Privacy policy

Last updated: 25 March 2026

RETTO operates this store and website, including all related information, content, features, tools, products, and services, to provide you, the customer, with a curated shopping experience (the Services). RETTO uses Shopify to help provide and operate the Services.

This Privacy Policy explains how we collect, use and disclose your personal information when you visit, use, make a purchase from, or otherwise interact with our Services.

If there is any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy will apply in relation to the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing the Services, you acknowledge that you have read and understood this Privacy Policy.

Personal information we collect

When we use the term personal information, we mean information that identifies you or could reasonably be linked to you.

Depending on how you interact with our Services, we may collect the following types of personal information:

  • Contact details, including your name, billing address, shipping address, telephone number and email address.

  • Order and transaction information, including the products you view, add to your basket, purchase, return, exchange or cancel, and your order history.

  • Payment information, including payment method details, payment confirmations and transaction details. Payment card information is processed securely through our payment providers, and we do not store full card details ourselves.

  • Account information, including your username, password, preferences and account settings, where you create an account.

  • Communications with us, including information you provide when you contact us with an enquiry, support request or other message.

  • Device and technical information, including your IP address, browser type, device information, and information about how you access and use the Services.

  • Usage information, including how and when you browse, interact with or navigate the Services.

How we collect personal information

We may collect personal information:

  • Directly from you, for example, when you place an order, create an account, contact us, sign up to receive updates, or otherwise provide information to us.

  • Automatically, through your use of the Services, including through cookies and similar technologies.

  • From service providers acting on our behalf, such as Shopify, payment processors, delivery partners and website service providers, where needed to operate the store and fulfil orders.

We do not deliberately purchase broad third-party marketing or personal data lists for the business's day-to-day operations.

How we use your personal information

We use your personal information to operate and improve the Services, including to:

Provide our products and services

  • Process and fulfil orders;
  • Take payment and send order confirmations;
  • Arrange delivery;
  • Manage returns, refunds or exchanges;
  • Maintain your account, where relevant.

    Communicate with you

    • Respond to enquiries and support requests;
    • Send service-related communications, such as order updates or account notices;
    • Provide customer care and resolve issues.

      Improve the store and customer experience

      • Understand how customers use the website.
      • Improve the performance, usability and content of the store;
      • Remember preferences and provide a smoother shopping experience.

      Marketing

      • Send promotional emails where you have chosen to receive them or where otherwise permitted by law;

      • Understand how our marketing performs.

      You can unsubscribe from marketing emails at any time using the unsubscribe link in those emails.

      Security and fraud prevention

      • Help detect, prevent and investigate fraud, misuse or other unlawful activity;

      • Help protect our customers, our business and the Services.

      Legal and regulatory reasons

      • Comply with legal obligations;
      • Respond to lawful requests from regulators, courts or law enforcement;
      • Establish, exercise or defend legal claims.

      How we disclose personal information

      We disclose personal information only when reasonably necessary to run the business and provide the Services. This may include disclosure:

      • to Shopify, which hosts and supports our online store;
      • to payment providers, in order to process payments securely;
      • to delivery and fulfilment providers, in order to dispatch and deliver orders;
      • to service providers who help us operate the website, store data, provide analytics or support customer service;
      • where required to comply with the law or protect our legal rights.

      We do not sell your personal information in the ordinary sense of the word.

      If, in the future, RETTO grows and works with additional specialist service providers or partners, we may disclose relevant information to them only where reasonably necessary and in line with this Privacy Policy.

      Shopify

      Our store is hosted on Shopify. Shopify provides the e-commerce platform that allows us to sell our products and services to you.

      When you use our store, some of your personal information will be processed by Shopify to provide and improve its services, including hosting, checkout, payments, security, and store functionality.

      You can read more about how Shopify processes personal information in the Shopify Consumer Privacy Policy.

      Cookies and similar technologies

      We and our service providers, including Shopify, use cookies and similar technologies to operate the website, remember preferences, understand website usage, improve performance, and support security and analytics.

      Depending on your location, you may be presented with choices about certain cookies or similar technologies.

      Third-party links

      Our Services may contain links to third-party websites or platforms. If you follow a link to a third-party site, you should review its privacy policy and terms. We are not responsible for the privacy, security or content of third-party websites.

      Children’s data

      The Services are not intended for children, and we do not knowingly collect personal information from children. If you believe that a child has provided us with personal information, please contact us so that we can review and, where appropriate, delete it.

      Security and retention

      We take reasonable steps to protect your personal information. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

      We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the Services, complying with legal obligations, resolving disputes, and enforcing our agreements.

      Your rights

      Depending on where you live, including if you are in the UK or EEA, you may have rights in relation to your personal information, including the right to:

      • Request access to the personal information we hold about you;
      • Request correction of inaccurate personal information;
      • Request deletion of your personal information;
      • Request restriction of processing in certain circumstances;
      • Object to certain processing;
      • Withdraw consent where we rely on consent;
      • Request portability of your personal information in certain cases.

      These rights are not absolute and may be limited in some circumstances.

      If you would like to exercise any of these rights, please contact us using the details below.

      You may also have the right to complain to your local data protection authority.

      International transfers

      Because some of our service providers, including Shopify, may process or store data outside the UK, we may transfer your personal information outside the UK.

      Where required, we will use appropriate safeguards for such transfers in accordance with applicable data protection law.

      Changes to this Privacy Policy

      We may update this Privacy Policy from time to time to reflect changes in the business, the Services, legal requirements or how we use personal information.

      When we do so, we will post the updated version on this page and revise the “Last updated” date above.

      Contact

      If you have any questions about this Privacy Policy, our privacy practices, or if you would like to exercise your rights, please contact us at:

      Email: support@getretto.com

      Address: 3 Coach House Cottages, Chedington, Dorset, DT8 3HY, United Kingdom

      For the purposes of applicable data protection law, RETTO is the data controller of your personal information.