Privacy Policy

Persa London is operated by Zahra McGuiness, trading as Persa London, London N1. This policy explains what personal information we collect when you use our website, purchase from us, or contact us — and how we use and protect it.

We collect only what we need. We do not sell your data. We do not share it with advertising networks.

What we collect

When you make a purchase

We collect your name, delivery address, email address, and phone number. This information is used solely to fulfil your order and communicate with you about it.

Payment card details are processed by Stripe, our payment provider. We never see or store your full card number. Stripe's privacy policy is available at stripe.com/gb/privacy.

When you submit a concierge enquiry

We collect your name, email address, and the content of your enquiry. This is used to respond to your request. If we proceed with a bespoke commission, this information becomes part of the order record.

When you visit our website

We collect anonymised analytics data — pages visited, time on page, general geographic region, device type — through Cloudflare Analytics. This data does not include your name, IP address (in full), or any information that identifies you personally. We use it to understand how to improve the site.

When you sign up to our member area

We collect your email address to create and manage your account. We store your order history and any bespoke commission records associated with your account.

How we use your information

• To fulfil and deliver your order
• To communicate with you about your order, commission, or enquiry
• To manage your member account
• To send you a newsletter or seasonal preview, if you have opted in
• To improve our website based on anonymised usage data
• To comply with our legal obligations

We do not use your information for profiling, automated decision-making, or targeted advertising.

Who we share your information with

We share your name and delivery address with Royal Mail or our chosen courier in order to deliver your order. We share payment information with Stripe for payment processing. We do not share your information with any other third party without your consent, except where required by law.

How long we keep your information

Order records, including your name, address, and order details, are kept for seven years to comply with HMRC requirements. Enquiry records where no order followed are deleted after two years. Member account information is kept for as long as you have an active account and for two years after closure.

Your rights

Under UK GDPR, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your information, subject to legal retention requirements
• Object to processing or request that we restrict it
• Receive a copy of your data in a portable format
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us using the details below. We will respond within one month.

Cookies

Our website uses a small number of cookies. You can read our full cookie policy here.

Security

We take reasonable steps to protect your personal information from unauthorised access, loss, or disclosure. Our website is served over HTTPS. Payment processing is handled by Stripe, which is PCI DSS compliant.

Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page and, where appropriate, notify you by email.

Contact