Privacy policy
Last updated: 17 July 2026
Syl’a’Vie Swimwear Ltd respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you:
• Visit or use our website.
• Create an account.
• Place an order.
• Contact us.
• Complete a returns form.
• Subscribe to receive marketing communications.
• Enter a promotion or competition.
• Interact with us through social media.
• Otherwise use our products or services.
It also explains your rights under applicable data-protection law.
This Privacy Policy should be read alongside our Terms and Conditions, Shipping Policy, Returns Policy and Cookie Policy.
Who we are
Syl’a’Vie Swimwear Ltd is the controller responsible for the personal information described in this Privacy Policy.
Company name: Syl’a’Vie Swimwear Ltd
Company registration number: 16691746
VAT registration number: 502 6887 84
Customer service and privacy email: info@sylavieswimwear.com
Registered office and correspondence address:
Syl’a’Vie Swimwear Ltd
S202 Weston House
The Maltings
Station Road
Sawbridgeworth
Herts
United Kingdom
CM21 9FP
Important: This is our registered office and correspondence address only. It is not our returns address and products must not be returned to this address.
Customers wishing to make a return must first contact us at info@sylavieswimwear.com and follow our returns procedure. Where a return is eligible, access to the relevant returns form and the correct returns address will be provided.
We cannot guarantee that products sent to our registered office or correspondence address without authorisation will be received, identified or processed as a valid return.
When this policy refers to “Syl’a’Vie”, “we”, “us” or “our”, it means Syl’a’Vie Swimwear Ltd.
Data protection law
We process personal information in accordance with applicable data-protection and privacy law, including:
• The UK General Data Protection Regulation, referred to as the UK GDPR.
• The Data Protection Act 2018.
• The Privacy and Electronic Communications Regulations 2003, referred to as PECR.
• Other applicable privacy and consumer-protection legislation.
The Information Commissioner’s Office, referred to as the ICO, is the UK supervisory authority for data protection.
Personal information we collect
The personal information we collect depends on how you interact with us.
Identity information
This may include:
• Full name.
• Title.
• Account username.
• Customer number.
• Order number.
• Tax, customs or national identification information where required for international delivery.
Contact information
This may include:
• Billing address.
• Delivery address.
• Email address.
• Telephone number.
• Social-media username where you contact us through social media.
Order and transaction information
This may include:
• Products ordered.
• Size, colour and style selections.
• Customisation requests.
• Measurements supplied by you.
• Order value.
• Delivery method.
• Discount codes used.
• Payment status.
• Refund, exchange and return information.
• Returns-form information.
• Customer-service correspondence.
• Complaints and dispute information.
Payment information
Payments are processed through payment services made available through Shopify or another approved payment provider.
We may receive limited information relating to a transaction, such as:
• Payment confirmation.
• Payment method type.
• Billing name and address.
• The final digits of a payment card.
• Payment-provider reference number.
• Payment status.
• Fraud or risk information.
We do not normally receive or store your complete payment-card number or card-security code.
We do not currently offer PayPal or Klarna. If our payment options change, this Privacy Policy may be updated accordingly.
Delivery and customs information
This may include:
• Delivery address.
• Delivery instructions.
• Tracking information.
• Delivery photographs.
• Delivery signatures.
• Safe-place instructions.
• Collection-point information.
• Customs declarations.
• Recipient identification or tax numbers required by the destination country.
• Communications with couriers, customs authorities or shipping providers.
Sizing and measurement information
Where you request sizing guidance or a customised product, we may collect:
• Height.
• Clothing size.
• Bust, waist, hip or other garment-related measurements.
• Fit preferences.
• Information about how you would like a product to fit.
• Photographs voluntarily supplied to help explain a fit or product issue.
We ask that you only provide information reasonably necessary for sizing, customisation or customer service.
Technical and website-usage information
When you visit our website, we or our authorised service providers may collect:
• Internet Protocol address.
• Browser type and version.
• Device type.
• Operating system.
• Time zone.
• Pages viewed.
• Links clicked.
• Referring website.
• Session information.
• Cookie identifiers.
• Basket activity.
• Checkout activity.
• Website interaction information.
• General location derived from an IP address.
Some of this information is collected using cookies or similar technologies.
Marketing information
This may include:
• Whether you have subscribed to marketing.
• Your marketing preferences.
• Email delivery information.
• Email opens and clicks, where enabled.
• Products viewed.
• Shopping interests.
• Responses to promotions or campaigns.
• Advertising interaction information.
Communications
We may retain communications sent through:
• Email.
• Website contact forms.
• Returns forms.
• Social media.
• Telephone.
• Payment disputes.
• Courier investigations.
• Reviews or customer feedback.
Photographs and evidence
Where reasonably necessary to investigate an order, delivery, return or product issue, we may collect:
• Photographs of products.
• Photographs of packaging.
• Delivery photographs.
• Return-condition photographs.
• Screenshots.
• Tracking evidence.
• Other evidence supplied by you or a courier.
Special-category information
We do not intentionally request or routinely process special-category personal information, such as information concerning health, ethnicity, religion, political opinions or sexual orientation.
A customer may occasionally disclose health or disability information when requesting an adjustment or discussing fit. Where this happens, we will only use the information where necessary and where we have an appropriate lawful basis and additional legal condition.
Please avoid sending sensitive personal information unless it is genuinely necessary.
How we collect personal information
We collect personal information:
• Directly from you when you place an order.
• When you create or use a customer account.
• When you contact us.
• When you complete a contact or returns form.
• When you subscribe to marketing.
• When you provide measurements or customisation instructions.
• Automatically when you use our website, through cookies and similar technologies.
• From Shopify.
• From payment providers.
• From Sendcloud.
• From FedEx, Evri and Royal Mail.
• From customs authorities where relevant.
• From fraud-prevention and payment-verification providers.
• From social-media platforms when you interact with our accounts.
• From analytics or advertising providers where they are enabled and permitted.
• From another person where they place an order or enquiry on your behalf.
How we use personal information
Processing and fulfilling orders
We use personal information to:
• Accept and administer orders.
• Take or verify payment.
• Make and customise products.
• Confirm sizing or measurements.
• Arrange dispatch and delivery.
• Provide tracking.
• Complete customs documentation.
• Process returns, exchanges and refunds.
• Communicate with you about an order.
Our usual lawful basis is that the processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
Customer service
We use personal information to:
• Answer questions.
• Provide sizing guidance.
• Respond to complaints.
• Investigate delivery issues.
• Resolve product or fit concerns.
• Handle courier claims.
• Administer returns and exchanges.
• Provide after-sales support.
Depending on the circumstances, our lawful basis may be contract, legal obligation or legitimate interests.
Our legitimate interests include providing effective customer service, maintaining accurate records and resolving disputes.
Returns administration
We use information provided by email and through our returns process to:
• Confirm whether an item is eligible for return.
• Provide access to the appropriate returns form.
• Provide the correct returns address.
• Identify returned items.
• Assess the condition of returned products.
• Process exchanges or refunds.
• Investigate lost or disputed returns.
Our usual lawful bases are contract, legal obligation and our legitimate interests in administering returns properly and preventing fraud or loss.
Legal and regulatory compliance
We may process personal information to:
• Maintain accounting and tax records.
• Meet VAT obligations.
• Respond to lawful requests.
• Comply with consumer-protection law.
• Complete customs documentation.
• Protect our legal rights.
• Respond to regulators, courts or law-enforcement bodies.
Our lawful basis is compliance with a legal obligation or, where appropriate, our legitimate interests in establishing, exercising or defending legal claims.
Fraud prevention and security
We may use personal information to:
• Verify transactions.
• Identify suspicious activity.
• Prevent fraud.
• Protect our website and payment systems.
• Investigate false claims.
• Respond to chargebacks.
• Enforce our Terms and Conditions.
• Prevent misuse of discount codes, returns or refunds.
Our lawful basis is our legitimate interest in protecting our business, customers and payment systems from fraud, abuse and unlawful activity.
Website operation and improvement
We may use information to:
• Operate the website.
• Keep the website secure.
• Remember basket contents.
• Remember preferences.
• Process checkout.
• Diagnose technical problems.
• Analyse website performance.
• Improve navigation, products and content.
• Understand how customers use the website.
Strictly necessary processing is carried out because it is necessary to provide the website or service requested.
Analytics and other non-essential technologies will only be used in accordance with your cookie choices and applicable law.
Marketing
Where permitted by law, we may use personal information to:
• Send newsletters.
• Tell you about products, collections, launches or promotions.
• Personalise marketing content.
• Measure marketing performance.
• Display relevant advertising.
Marketing communications may be provided using functions available through Shopify or another service provider that we introduce in the future.
We will normally rely on consent to send marketing emails to individuals who have opted in.
In limited circumstances, PECR may allow us to contact an existing customer about our own similar products, provided that the customer was offered an opportunity to opt out when their details were collected and every message includes an unsubscribe option.
You may withdraw your consent or object to direct marketing at any time.
Tree-planting contribution
We may use a third-party charity, environmental organisation or Shopify application to arrange a contribution of £1 from qualifying orders towards tree planting.
Where necessary, we may share limited order information with the relevant provider to record, verify or administer the contribution.
We will not share more personal information than reasonably necessary for this purpose.
Depending on how the scheme operates, the provider may receive information such as:
• An order reference.
• The date of the order.
• Confirmation that a qualifying order was completed.
• The value or number of contributions due.
The provider should not require a customer’s complete delivery address or payment-card information solely to record a tree-planting contribution.
Our lawful basis is our legitimate interest in administering our environmental contribution scheme and maintaining accurate contribution records.
If the provider or arrangement changes, we may update this policy.
Reviews, competitions and social-media activity
We may process information to:
• Administer competitions or giveaways.
• Verify entries.
• Contact winners.
• Respond to social-media messages.
• Repost customer content where permission has been given.
• Administer reviews and feedback.
The applicable lawful basis may be consent, contract or legitimate interests, depending on the activity.
Our lawful basis
We only process personal information where we have a valid lawful basis.
Contract
Processing is necessary to enter into or perform a contract with you, including fulfilling an order, arranging delivery and administering a return.
Legal obligation
Processing is necessary to comply with laws applying to us, including accounting, tax, consumer-protection and regulatory obligations.
Legitimate interests
Processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.
Our legitimate interests may include:
• Operating and improving our business.
• Providing customer service.
• Administering returns.
• Preventing fraud.
• Protecting our legal rights.
• Maintaining records.
• Securing our website.
• Understanding business performance.
• Administering our tree-planting contribution scheme.
Consent
We rely on consent where you have been given a genuine choice, including for certain marketing communications and non-essential cookies.
You may withdraw consent at any time. Withdrawal will not affect processing carried out before consent was withdrawn.
Marketing communications
We may send marketing emails only where permitted by law.
You can stop receiving marketing communications at any time by:
• Using the unsubscribe link in an email.
• Adjusting your account or marketing preferences where available.
• Contacting us at info@sylavieswimwear.com.
Unsubscribing from marketing will not prevent us from sending essential service communications relating to:
• An order.
• Payment.
• Production.
• Delivery.
• Customs.
• A return.
• An exchange.
• A refund.
• A complaint.
• A legal or security notice.
Where enabled, marketing emails may contain tracking technologies that record information such as:
• Whether an email was delivered.
• Whether it was opened.
• Links clicked.
• The time and date of interaction.
• Device or browser information.
• Approximate location derived from an IP address.
We may use this information to understand engagement and improve our communications, where permitted by law and subject to your choices.
Cookies and similar technologies
Our Shopify website uses cookies and similar technologies.
Cookies are small files or identifiers stored on or accessed from a device.
They may be used for:
• Operating the website.
• Keeping the website secure.
• Remembering basket contents.
• Remembering preferences.
• Enabling checkout.
• Preventing fraud.
• Measuring website use.
• Improving performance.
• Supporting social-media functions.
• Measuring advertising.
• Personalising content or advertising.
Strictly necessary cookies may be used without consent where they are essential to provide a service requested by you.
Where required by law, analytics, advertising, personalisation and social-media cookies will not be activated unless you consent through our cookie-control tool.
Our cookie-control tool should allow you to:
• Accept non-essential cookies.
• Reject non-essential cookies.
• Select permitted cookie categories.
• Change or withdraw your consent later.
Shopify may place cookies that are necessary to operate the online store, basket, checkout, security and customer-account functions.
We may also use Shopify analytics to understand general website and sales performance.
Where enabled, our website may use additional analytics or advertising services, including:
• Google Analytics or other Google technologies.
• Meta Pixel or other Meta technologies.
These services will only be used in accordance with applicable law and your cookie choices.
Further information about the cookies currently active on our website, including their providers, purposes and expiry periods, will be available through our cookie banner or Cookie Policy.
You may also manage cookies using your browser settings, although blocking essential cookies may affect website functionality.
Non-essential cookies generally require clear information and valid consent. Merely mentioning them in a privacy policy is not enough.
Who we share personal information with
We do not sell personal information.
We may share personal information where reasonably necessary with the following categories of recipient.
Shopify
Our online store is hosted and operated using Shopify.
Shopify may process customer and website information to provide:
• Website hosting.
• Basket and checkout functions.
• Order administration.
• Payment-related services.
• Customer accounts.
• Security.
• Analytics.
• Customer privacy functions.
• Marketing functions where enabled.
Shopify may act as a processor on our behalf or, for certain activities, as a separate controller with its own privacy responsibilities.
Payment providers
Payment information may be processed by Shopify Payments, card networks, banks and other payment-service providers made available at checkout.
We do not currently offer Klarna or PayPal.
Sendcloud
We use Sendcloud to help:
• Create shipping labels.
• Select and administer courier services.
• Transfer delivery information to couriers.
• Provide tracking.
• Investigate deliveries.
• Administer shipping protection or courier claims where applicable.
Couriers and postal operators
We may share the information necessary to deliver an order with:
• FedEx.
• Evri.
• Royal Mail.
• Their international delivery partners.
• Local postal operators.
• Customs and border authorities.
The information shared may include:
• Recipient name.
• Delivery address.
• Email address.
• Telephone number.
• Parcel details.
• Customs information.
• Order value or product description where legally required.
Tree-planting provider
We may share limited order or contribution information with the charity, environmental organisation or Shopify application used to administer our £1 tree-planting contribution.
We will only share information reasonably necessary to record or verify the contribution.
Other service providers
We may also share information where necessary with:
• Website and technical-support providers.
• Cloud-storage and software providers.
• Email and communication providers.
• Analytics providers.
• Advertising platforms where enabled and consented to.
• Fraud-prevention and security providers.
• Accountants, bookkeepers and tax advisers.
• Insurers.
• Legal advisers.
• Payment-dispute and chargeback providers.
• Regulators, courts, law-enforcement bodies or public authorities where required.
• A purchaser, investor or successor in connection with a genuine sale, restructuring or transfer of the business.
These organisations may act as processors handling information on our instructions or as separate controllers with their own legal responsibilities.
We only share information that is reasonably necessary for the relevant purpose.
A privacy notice must identify the recipients or categories of recipients with whom personal information is shared.
International transfers
Shopify and some of our other service providers may process or store personal information outside the United Kingdom.
International couriers may also transfer delivery and customs information to organisations located in the destination country or countries through which a parcel travels.
Where personal information is transferred internationally, we will take reasonable steps to ensure that an appropriate legal safeguard applies.
Depending on the destination and provider, this may include:
• A UK adequacy regulation.
• The UK International Data Transfer Agreement.
• The UK Addendum to approved contractual clauses.
• Another legally recognised transfer mechanism.
You may contact us at info@sylavieswimwear.com for further information about safeguards applying to relevant transfers.
How long we keep personal information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, fraud-prevention and dispute-resolution purposes.
Typical retention periods may include:
• Order and transaction records: generally retained for up to six years after the end of the relevant financial or contractual period where needed for tax, accounting or legal purposes.
• Customer-service communications: generally retained for up to six years where they may be relevant to an order, complaint or legal claim.
• Returns and refund records: generally retained for up to six years where relevant to accounting, consumer rights, fraud prevention or legal claims.
• Payment information: retained only to the extent made available through Shopify or a payment provider and for as long as necessary for accounting, fraud and dispute purposes.
• Courier and customs records: retained for as long as reasonably necessary to complete delivery, investigate claims and comply with legal obligations.
• Marketing information: retained until you unsubscribe, withdraw consent or we determine that the information is no longer required.
• Suppression records: limited information may be retained after you unsubscribe to ensure that we respect your request.
• Website analytics information: retained according to the settings and expiry periods of the applicable analytics service and your cookie choices.
• Fraud and chargeback records: retained for as long as reasonably necessary to prevent fraud and establish, exercise or defend legal claims.
• Tree-planting contribution records: retained for as long as reasonably necessary to verify contributions and maintain appropriate business records.
We may retain information for longer where:
• A legal dispute is ongoing.
• A regulator or authority requires it.
• A legal obligation applies.
• It is required to establish, exercise or defend legal claims.
Information may be securely deleted, anonymised or aggregated when it is no longer required.
Data security
We take appropriate technical and organisational measures to protect personal information against:
• Unauthorised access.
• Accidental loss.
• Destruction.
• Alteration.
• Misuse.
• Unlawful disclosure.
Measures may include:
• Password controls.
• Restricted staff access.
• Secure payment processing.
• Secure website connections.
• Device and software security.
• Staff procedures.
• Appropriate arrangements with service providers.
• Backups and access controls where appropriate.
No website, electronic transmission or storage system can be guaranteed to be completely secure.
If we become aware of a personal-data breach, we will investigate it and notify the ICO and affected individuals where required by law.
Your data protection rights
Depending on the circumstances, you may have the right to:
• Be informed about how your personal information is used.
• Request access to personal information held about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of information in certain circumstances.
• Request restriction of processing.
• Object to processing based on legitimate interests.
• Object to direct marketing at any time.
• Request transfer of certain information in a portable format.
• Withdraw consent where processing is based on consent.
• Not be subject to certain decisions based solely on automated processing.
These rights are not absolute and may be subject to legal exceptions.
How to exercise your rights
To exercise a data-protection right, contact:
info@sylavieswimwear.com
Please provide enough information for us to understand and verify your request.
We may ask for proof of identity where reasonably necessary to protect personal information from unauthorised disclosure.
We will normally respond within one month, although the response period may be extended where permitted by law for a complex or numerous request.
You will not normally have to pay a fee. Applicable law may permit a reasonable fee or refusal where a request is manifestly unfounded or excessive.
Automated decision making and profiling
We do not ordinarily make decisions about customers based solely on automated processing that produce legal or similarly significant effects.
However, Shopify, payment providers, fraud-prevention providers and advertising platforms may use automated tools to:
• Assess payment risk.
• Identify suspected fraud.
• Prevent unauthorised transactions.
• Personalise advertising where consent has been given.
• Create audience categories.
• Measure campaign performance.
Where an automated payment or fraud decision prevents an order from being completed, you may contact us for further information.
In some cases, the decision may be controlled by the relevant payment provider rather than Syl’a’Vie Swimwear Ltd.
Children's information
Our website and products are not specifically directed at children.
A person placing an order must be legally capable of entering into the purchase contract or have the involvement of a parent or guardian where required.
We do not knowingly collect personal information from children for marketing without appropriate consent.
If you believe that a child has supplied personal information improperly, please contact us at info@sylavieswimwear.com.
Link to other websites
Our website may contain links to third-party websites, social-media platforms or services.
We are not responsible for the privacy practices of those third parties.
You should review the privacy information provided by the relevant third party before submitting personal information.
Complaints
Please contact us first if you have concerns about how we use your personal information so that we can try to resolve the issue.
You can contact us at:
info@sylavieswimwear.com
You also have the right to complain to the Information Commissioner’s Office.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
The ICO’s current contact information and complaints process are available through its official website.
Changes to this privacy policy
We may update this Privacy Policy from time to time to reflect:
• Changes to our business.
• Changes to our website or service providers.
• Changes to the ways we use personal information.
• Changes in law or regulatory guidance.
The updated version will be published on this page with a revised “last updated” date.
Where a change materially affects how we use personal information, we will provide additional notice where required.