Last updated 14 October 2026
This notice explains what personal information Seda Alma collects, why, how long we keep it and what your rights are. We have tried to write it plainly. If anything is unclear, ask us — the contact details are at the end.
The short version
- You can buy as a guest. An account is optional.
- What you buy from us can say something about your intimate life. We treat it as sensitive information and use it only to supply your order and look after you afterwards — and only with your explicit consent, which you give at checkout.
- We do not use advertising or analytics companies, tracking pixels or social media trackers. Our site sets only the cookies it needs to work.
- We remove your details from the shop 90 days after a guest order. A sealed, encrypted record of each purchase is kept for six years because tax law requires it, then deleted automatically.
- We never sell your information, and we never share what you bought with anyone who does not need it to deliver your order or take payment.
Who we are
Seda Alma is a trading name of [LEGAL ENTITY NAME], a company registered in [England and Wales] under company number [COMPANY NUMBER], whose registered office is at [REGISTERED ADDRESS]. We are the controller of your personal information, which means we decide how it is used and are responsible for it.
We are registered with the Information Commissioner’s Office under number [ICO REGISTRATION NUMBER].
You can contact us about privacy at [PRIVACY EMAIL], or by post at the address above.
Why your order is sensitive information
Data protection law gives extra protection to “special category” information, which includes information about a person’s sex life. A record of what you bought from us may reveal that kind of information, so we treat all order details as special category information, even where the law might not strictly require it.
That is why, at checkout, we ask for your explicit consent to use the details of your order. The consent covers that order only, and only these uses: supplying it to you, and handling returns, refunds and questions about it. We do not use it for anything else unless you separately agree (see “Emails from us” below).
What we collect, and why
When you place an order we collect your name, delivery and billing addresses, email address, phone number if you give one, the items you order, and a record that you ticked the consent boxes (the time and the version of the wording). We use this to process, pack, deliver and support your order. Our legal bases: performing our contract with you; for the order details, your explicit consent; and for keeping records, our legal obligations under tax and company law.
Payment is handled by our payment provider, [PAYMENT PROCESSOR]. We never see or store your full card details. The provider receives your name, billing address, email address and the amount, and may use them to check for fraud. [CONFIRM: the provider does not receive the list of items.] Our legal bases: performing our contract with you, and our legitimate interest in preventing fraud.
If you create an account we also keep your sign-in details (your email address and a securely scrambled password), any addresses you save, and your order history, so you can see past orders and check out faster. Our legal basis: performing our contract with you, at your request. Your order history in your account is covered by the consent you gave for each order.
If you join our newsletter we keep your email address and proof that you confirmed your subscription (the time, and the internet address you confirmed it from). Joining always takes two steps: you sign up, then confirm from an email we send. Our legal basis: your consent.
If you ask us to email you about restocks and products suited to what you have bought — a separate, optional box at checkout — we use your order history to choose what to tell you about. Our legal basis: your explicit consent, which you can withdraw at any time.
If you ask to be told when a product is back in stock we keep your email address and the product until we have sent that one email, then delete them. Our legal basis: your request (performing a contract, in a broad sense) and our legitimate interest in answering it.
When you contact us we keep your message and our reply so that we can help you and deal with any follow-up. Our legal basis: our legitimate interest in answering you, or performing our contract if it is about an order.
When you visit the site our server keeps a short technical log for security and to fix faults. The log records the page requested, the time and your browser type, but not your full internet address: the last part is removed, so the log identifies a network rather than a person. It is deleted after 14 days. A separate security log, used to block attacks on the site, keeps full internet addresses and is deleted after 7 days. Our legal basis: our legitimate interest in keeping the site secure and working.
Emails from us
- Order and account emails (order confirmations, delivery updates, password resets, account notices) are part of the service and are not marketing. Their subject lines never say what you bought.
- Newsletter — only if you sign up and confirm. Every newsletter has a one-click unsubscribe link. Our newsletters contain no tracking pixels, so we do not know whether you opened them.
- Restock and suggested-product emails — only if you tick the separate, optional box at checkout.
- We do not send “you left something in your basket” emails unless you have agreed to them.
When we use an email service to send newsletters, it receives your email address and a neutral label such as “newsletter”. It never receives your order history.
Who we share it with
We share only what each recipient needs, and only for the purposes above:
- [DISTRIBUTOR NAME], our fulfilment partner, who packs and dispatches orders: your name, delivery address, phone number if given, and the items in your order.
- The delivery company chosen for your parcel ([CARRIER NAME]): your name, delivery address, and phone number or email address if needed for delivery updates. Not the contents of your parcel.
- [PAYMENT PROCESSOR], our payment provider: as described above.
- SMTP2GO, which delivers the emails we send you: your email address and the content of those emails. SMTP2GO is based in New Zealand, which the UK recognises as providing adequate protection for personal data.
- Oracle, which provides the server our website runs on, in Milan, Italy. The UK recognises the European Economic Area as providing adequate protection.
- Our professional advisers (for example our accountant), and authorities such as HM Revenue & Customs or the police, where the law requires it.
Each of these organisations is bound by a contract or by law to protect your information. None of them may use it for their own marketing.
We do not use advertising networks, analytics services, social media plugins or tracking pixels.
How long we keep it
| What | How long |
|---|---|
| Guest orders | Your personal details are removed from the shop 90 days after your order. |
| Orders placed while signed in to an account | Kept in your account while it is open, so you can see them. |
| Accounts | Until you close your account. If an account is not used for two years — no sign-in and no order — we close it, after emailing you twice first (about a month before, and a week before). |
| Unpaid, failed and cancelled orders | Moved to the bin after 7 days and deleted 30 days later. |
| The sealed record of each purchase | Six years from the date of the order, then deleted automatically. See below. |
| Newsletter subscription | Until you unsubscribe. |
| Back-in-stock requests | Until we send the email you asked for, then deleted the same day. |
| Messages to us | [Two years] after the conversation ends. |
| Website logs | Visit log (internet address shortened): 14 days. Security log (full internet address): 7 days. |
| Backup copies | Our backups are replaced on a rolling basis. Anything removed from the shop has gone from every backup within seven months. |
The sealed record
Tax law requires us to keep a record of every sale for six years. Rather than keep your details in the shop for that long, when we remove them from the shop we first place a sealed record of the purchase in a separate archive.
Each record is encrypted using a key held in a tamper-resistant hardware security module at our cloud provider. Our website can seal records but cannot open them. Opening a record requires a named person at Seda Alma to sign in personally to that security service; every opening is logged by the provider and recorded by us with the reason. We open a record only when the law requires it — for example, a tax inspection, a legal claim or a request from you — and it is deleted automatically after six years.
Your rights
You have the right to:
- ask for a copy of the information we hold about you;
- ask us to correct anything that is wrong;
- ask us to delete your information. We will remove it from the shop straight away; the sealed record of a purchase stays in the archive until its six years are up, because the law requires us to keep it;
- withdraw your consent at any time — to marketing, to restock and suggested-product emails, or to our use of your order details. Withdrawing consent does not affect anything we did before, and we will still keep the sealed record the law requires;
- object to our use of your information where we rely on our legitimate interests;
- ask us to restrict how we use your information while a concern is looked into;
- ask for your information in a portable format, where we hold it because of your consent or our contract with you.
To use any of these rights, contact us at [PRIVACY EMAIL]. We will reply within one month. We may need to confirm your identity first, so that we never send your information to someone else.
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, or 0303 123 1113.
Age
We sell only to adults. You must be 18 or over to order from us, and we do not knowingly collect information about anyone under 18.
Security
Our site is served only over an encrypted connection. Order information is kept on a server we manage ourselves, with access limited to the people who need it. Staff order notification emails do not list the items ordered. The sealed archive is described above.
Changes to this notice
If we change how we use your information, we will update this notice and the date at the top. If a change is significant, we will tell you by email before it takes effect.