Privacy policy

 

This Privacy Policy was last updated on 14 June 2026.

 

Anabela Chan ("we", "us" or "our") is committed to protecting your privacy and handling your personal information with care, integrity and transparency. We use your information only where necessary to provide our services, fulfil your orders, improve your experience, communicate with you and protect against fraud. Your information is retained only for as long as necessary for these purposes.

 

Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

By using our website www.anabelachan.com (the “Site”), you acknowledge that you have read and understood this Privacy and Cookies Policy. Your use of the Site is also subject to our Terms and Conditions.

If you have not already read our Terms and Conditions, please do so here.

 

This Privacy and Cookies Policy explains how Anabela Chan collects, uses, stores, shares and protects personal information collected through the Site. It also explains your rights under applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR) and other applicable privacy legislation.

Our website is not intended for children under the age of 16 and we do not knowingly collect personal information from children.

 

DATA CONTROLLER

For the purposes of the UK General Data Protection Regulation ("UK GDPR"), the EU General Data Protection Regulation ("EU GDPR") and applicable data protection laws, the data controller is Anabela Chan Limited.

We are registered in England and Wales under company number 8833192 and have our registered office at 35B Sloane Street, London SW1X 9LP, United Kingdom. Our VAT number is 195847450.

If you have any questions about this Privacy Policy or want to exercise your rights set out in this Privacy Policy, please contact us by:

Sending an email to mydata@anabelachan.com

We will respond to requests to exercise your rights within one month of receipt unless an extension is permitted under applicable law.

 

PRIVACY CONTACT

For any questions relating to privacy, personal information or data protection matters, please contact us at mydata@anabelachan.com.

 

INFORMATION WE MAY COLLECT FROM YOU

We only collect the information that’s necessary to operate our business, provide you with the service that you have requested, and to update you with the latest news and launches from Anabela Chan. We may also receive personal information from trusted third-party service providers, including Shopify, payment processors, delivery partners, analytics providers and marketing platforms, where necessary to process orders, administer accounts, provide customer support, prevent fraud and improve our services.

We may collect and process the following data about you:

 

PERSONAL DATA PROVIDED VOLUNTARILY BY THE USER

• You may choose to create an account when using the Site. Creating an account is optional; however, certain features and services may not be available without an account.
• Information that you provide by filling in forms on the Site during a transaction, such as your full name, delivery and billing address, contact telephone number, email address and order information. This includes information provided when registering an account, purchasing goods on the Site, entering a competition or promotion, completing surveys or contacting us for any other reason.
• Records of your contact history (if any) with us, via third parties such as Shopify and Klaviyo. This is so you receive the best possible customer service.
• Details of transactions you carry out through the Site and the fulfilment of your orders and details of your visits to the Site including (but not limited to) traffic data, location data, weblogs and other communication data.
• Where personal information is required for us to fulfil an order, provide services or comply with legal obligations, failure to provide such information may prevent us from processing your order or providing the requested services.

 

CREDIT AND DEBIT CARD DETAILS

Information that you provide during a transaction, including your name, billing and delivery address, email address, telephone number and order information. Payment card details are collected and processed directly by our payment service providers and are not stored or processed by us. These are, however, collected and processed by our payment processing service called Shopify Payments and Worldpay (“Payment Provider”).

The collection and processing by the Payment Provider of your credit or debit card details and other personal data are governed by its terms and conditions.

The Payment Provider provides us with information regarding the credits and debits made to your card in order to enable us to reconcile our accounts.

 

BROWSING DATA – COOKIES

What are cookies?

We may collect information about your device, including (where available) your IP address, operating system, browser type and browsing behaviour, for website administration, security, analytics and service improvement purposes. This information helps us understand how visitors use the Site and allows us to improve functionality and user experience.

A cookie is a small text file placed on your device when you visit a website. Cookies enable websites to function efficiently, remember preferences and collect information about how visitors interact with the website.

Some cookies are placed by us and others are placed by trusted third-party service providers that assist us in operating the Site.

Browser-based ad blockers or privacy tools may prevent certain cookies or tracking technologies from operating correctly.

TYPES OF COOKIES WE USE

We use the following categories of cookies:

Strictly Necessary Cookies

These cookies are essential for the operation, security and functionality of the Site. They enable core features such as shopping cart functionality, account login, fraud prevention, checkout processes and cookie preference management.

These cookies cannot be disabled through our cookie preference centre because the Site cannot function properly without them.

Analytics Cookies

These cookies help us understand how visitors interact with the Site by collecting information about website usage, visitor behaviour and performance. The information collected is generally aggregated and does not directly identify individual users.

We use cookies and similar technologies to operate our website, remember your preferences and improve your browsing experience. With your consent, we also use analytics and marketing technologies provided by trusted third parties, including Google and Klaviyo, to understand how visitors use our website, measure the effectiveness of our marketing activities and deliver personalised communications and advertising. For more information about how we use personal data, please see our Privacy Policy.

 

Functionality Cookies

These cookies allow the Site to remember choices you make, such as language, region and other preferences, enabling us to provide enhanced and more personalised features.

Marketing and Customer Engagement Cookies

These cookies are used to deliver relevant advertising, personalise content, measure the effectiveness of marketing campaigns and understand visitor interests. These cookies may be set by us or by trusted third-party providers such as Google, Meta and Klaviyo.

Marketing cookies and marketing tracking technologies are only used for marketing, advertising, visitor profiling, attribution or similar purposes where you have provided consent. Certain service providers may place limited technical identifiers necessary to remember preferences, manage forms or support consent management before marketing consent is granted.

Certain Klaviyo technologies may be used solely to support website functionality, consent management, form display and customer experience features. Any use of Klaviyo technologies for marketing, profiling, visitor tracking, attribution or advertising purposes will only occur where the visitor has provided the required consent.

COOKIE INFORMATION

For the most up-to-date list of cookies currently used on the Site, please refer to our Cookie Preference Centre, which reflects the cookies actively deployed on the website at any given time. As our website is hosted on Shopify, certain cookies may be set by Shopify and may change from time to time. Further information can be found in Shopify's cookie policy and cookie documentation.

 

The list below provides examples of cookies that may be used on the Site. The cookies actually deployed may vary depending on the services enabled and your cookie preferences.

Strictly Necessary Cookies

• _tracking_consent — Shopify — Stores cookie consent preferences — 1 year
• cart — Shopify — Stores shopping cart contents — 2 weeks
• cart_currency — Shopify — Stores preferred currency — 2 weeks
• secure_customer_sig — Shopify — Customer authentication and security — 1 year
• localization — Shopify — Stores language and region preferences — 1 year

Analytics Cookies

• _shopify_y — Shopify — Analytics identifier for returning visitors — 1 year
• _shopify_s — Shopify — Analytics session tracking — 30 minutes
• _landing_page — Shopify — Landing page attribution tracking — 2 weeks
• _orig_referrer — Shopify — Referral source tracking — 2 weeks
• _ga — Google Analytics — Distinguishes users for analytics reporting — 2 years
• _ga* — Google Analytics — Stores session and engagement data — Up to 2 years
• _gid — Google Analytics — Distinguishes users — 24 hours
• _gat — Google Analytics — Request rate limiting — 1 minute

Marketing and Customer Engagement Cookies

• __kla_id — Klaviyo — Identifier used by Klaviyo to recognise returning visitors and support Klaviyo functionality, consent management, attribution and customer engagement features. Marketing-related use occurs only where the visitor has provided the required consent — Up to 2 years
• klaviyoOnsite — Klaviyo — Personalised onsite experiences and form functionality — Session
• _shopify_sa_p — Shopify — Marketing and referral attribution — 30 minutes
• _shopify_sa_t — Shopify — Marketing and referral attribution — 30 minutes
• IDE — Google Advertising — Advertising measurement and remarketing — Up to 13 months
• test_cookie — Google Advertising — Checks browser cookie support — 15 minutes
• _fbp* — Meta (if enabled) — Advertising and conversion tracking — 3 months

*Certain cookies are only placed where the relevant integrations are enabled and where you have provided consent.

Cookie durations are approximate and may vary depending on browser settings, user preferences and updates made by our service providers.

MANAGING COOKIE PREFERENCES

You can accept, reject or customise your cookie preferences at any time through our Cookie Preference Centre.

Where required by law, we will obtain your consent before placing analytics, functionality, targeting or marketing cookies on your device.

You may also control cookies through your browser settings. Most browsers allow you to block or delete cookies; however, restricting cookies may affect the functionality and performance of the Site.

Withdrawal of consent will not affect the lawfulness of any processing carried out before consent was withdrawn.

For more information about managing cookies, please visit www.allaboutcookies.org.

LEGAL BASIS FOR COOKIE PROCESSING

The legal basis for our use of cookies is as follows:

Strictly Necessary Cookies
Performance of a contract and/or our legitimate interests in operating a secure and functional website.

Analytics Cookies
Your consent.

Functionality Cookies
Your consent.

Marketing and Customer Engagement Cookies
Your consent.

THIRD-PARTY COOKIES

Some cookies may be placed by third parties that provide services to us, including analytics providers, advertising partners and social media platforms. These third parties may collect information about your online activities over time and across different websites and services. We do not control these third-party technologies and recommend that you review the privacy and cookie policies of the relevant providers for further information about how they process personal information.

COOKIE CONSENT

When you first visit the Site, you will be presented with a cookie banner that allows you to accept, reject or customise your cookie preferences.

We do not activate analytics or marketing tracking technologies unless and until you provide consent through the cookie banner or preference centre where required by applicable law. Where required by applicable law, consent must be freely given, specific, informed and unambiguous, and may be withdrawn at any time through the Cookie Preference Centre. Certain strictly necessary cookies and technical identifiers may be placed to support website functionality, consent management, security, localisation and customer experience features.

Your cookie preferences are recorded using a consent cookie so that your choices can be remembered during future visits.

 

PROCESSING METHODS

Personal information is processed using electronic and, where necessary, manual procedures in accordance with appropriate technical and organisational security measures.

In accordance with the GDPR and applicable laws, specific security measures are observed to prevent data loss, unlawful or improper use, and unauthorised access.

 

WHERE WE STORE YOUR PERSONAL INFORMATION

We implement appropriate technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures include encryption, access controls, secure hosting environments and other security safeguards appropriate to the nature of the information processed.

Personal information may be stored and processed by us and our trusted service providers within the United Kingdom, the European Economic Area and other jurisdictions where our service providers operate, subject to appropriate safeguards and applicable data protection laws.

 Any payment transactions will be encrypted using SSL technology. Where we have given you (or where you have chosen) a password which enables you to access certain parts of the Site, you are responsible for keeping this password confidential.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will use our best endeavours to protect your personal data, we cannot guarantee the security of your data transmitted to the Site and any transmission is at your own risk. Once we have received your information, we will use suitable procedures and security features to try to prevent unauthorised access.

 

HOW WE USE YOUR INFORMATION

We use information held about you in the following ways:

• To ensure that content from the Site is presented in the most effective manner for you and for your computer;
• To process your orders, and to carry out our obligations arising from any contracts entered into between you and ourselves (including contracts for the sale and purchase of goods); and
• To provide you with information regarding our products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes.
• To manage the Website Security.
• To comply with legal and regulatory obligations.
• To exercise the rights in judicial proceedings.

 

LEGAL BASIS FOR PROCESSING PERSONAL INFORMATION

We process personal information for the following purposes and on the following legal bases:

• Processing orders and payments – Performance of a contract
• Managing customer accounts – Performance of a contract
• Delivering products – Performance of a contract
• Providing customer service and support – Legitimate interests
• Maintaining website security and preventing fraud – Legitimate interests
• Maintaining accounting, tax and regulatory records – Compliance with a legal obligation
• Sending marketing communications – Consent
• Using analytics cookies – Consent
• Using marketing and advertising cookies – Consent

We rely on the following legal bases under applicable data protection laws:

• Performance of a contract – where processing is necessary to fulfil orders, provide products and services, manage accounts and process payments.
• Compliance with legal obligations – where processing is necessary to comply with applicable laws, regulations, tax obligations and law enforcement requests.
• Legitimate interests – where processing is necessary for the operation, security and improvement of our business, website, customer service and fraud prevention activities, provided such interests are not overridden by your rights and freedoms.
• Consent – where you have provided consent for marketing communications, analytics cookies, functionality cookies, marketing cookies or other activities requiring consent under applicable law.

 

HOW WE SHARE YOUR INFORMATION

We do not sell your information – not to anyone. There are however instances where we need to share your information with partners or affiliates in order for us to be able to provide you with the service you have requested. We may share personal information with the following categories of recipients where necessary:

• Payment processors and financial service providers;
• Delivery, logistics and courier providers;
• Ecommerce platform and website hosting providers;
• Customer relationship management and email marketing providers;
• Analytics, advertising and marketing service providers;
• Professional advisers including lawyers, accountants and auditors;
• Regulatory authorities, courts, law enforcement agencies and government bodies where required by law;
• Potential buyers, investors or advisers involved in a business transaction.

Examples of some of those instances are below:

Where we are required to provide you with a service:

We will share your personal information with our third-party delivery partners, including DHL, FedEx, Royal Mail and Addison Lee Courier Service.

We may also share personal information with trusted service providers who assist us in operating our website, processing payments, managing customer relationships, delivering marketing communications and analysing website performance, including Shopify, Klaviyo, payment processors and analytics providers.

 

WHERE WE HAVE YOUR CONSENT

MARKETING PERSONALISATION

We may use information relating to your purchases, browsing activity, preferences and interactions with our communications to better understand your interests and provide more relevant products, services and marketing communications. This profiling does not produce legal or similarly significant effects.

Such activities help us improve your experience with Anabela Chan and do not produce legal or similarly significant effects on individuals. We do not carry out automated decision-making that produces legal effects or similarly significantly affects individuals within the meaning of applicable data protection laws.

 

WHERE WE HAVE A JUSTIFIABLE REASON

By responding to customer service enquiries raised via email or phone.

 In certain circumstances, we may be required to share your information in connection with a business transition, such as a merger, acquisition or sale of all or part of our business. In such circumstances, your information may be shared with professional advisers and relevant parties involved in the transaction.

We may also use your information for legal compliance and to enforce our legal rights. This would mean your information is shared with administrative authorities (HMRC), police and public prosecutors to comply with a court order. It is our legal obligation to do so.

We will check any third party that we use to ensure that they can provide sufficient guarantees regarding the confidentiality and security of your personal information. Such parties may process personal information either as independent data controllers or as data processors acting on our behalf, depending on the nature of the services provided.

 

TRANSFER OF DATA OUTSIDE THE UNITED KINGDOM AND EUROPEAN ECONOMIC AREA

Some of our service providers may process personal information outside the United Kingdom and/or European Economic Area, including in the United States.

Where personal information is transferred internationally, we implement appropriate safeguards to ensure that such transfers comply with applicable data protection laws. These safeguards may include adequacy regulations, Standard Contractual Clauses approved by the European Commission and, where applicable, the UK International Data Transfer Addendum.

For further information regarding international transfers, please contact us at mydata@anabelachan.com.

 

HOW LONG DO WE KEEP YOUR INFORMATION FOR

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, tax, regulatory and business requirements:

Orders & invoices - 6 years for tax/accounting purposes

Customer accounts - For the duration of the account and up to 6 years after closure where necessary for legal, tax, fraud prevention, dispute resolution or record-keeping purposes

Marketing subscribers – Until you unsubscribe or withdraw consent, after which we may retain limited suppression information to ensure that you do not receive further marketing communications.

Customer service enquiries - 2–3 years

 

Where you maintain an Anabela Chan account, we may retain relevant information for the duration of the relationship and for a reasonable period thereafter.

Where you subscribe to receive marketing communications, we will retain your information until you unsubscribe or withdraw your consent.

Where personal information is no longer required, it will be securely deleted, anonymised or otherwise disposed of in accordance with applicable laws and our internal retention procedures.

  

YOUR RIGHTS

We may request information necessary to verify your identity before responding to a rights request.

Subject to applicable law, you have the right to:

• Access your personal information;
• Request correction of inaccurate information;
• Request deletion of personal information;
• Request restriction of processing;
• Object to processing;
• Withdraw consent where processing is based on consent;
• Request data portability;
• Lodge a complaint with a supervisory authority.

 

In particular, you have the right to object and withdraw your consent, in whole or in part, to the collection, use, disclosure or processing of your personal data for purposes of profiling or for purposes of dispatch of advertising material, direct selling or for the fulfillment of market surveys or commercial communication both automated (e-mail, other systems of distance communication as, by way of example: SMS, MMS, Whatsapp) and traditional (paper mail).

If you prefer that the processing of your personal data is carried out solely by means of traditional contact methods, you may object to the processing of your personal data by means of automated contact methods.

Furthermore, you shall have the right to receive the personal data concerning you, which you have provided to the Controllers, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where: the processing is based on consent or on a contract and the processing is carried out by automated means.

You also have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, except where permitted by applicable law.

In order to exercise your rights above and/or submit inquiries or complaints with regard to the processing of your personal data and/or withdraw your consent, you may send a request to the Data Controller by writing to this email address: mydata@anabelachan.com  or to the postal addresses and contacts mentioned in the epigraph of this information notice.

Moreover, you can at any time delete your subscription to the newsletter following the link below at every communication.

 

To change or withdraw your consent, or for any questions relating to privacy and data protection, please contact us at mydata@anabelachan.com.

 

If you are dissatisfied with how we process your personal information, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters.

Website: https://ico.org.uk

Telephone: 0303 123 1113

 

If you are located in the European Economic Area, you may also have the right to lodge a complaint with your local data protection supervisory authority.

 

CALIFORNIA PRIVACY RIGHTS

If you are a California resident, you may have certain rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA").

Subject to applicable law, California residents may have the right to:

• Know what categories of personal information we collect, use and disclose;
• Request access to personal information we hold about them;
• Request correction of inaccurate personal information;
• Request deletion of personal information, subject to certain exceptions;
• Request information regarding the categories of personal information disclosed to third parties;
• Not be discriminated against for exercising their privacy rights.

We do not sell personal information for monetary consideration. We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age. We do not use or disclose sensitive personal information for purposes that would give rise to a right to limit such use under applicable California law.

Where our use of advertising, analytics or similar technologies may constitute "sharing" under California law, California residents may manage their preferences through our Cookie Preference Centre.

To exercise any applicable California privacy rights, please contact us at mydata@anabelachan.com.

 

The Site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

 

CHANGES TO OUR PRIVACY POLICY

Any changes we may make to this Privacy Policy in the future will be posted on this page and, where appropriate, we may notify you of significant changes by email. You should ensure that you review this Policy from time to time, so you are fully informed of how we use your personal information.

 

CONTACT US

For access to your personal information, please email us at mydata@anabelachan.com and we will be pleased to assist with your request.

If you have any concerns about material which appears on the Site, or any questions, comments or requests regarding our Terms and Conditions or Privacy and Cookies Policy, please contact us at: mydata@anabelachan.com or Anabela Chan Joaillerie, 35B Sloane Street, London, SW1X 9LP, United Kingdom.