Privacy policy

    PRIVACY POLICY

    Last updated: 16 April 2026

    This Privacy Policy describes how UKS United Knack System Ltd (trading as Shoplaa, "we", "us", "our") collects, uses, and discloses your personal information when you visit www.shoplaa.shop, use our Services, make a purchase, or otherwise communicate with us. Our Services are hosted on Shopify Inc.

    For the purposes of the UK GDPR, the EU GDPR and other applicable data protection laws, UKS United Knack System Ltd is the data controller of your personal information.

    If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy prevails with respect to the collection, processing, and disclosure of personal information.

    By using or accessing any of our Services, you acknowledge that you have read and understood this Privacy Policy.

    1. Personal Information We Collect

    Depending on how you interact with us, we may collect the following categories of personal information:

    • Contact details: name, billing address, shipping address, phone number, email address.
    • Financial information: payment card details, financial account information, transaction details, payment confirmations. (Note: payment card data is processed securely by Shopify Payments and our payment providers; we do not store full card numbers.)
    • Account information: username, password, preferences and settings.
    • Transaction information: items you view, add to cart, add to wishlist, purchase, return, exchange or cancel, and your order history.
    • Communications: the information you include when contacting customer support.
    • Device information: device type, browser, IP address, network information, unique identifiers.
    • Usage information: how and when you interact with and navigate our Services.
    • Cookies and tracking data: see Section 8 below.

    2. Sources of Personal Information

    We collect personal information from:

    • Directly from you — when you create an account, make a purchase, or communicate with us.
    • Automatically through the Services — via your device and through cookies and similar technologies.
    • Our service providers — including Shopify, payment processors, shipping carriers (Royal Mail and partners), analytics and marketing platforms.
    • Partners and other third parties — where permitted by law.

    3. How We Use Your Personal Information

    We process your personal information for the following purposes:

    • Providing and improving the Services: fulfilling orders, processing payments, arranging shipping, handling returns and exchanges, maintaining your account, personalising your experience.
    • Marketing and advertising: sending promotional emails (with your consent where required), showing targeted advertising based on your interactions with us and other websites.
    • Security and fraud prevention: authenticating accounts, detecting and preventing fraudulent or unauthorised activity.
    • Customer communication: responding to enquiries, providing customer support.
    • Legal compliance: complying with applicable laws, responding to legal requests, enforcing our terms and policies.

    4. Lawful Basis for Processing (UK / EU Residents)

    Where the UK GDPR or EU GDPR applies, we rely on the following lawful bases:

    • Performance of a contract — to process your order, deliver products, handle returns.
    • Legitimate interests — to improve our Services, prevent fraud, and conduct analytics, provided our interests are not overridden by your rights.
    • Consent — for direct marketing emails and for non-essential cookies. You may withdraw consent at any time.
    • Legal obligation — to comply with tax, accounting and regulatory requirements.

    5. How We Disclose Personal Information

    We may share your personal information with:

    • Shopify and other service providers who perform services on our behalf (IT, payment processing, analytics, customer support, cloud storage, fulfilment, shipping).
    • Royal Mail and other shipping carriers to deliver your orders.
    • Marketing and advertising partners — to provide marketing services and personalised advertising. Shopify supports personalised advertising based on your activity across merchants.
    • Third parties at your direction — such as social media logins or widgets.
    • Affiliates within our corporate group.
    • Legal and business transactions — in connection with mergers, acquisitions, bankruptcy, subpoenas, or to enforce our rights or protect safety.

    We do not sell your personal information for monetary consideration.

    6. Relationship with Shopify

    Our Services are hosted by Shopify Inc., which processes personal information about your access to and use of the Services. Information you submit may be transmitted to Shopify and third parties in countries other than where you reside. We use certain Shopify enhanced features that rely on data from your interactions with our store and other Shopify merchants. In those cases, Shopify may act as an independent data controller. To learn more, visit the Shopify Consumer Privacy Policy at https://privacy.shopify.com/en.

    7. Third-Party Websites and Links

    Our Services may contain links to third-party websites. We are not responsible for the privacy or security practices of such sites. Please review their privacy policies before providing any information.

    8. Cookies and Tracking Technologies

    We and our service providers use cookies, pixels and similar technologies to operate the Services, remember your preferences, analyse traffic, and deliver personalised advertising. You can control cookies through your browser settings or our cookie banner. Blocking essential cookies may affect site functionality. We honour the Global Privacy Control (GPC) signal as an opt-out of sale/sharing for targeted advertising where applicable.

    9. Children's Data

    Our Services are not directed at children, and we do not knowingly collect personal information from children under the age of majority in their jurisdiction (16 years of age in the UK/EU). If you believe a child has provided us personal information, please contact us to request deletion.

    10. Security and Retention

    We implement reasonable technical and organisational measures to protect your personal information. However, no method of transmission over the internet is fully secure. We retain personal information for as long as necessary to provide the Services, comply with legal obligations (including tax and accounting requirements — typically 6 years in the UK), resolve disputes, and enforce our contracts.

    11. International Transfers

    Your personal information may be transferred to, stored in, and processed in countries outside the UK and European Economic Area (EEA). When we transfer personal information out of the UK or EEA, we rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Agreement / Addendum, or we transfer to countries deemed to provide an adequate level of protection.

    12. Your Rights and Choices

    Depending on where you live, you may have the following rights:

    • Right of access — to request a copy of the personal information we hold about you.
    • Right to rectification — to request correction of inaccurate information.
    • Right to erasure — to request deletion of your information.
    • Right to portability — to receive a copy in a structured, machine-readable format.
    • Right to object / restrict processing — including objecting to direct marketing and legitimate-interest-based processing.
    • Right to withdraw consent — at any time, without affecting lawfulness of prior processing.
    • Right to opt out of sale/share for targeted advertising. We honour the Global Privacy Control signal.

    To unsubscribe from marketing emails, use the unsubscribe link in any of our emails. You may still receive transactional messages (order confirmations, shipping notifications).

    To exercise any of these rights, contact us using the details in Section 14. We may need to verify your identity before processing your request and will respond within the timeframes required by applicable law (typically one month under UK/EU GDPR).

    13. Complaints

    If you have concerns about how we process your personal information, please contact us first. You also have the right to lodge a complaint with a data protection supervisory authority:

    14. Contact Us

    If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

    UKS United Knack System Ltd (trading as Shoplaa) 3 Greenwich Market, London, SE10 9HZ, United Kingdom Email: delivery@uksystem.co.uk Website: www.shoplaa.shop Company Registration Number: 13060974 VAT Registration Number: GB 433 3839 91

    For the purposes of the UK GDPR and EU GDPR, UKS United Knack System Ltd is the data controller of your personal information.

    15. Changes to This Privacy Policy

    We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised version on this page and update the "Last updated" date at the top. Material changes will be notified as required by applicable law.