Privacy Policy

Elystra Living

Last updated: 4 December 2025

Elystra Living respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you visit or make a purchase from our website  or otherwise interact with our services.

Our website is built using WordPress, WooCommerce, and Elementor. This Privacy Policy complies with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the Privacy and Electronic Communications Regulations (PECR).

By using our Services, you acknowledge that you have read and understood this Privacy Policy.

Who We Are

Elystra Living is an online retailer operating in the United Kingdom.

Email: info@elystraliving.co.uk
Location: United Kingdom

For the purposes of applicable data protection laws, Elystra Living is the data controller responsible for your personal data.

Scope of This Privacy Policy

This Privacy Policy applies to personal data collected through our website, WooCommerce store, Elementor forms, and related Services. It does not necessarily apply to personal data collected offline or through third-party websites that we do not control, although we will treat any offline personal data in a manner consistent with this Policy.

Our Site may contain links to third-party websites or services. We are not responsible for the content or privacy practices of those third parties.

Personal Information We Collect

We collect personal information that you voluntarily provide when using our Services. This includes your name, email address, billing and delivery address, telephone number, account login details if you create an account, order details, purchase history, and communications you send to us via email, contact forms, or customer support.

When you place an order through WooCommerce, we collect information necessary to process your order, including billing and shipping details, products purchased, order totals, and transaction status. Payment details are processed securely by third-party payment providers such as Stripe or PayPal. We do not store or have access to your full card or payment information.

If you submit information through Elementor forms, such as contact forms or newsletter sign-ups, we collect only the information you choose to provide and use it solely for the purpose stated at the point of collection.

We may also collect reviews, feedback, or other content that you voluntarily submit on the Site.

Information Collected Automatically

When you visit or interact with our Site, we may automatically collect certain information, including your IP address, browser type and version, device and operating system information, pages viewed, actions taken on the Site, date and time of access, and approximate location data derived from your IP address.

Our website uses cookies and similar technologies set by WordPress, WooCommerce, Elementor, and third-party plugins to ensure proper functionality, enable shopping cart and checkout features, remember user preferences, and analyse website usage. For more information, please refer to our Cookie Policy.

Information from Third Parties

We may receive personal data from trusted third parties, including payment processors, delivery and logistics providers, analytics providers, email marketing platforms, and social media platforms where you interact with us or choose to link an account.

How We Use Your Personal Information

We use personal information to operate, maintain, and provide our Services; to process orders, payments, deliveries, returns, and refunds; to manage customer accounts; to respond to enquiries and provide customer support; to communicate with you about your orders or service-related matters; to improve and personalise our website and user experience; to conduct analytics and website optimisation; to send marketing communications where permitted by law; to prevent fraud, misuse, or unauthorised access; and to comply with legal and regulatory obligations.

Legal Bases for Processing

We process personal data where it is necessary to perform a contract with you, such as fulfilling an order placed through WooCommerce; where required to comply with legal obligations; where it is in our legitimate business interests and those interests do not override your rights; or where you have provided consent, particularly for marketing communications and non-essential cookies.

You may withdraw your consent at any time.

Marketing Communications

Where permitted by law, we may send you marketing communications by email about our products, services, or promotions. You may opt out at any time by clicking the “unsubscribe” link in our emails or by contacting us directly.

Even if you opt out of marketing communications, we may still send transactional or service-related messages, such as order confirmations, delivery updates, or account notifications.

How We Share Personal Information

We may share personal data with payment service providers, delivery and logistics partners, website hosting providers, WordPress and WooCommerce service providers, analytics and marketing providers, professional advisers such as legal or accounting professionals, and public authorities where required by law.

We do not sell your personal data.

International Data Transfers

Some of our service providers may be located outside the United Kingdom or the European Union. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as adequacy decisions or Standard Contractual Clauses, in accordance with applicable data protection laws.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including fulfilling orders, meeting tax and accounting obligations, resolving disputes, and enforcing our agreements. When personal data is no longer required, it is securely deleted or anonymised.

Children’s Privacy

Elystra Living does not knowingly collect or process personal data from individuals under the age of 18. Our Services, including our WooCommerce store and Elementor forms, are not intended for children.

If we become aware that personal data has been provided by a person under 18, we will take steps to delete such information promptly. If you believe that a child has provided us with personal data, please contact us immediately.

Your Data Protection Rights

Under UK and EU data protection laws, you have the right to access your personal data, request correction of inaccurate data, request deletion of your data, object to or restrict processing, request data portability, and withdraw consent at any time.

To exercise your rights, please contact info@elystraliving.co.uk

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the United Kingdom or your local EU data protection authority.

Security Measures

We use appropriate technical and organisational measures to protect personal data, including secure hosting, access controls, and encryption where appropriate. However, no system or method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, legal requirements, or data processing practices. Any changes will be posted on this page and the “Last updated” date will be revised accordingly.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact:

Elystra Living
Email: info@elystraliving.co.uk
United Kingdom

Privacy Policy | Elystra Living
Legal & policies

Your privacy matters to us

How we collect, use and protect your personal data — written in plain English, with your rights front and centre.

Last updated: 4 December 2025 5 minute read

Elystra Living respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, store and protect your personal information when you visit or make a purchase from our website, or otherwise interact with our services. By using our services, you acknowledge that you have read and understood this Privacy Policy.

UK GDPR compliant EU GDPR compliant PECR compliant
01
The data controller

Who we are

Elystra Living is an online retailer operating in the United Kingdom. For the purposes of applicable data protection laws, Elystra Living is the data controller responsible for your personal data.

Data controller details
Trading nameElystra Living
Registered companyElystra Living Ltd
LocationUnited Kingdom
02
What this policy covers

Scope of this Privacy Policy

This Privacy Policy applies to personal data collected through our website, WooCommerce store, Elementor forms and related services. It does not necessarily apply to personal data collected offline or through third-party websites we do not control, although we will treat any offline personal data in a manner consistent with this Policy.

Third-party linksOur site may contain links to third-party websites or services. We are not responsible for the content or privacy practices of those third parties and recommend that you review their own policies.
03
Technology we use

Our website platform

Our website is built using WordPress, WooCommerce and Elementor. This Privacy Policy complies with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the Privacy and Electronic Communications Regulations (PECR).

04
What you give us directly

Personal information we collect

We collect personal information that you voluntarily provide when using our services. This may include:

Name, email address, telephone number
Billing and delivery address
Account login details, if you create an account
Order details and purchase history
Communications you send us via email, contact forms or customer support
Reviews, feedback or other content you voluntarily submit
Payment security — we never store your card detailsPayment details are processed securely by third-party payment providers such as Stripe or PayPal. We do not store or have access to your full card or payment information.

If you submit information through Elementor forms — such as contact forms or newsletter sign-ups — we collect only the information you choose to provide and use it solely for the purpose stated at the point of collection.

05
Collected when you browse

Information collected automatically

When you visit or interact with our site, we may automatically collect certain technical information, including:

IP address, browser type and version
Device and operating system information
Pages viewed and actions taken on the site
Date and time of access
Approximate location data derived from your IP address

Our website uses cookies and similar technologies set by WordPress, WooCommerce, Elementor and third-party plugins to ensure proper functionality, enable shopping cart and checkout features, remember user preferences, and analyse website usage. For more information, please refer to our Cookie Policy.

06
Data received from others

Information from third parties

We may receive personal data from trusted third parties, including:

Payment processors (e.g. Stripe, PayPal)
Delivery and logistics providers
Analytics providers
Email marketing platforms
Social media platforms where you interact with us or choose to link an account
07
What we do with your data

How we use your personal information

We use personal information to:

PurposeExamples
Provide our servicesOperate, maintain and improve the website
Process your orderPayments, deliveries, returns and refunds
Manage your accountAccount creation, login, order history
Customer supportRespond to enquiries and complaints
Service communicationsOrder confirmations, delivery updates
Website improvementAnalytics, A/B testing, personalisation
MarketingPromotional emails where permitted by law
Fraud preventionDetect and prevent misuse or unauthorised access
Legal complianceMeet regulatory and statutory obligations
08
Why we are allowed to process your data

Legal bases for processing

Under UK and EU GDPR, we must have a legal basis for processing your personal data. We rely on one or more of the following:

Contract — processing is necessary to perform a contract with you, such as fulfilling an order placed through WooCommerce.
Legal obligation — processing is required to comply with our legal obligations.
Legitimate interests — processing is in our legitimate business interests and those interests do not override your rights.
Consent — where you have given consent, particularly for marketing communications and non-essential cookies.
You may withdraw your consent at any timeWhere we process data on the basis of consent, you can withdraw it at any time by contacting us or using the unsubscribe link in any marketing email.
09
Promotional communications

Marketing communications

Where permitted by law, we may send you marketing communications by email about our products, services or promotions. You may opt out at any time by clicking the “unsubscribe” link in our emails or by contacting us directly.

Service messages are separate from marketingEven if you opt out of marketing communications, we may still send transactional or service-related messages, such as order confirmations, delivery updates or account notifications.
10
Who else can see your data

How we share personal information

We may share personal data with the following categories of recipient:

Payment service providers (e.g. Stripe, PayPal)
Delivery and logistics partners
Website hosting providers
WordPress and WooCommerce service providers
Analytics and marketing providers
Professional advisers such as legal or accounting professionals
Public authorities where required by law
We do not sell your personal dataYour personal data is never sold to third parties for commercial purposes.
11
Data leaving the UK or EU

International data transfers

Some of our service providers may be located outside the United Kingdom or the European Union. Where personal data is transferred internationally, we ensure appropriate safeguards are in place — such as adequacy decisions or Standard Contractual Clauses — in accordance with applicable data protection laws.

12
How long we keep data & children

Data retention & children’s privacy

Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including fulfilling orders, meeting tax and accounting obligations, resolving disputes and enforcing our agreements. When personal data is no longer required, it is securely deleted or anonymised.

Children’s privacy

Elystra Living does not knowingly collect or process personal data from individuals under the age of 18. Our services, including our WooCommerce store and Elementor forms, are not intended for children.

If a child has provided us with dataIf we become aware that personal data has been provided by a person under 18, we will take steps to delete such information promptly. If you believe that a child has provided us with personal data, please contact us immediately at info@elystraliving.co.uk.
13
What you can ask us to do

Your data protection rights

Under UK and EU data protection laws, you have the following rights in relation to your personal data:

Right to access
Request a copy of the personal data we hold about you.
Right to rectification
Request correction of inaccurate or incomplete data.
Right to erasure
Request deletion of your personal data (“right to be forgotten”).
Right to object
Object to or restrict the processing of your data.
Right to portability
Request your data in a structured, machine-readable format.
Right to withdraw consent
Withdraw consent at any time where processing is based on it.
To exercise any of your rightsPlease contact us at info@elystraliving.co.uk. We will respond within one month as required by law.
14
How we keep your data safe

Security measures

We use appropriate technical and organisational measures to protect personal data, including secure hosting, access controls, and encryption where appropriate.

No system is completely secureNo method of transmission over the internet is completely secure, and we cannot guarantee absolute security. We will notify you of any breach affecting your data as required by law.
15
Updates & revisions

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, legal requirements or data processing practices. Any changes will be posted on this page and the “Last updated” date will be revised accordingly.

16
Reach us & the regulator

Contact us & the ICO

If you have any questions about this Privacy Policy or our data practices, please contact:

Get in touch
OrganisationElystra Living
LocationUnited Kingdom
Right to complain to the regulatorYou also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the United Kingdom, or your local EU data protection authority, if you believe your data protection rights have been breached. Visit ico.org.uk for more information.
We’re here to help

A question about your data?

If anything in this policy is unclear, or you would like to exercise any of your rights, our team will respond within one business day.

UK GDPR compliant
Your data, handled lawfully
Secure payments
We never store card details
We never sell your data
No third-party data sales, ever
Easy to exercise rights
Email us anytime
Scroll to Top