Privacy Policy

Last updated: 19 October 2026

Gabriella Oils is an independent UK business operated by Jody Saunders, trading as Gabriella Oils. We respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains what information we collect, how we use it, who we share it with and your rights under applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR).

Our website is independently maintained, with shopping basket, checkout and payment services provided by Shopify.

1. Information We Collect

When you place an order or contact Gabriella Oils, we may collect your name, email address, telephone number, billing and delivery addresses, order details and any information you provide in correspondence.

Shopify and its payment providers process payment information securely. Gabriella Oils does not directly collect or store your full payment card details.

Technical information, such as IP addresses, browser details and information about visits or checkout activity, may also be processed by Shopify and the technology providers supporting our website.

We do not offer customer accounts, wishlists or customer review facilities on our website.

2. How We Use Your Information

We use personal information to process and fulfil orders, arrange deliveries, provide customer support, handle returns and refunds, maintain financial records, and meet our legal obligations.

We may also use order and website performance information to understand how our shop is performing and improve our products and services.

Gabriella Oils does not operate promotional email or text-message marketing campaigns or display third-party advertisements on its website.

3. Legal Basis for Processing

Under UK GDPR, we process personal information where there is an appropriate lawful basis.

Performance of a contract: To process payments, fulfil purchases, arrange delivery and manage returns or refunds.

Legal obligations: To maintain records required for tax, accounting and other legal purposes.

Legitimate interests: To respond to enquiries, protect our business against fraud, maintain website security and improve our services, where these interests are not overridden by your rights.

Consent: Where consent is required for a particular activity, such as certain optional cookies or technologies, we will seek it as applicable.

4. Shopify and Payment Processing

Gabriella Oils uses Shopify to provide shopping basket, checkout, payment and related commerce services.

When you use these services, Shopify and its authorised service providers may process information needed to complete transactions, prevent fraud, maintain security and operate their systems.

Shopify may also process information for its own purposes, as explained in its privacy documentation.

You can read more in the Shopify Consumer Privacy Policy and access Shopify's Privacy Portal.

5. Cookies and Website Analytics

Our independently maintained website does not intentionally use Google Analytics, Google Tag Manager or third-party advertising trackers.

Our website checks have not identified additional cookie-setting mechanisms outside Shopify-related services. However, cookies or similar technologies may be used by Shopify during shopping, checkout, payment processing and related activities.

These technologies may support essential website functions, security, fraud prevention and commerce analytics.

Where non-essential cookies or similar technologies require consent under applicable law, they will be subject to the appropriate consent requirements.

You can also manage cookies through your browser settings, although restricting certain cookies may affect shopping and checkout functionality.

6. Sharing Your Information

We share personal information only where reasonably necessary to operate our business or comply with the law.

This may include Shopify and its payment providers, delivery and postal services, website hosting and technical service providers, and professional advisers or public authorities where legally required.

We do not sell customer contact lists or independently share customer information with advertisers for targeted marketing.

Shopify and other service providers may process information under their own applicable privacy terms.

7. International Data Transfers

Some of our technology and payment service providers operate internationally.

Where personal information is transferred outside the UK, we rely on applicable safeguards, such as UK adequacy regulations or recognised contractual protections, where required by law.

8. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes described in this policy.

Order and transaction records may be retained to meet tax and accounting requirements. Customer correspondence may be retained where necessary to resolve enquiries, complaints or disputes.

Information is deleted or securely disposed of when it is no longer required, subject to applicable legal obligations.

9. Your Data Protection Rights

Depending on the circumstances, you have rights under UK GDPR, including the right to:

• Request access to personal information we hold about you.

• Request correction of inaccurate information.

• Request deletion of information where applicable.

• Request restriction of certain processing.

• Object to processing based on legitimate interests.

• Request transfer of your information where applicable.

• Withdraw consent where processing relies on consent.

These rights are subject to legal conditions and exceptions.

To exercise your rights, please contact us at [email protected]. We may need to verify your identity before responding.

We normally respond to valid data protection requests within one month, subject to applicable legal provisions.

10. Security

We take reasonable steps to protect the personal information entrusted to us.

Online checkout and payment processing are provided through Shopify and its payment services, which maintain their own security measures.

No internet-based service can guarantee absolute security.

11. Children's Privacy

Our products and services are intended for adult customers. We do not knowingly collect personal information directly from children for the purpose of providing our services.

12. Third-Party Websites

Our website may contain links to third-party websites or services. These organisations operate under their own privacy policies, and we encourage you to review them when visiting their websites.

13. Complaints

If you have concerns about how Gabriella Oils handles your personal information, please contact us so we can investigate.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

Website: https://ico.org.uk

14. Changes to This Policy

We may update this Privacy Policy to reflect changes to our services, technology or legal obligations.

The latest version will be published on our website with an updated revision date.

15. Contact Details

For questions about this Privacy Policy or requests concerning your personal information, please contact:

Jody Saunders T/A Gabriella Oils
51 Festival Avenue
Warrington
WA2 9EG
England, United Kingdom

Email: [email protected]
Website: https://gabriellaoils.com

Gabriella Oils is the data controller for the personal information it processes in operating its business.