Privacy Policy

Last updated: 13 March 2026

This Privacy Policy explains how Risza Lopes da Cruz collects and uses personal data when you use this website.

We comply with the UK GDPR and the Data Protection Act 2018.

1. Information We Collect

When you place an order or contact us, we may collect:

• name

• email address

• billing address

• shipping address

• phone number (if provided)

• order details

Payments are processed by third-party payment providers through Squarespace, and we do not store payment card information.

2. How We Use Your Data

Your information may be used to:

• process and deliver orders

• communicate about your purchase

• provide customer support

• send newsletters or marketing emails (if you opt in)

• improve the website

3. Sharing Your Data

Your data may be shared with trusted third parties necessary to operate the website, including:

• payment processors

• shipping providers

• website hosting services

We do not sell your personal data.

4. Data Retention

We retain personal data only as long as necessary.

For accounting and tax purposes, certain records may be kept for up to 6 years.

5. Your Rights

Under UK GDPR, you have the right to:

• access your personal data

• request correction of inaccurate data

• request deletion of your data

• withdraw consent for marketing communications

To exercise these rights, contact:
hello@riszalopesdacruz.com

6. Third-Party Services

This website is hosted on Squarespace, which may process personal data in order to provide hosting, analytics, and secure checkout functionality.

7. Changes to This Policy

We may update this Privacy Policy occasionally. The most recent version will always be published on this page.