Privacy policy.
Last updated date to confirm before launch.
This policy explains what personal data Sakhiya collects when you browse the site, order a jacket or contact us, and what we do with it. We follow the UK GDPR and the Data Protection Act 2018.
Who we are
Sakhiya is a small online business based in Braintree, Essex, UK. Our data controller is legal name / trading status, e.g. Soumya Gajawada trading as Sakhiya, full postal address. You can contact us about your data at sakhiya.uk@gmail.com.
What we collect
- Order details. Your name, email address, delivery and billing address, phone number and what you ordered. You enter these on Stripe’s secure checkout page.
- Payment details. Card and wallet details are handled by Stripe. They go straight to Stripe and we never see or store your full card number. We receive confirmation that you paid, and the last four digits and card type.
- Messages. If you email us or use the contact form, we keep your message and email address so we can reply.
- Technical data. Our website host, Cloudflare, processes your IP address and basic browser information to deliver the site and protect it from attacks.
- Your Bag. The items in your Bag are saved in your own browser (local storage) so they are still there when you come back. This stays on your device and is not sent to us until you check out.
We don’t use advertising or analytics cookies, and we don’t track you across other sites.
Why we use it, and our legal basis
- To take payment, send your order and deal with returns or refunds: contract.
- To keep accounting and tax records: legal obligation.
- To reply to your questions: legitimate interests (and steps you ask us to take before a contract).
- To keep the site secure and prevent fraud: legitimate interests.
We only send marketing emails if you have told us you want them, and you can opt out at any time. Delete this line if you will not send any marketing
Who we share it with
- Stripe (payment processing and fraud prevention) — see stripe.com/gb/privacy.
- Royal Mail or another courier, so we can deliver your order. They receive your name, address and, where needed, phone number.
- Cloudflare (website hosting and security) and Google (our business email).
- Our accountant or HMRC, if the law requires it. Remove or edit if not applicable
We don’t sell your data. Some of these providers may process data outside the UK. Where they do, it is under approved safeguards such as the UK International Data Transfer Agreement or UK Extension to the EU–US Data Privacy Framework.
How long we keep it
Order and payment records are kept for 6 years for tax and accounting purposes. Emails and messages are kept for as long as needed to deal with your enquiry and any follow-up, normally no more than 2 years.
Your rights
You can ask to see the data we hold about you, correct it, delete it, restrict or object to our use of it, or receive a copy in a portable format. Some of these rights are limited where we must keep records by law. To use any of them, email sakhiya.uk@gmail.com. If you’re unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We’d appreciate the chance to put things right first.
Changes
If we change this policy we’ll update the date above.