Privacy policy
Last updated: 7 January 2026
Dayas Essence (“we”, “our”, “us”) operates this website and store. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, place an order or contact us. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data controller
Dayas Essence
37 Hunningley Close
Stairfoot, Barnsley, S70 3DP
United Kingdom
We are the data controller responsible for your personal data.
Personal data we collect
We may collect your name, billing and delivery address, email address and telephone number.
If you create an account, we collect login details, order history and saved preferences.
Payment information such as card type and payment confirmation is processed securely by Shopify and its payment providers. We never store full card numbers.
We collect information about items purchased, returns, exchanges and delivery status.
We collect messages you send us by email, contact forms or social media.
We also collect technical data including IP address, browser type, device information, cookies and website usage data.
How we collect your data
We collect data when you place an order, create an account or contact us. We collect some data automatically through cookies and analytics tools when you browse our website. We also receive data from Shopify and our service providers when they process information to deliver the Services.
Why we use your data
We use your personal data to process and deliver your orders, provide customer support, communicate with you, prevent fraud, keep our website secure and meet legal and accounting obligations. We only send marketing emails when you have consented.
Lawful bases for processing
We process your data because it is necessary to perform our contract with you when you place an order, to comply with legal obligations such as tax laws, to protect our legitimate business interests such as fraud prevention, and because you have given consent for marketing communications.
Who we share your data with
We only share your personal data where necessary, including with Shopify, payment providers, delivery companies and IT or website service providers. All partners are required to comply with UK GDPR.
International transfers
Some of our service providers operate outside the United Kingdom. Where this happens, we use legally approved safeguards such as Standard Contractual Clauses to protect your data.
How long we keep your data
We keep order and payment records for six years to comply with HMRC requirements. Account information is kept until you delete your account. Marketing data is kept until you unsubscribe. Customer communications are normally kept for up to 24 months unless required longer for legal reasons.
Your rights
You have the right to access your personal data, request corrections, request deletion, restrict or object to processing, withdraw consent at any time and request a portable copy of your data.
To exercise your rights, email jo@dayasessence.co.uk.
Marketing
You will only receive marketing emails if you have opted in. You can unsubscribe at any time using the link in our emails.
Cookies
We use cookies to run our website, improve performance and analyse usage. You can manage cookies through your browser settings.
Children’s data
Our website is not intended for children under 16 and we do not knowingly collect personal data from children.
Changes to this policy
We may update this policy from time to time. Any updates will appear on this page with a new revision date.
Complaints
If you are unhappy with how we handle your data, please contact us first. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
ICO website: https://ico.org.uk