Privacy Policy

1. Information we collect

• Account information: your name, email address, password (stored only as a secure hash) and telephone number if you provide one.
• Order and delivery information: recipient name, delivery address, telephone number, order contents, personalisation details (such as names, roles, dates, wording, size and colour choices) and order history.
• Payment information: payment method and transaction status. We do not store raw card numbers or security codes. Card payments are handled by our payment provider where a live payment service is enabled.
• Communications: emails, WhatsApp messages, support requests, review content and any information you choose to send us.
• Technical information: IP address, browser type, device information, pages visited, cookie/local-storage preferences and security logs used to protect the store.

2. How we use your information

• To create and manage your account and authenticate you securely.
• To process, personalise, produce, dispatch and track your order, and to contact you about it.
• To calculate prices, discounts and delivery charges, and to maintain accurate transaction records.
• To respond to enquiries, provide customer support and manage returns or faulty items.
• To send service messages such as order confirmations and delivery updates. These are not marketing messages.
• To prevent fraud, secure the store, investigate misuse and meet our legal and accounting obligations.
• To improve our products, website and customer experience using aggregated or de-identified information where practicable.

Lawful bases. We rely on contract where processing is needed to fulfil your order or account; legal obligation for tax, accounting and consumer-law records; legitimate interests for security, fraud prevention and service improvement; and consent for optional marketing or non-essential cookies where consent is required.

3. Sharing and processors

We do not sell your personal information. We share only the information needed with trusted service providers who support the store, such as hosting and database providers, email delivery, payment processing, delivery carriers, customer-support tools and security services. These providers act under contracts that require appropriate confidentiality and data protection.

We may also disclose information where required by law, to enforce our terms, to protect our rights or safety, or in connection with a business sale or restructuring. We never share your personalisation details for unrelated advertising.

4. International transfers

Some service providers may process information outside the UK. Where this happens, we use appropriate safeguards such as UK adequacy regulations, the UK International Data Transfer Addendum or standard contractual clauses, and we take steps to ensure your information receives an adequate level of protection.

5. How long we keep information

• Order, invoice and transaction records are kept for at least six years to meet UK tax and accounting requirements.
• Account information is kept while your account remains open and for a reasonable period afterwards, unless you ask us to delete it earlier and we are not required to retain it.
• Support and WhatsApp records are kept only as long as needed to resolve the enquiry and maintain service quality.
• Security logs are kept for a limited period appropriate to detecting and investigating abuse.
• Marketing preferences are kept until you withdraw consent or unsubscribe, plus a short suppression period.

6. Security

We use technical and organisational measures designed to protect your information, including encrypted connections, hashed passwords, restricted administrative access, secure session cookies and access controls on customer and order data. No method of transmission or storage is completely secure, so please use a strong, unique password and tell us promptly if you suspect unauthorised activity.

We do not ask for card numbers or security codes by email or WhatsApp. If you receive a suspicious message claiming to be from Starlight, please contact us using the email address in this policy.

7. Cookies and local storage

We use essential cookies and similar browser storage to keep you signed in, remember your basket and favourites, and protect forms. These are needed for the store to work. With your consent, we also set a preference cookie for up to 180 days that remembers how you sort our shop. We do not currently use analytics or marketing cookies. You can change your choice at any time using Cookie Settings in the footer. You can also clear or block cookies in your browser, but some parts of the store may then stop working.

8. Marketing

We may send marketing only where we have a lawful basis to do so. You can opt out at any time using the unsubscribe link in a marketing email or by contacting us. We will still send essential service messages about orders and your account.

9. Your rights

Subject to applicable law, you may have the right to access your personal information, correct inaccurate information, request deletion, restrict or object to certain processing, withdraw consent, and receive a portable copy of information you provided. You may also ask us not to use your information for direct marketing.

To exercise a right, email shop@starlighteventshop.com. We may need to verify your identity before acting. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk, although we would appreciate the chance to resolve your concern first.

10. Children

Our store is intended for adults ordering products for themselves, family members or wedding parties. We do not knowingly collect account information from children. If a child’s name or sizing is included in a personalisation request, it is used only to produce and deliver the order.

11. Changes to this policy

We may update this policy to reflect changes in our services, technology or legal requirements. The revised version will be published on this page with a new “last updated” date. Where a change materially affects your rights, we will take reasonable steps to bring it to your attention.