on riachristiecollections.com:

15.1 Strictly Necessary Cookies

These cookies are essential for our website to function. They include cookies that manage your shopping basket, keep you logged in to your account, and enable secure checkout. You cannot opt out of these cookies, as the website cannot operate without them.

15.2 Performance and Analytics Cookies

We use Google Analytics to collect anonymised information about how visitors use our website. This helps us improve the site and the experience it provides. Google Analytics uses cookies to collect data including pages visited, time spent on the site, and how users arrived. Google’s privacy policy is available at google.com/policies/privacy. You can opt out of Google Analytics across all websites at tools.google.com/dlpage/gaoptout.

15.3 Functional Cookies

These cookies allow us to remember your preferences (such as language or currency settings) and personalise your experience. They are not strictly essential but improve your browsing experience.

15.4 Third-Party Cookies

Our website may use third-party services such as PayPal for payment processing. These providers may set their own cookies. We do not control third-party cookies. Please refer to the relevant provider’s privacy policy for more information.

16. Cookie Consent

When you first visit our website, we ask for your consent to place non-essential cookies on your device. You can manage your cookie preferences at any time via the cookie settings on our website. Strictly necessary cookies do not require your consent, as they are essential for the site to work.

17. How to Manage or Disable Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to:

•Block all cookies or only third-party cookies

•Delete existing cookies stored on your device

•Set your browser to notify you when a cookie is placed

To manage cookies in your browser, visit the help section of your browser:

•Google Chrome: Settings > Privacy and Security > Cookies and other site data

•Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data

•Microsoft Edge: Settings > Cookies and site permissions > Cookies and site data

•Safari: Preferences > Privacy > Manage Website Data

Please note: blocking or deleting cookies may affect the functionality of our website. Some features, including the shopping basket and account login, may not work correctly if essential cookies are disabled.

18. More Information About Cookies

For independent information about cookies and how to manage them, visit allaboutcookies.org or the ICO’s guidance at ico.org.uk.

19. Contact Us

If you have any questions about this Privacy and Cookies Policy, or wish to exercise any of your data rights, please contact us:

Email: [email protected]

Website: riachristiecollections.com

Address:

Suite B, (inside) ARUN House, ARUN Building, Arundel Road

Uxbridge, Greater London, UB8 2RP, United Kingdom

ICO supervisory authority: ico.org.uk | 0303 123 1113

We aim to respond to all data enquiries within one month.

Happy Shopping! Happy Reading!