Privacy policy

Last updated: July 10, 2026
Xquisite By Design (“we”, “us”, or “our”) operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Xquisite By Design is powered by Shopify, which enables us to provide the Services to you. [1, 2, 3, 4]
This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. [1, 2]
1. Data Controller Information
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the Data Controller responsible for your personal information is:
  • Trading Name: Xquisite By Design
  • Contact Email: info@xquisitebydesign.co.uk
  • Business Address: 44 Cardinals Drive, Bognor Regis, West Sussex, PO21 4NQ
2. Personal Information We Collect or Process
We may collect or process the following categories of personal information depending on how you interact with the Services:
  • Contact Details: Your name, billing address, shipping address, phone number, and email address. [1, 2]
  • Financial Information: Payment card details, transaction records, and payment confirmations processed securely through our payment gateways. [1, 2, 3, 4]
  • Account Information: Your username, password, security questions, and saved preferences. [1, 2, 3]
  • Transaction Information: Items viewed, items added to cart/wishlist, purchase history, returns, and cancellations. [1, 2, 3]
  • Communications: Information provided when you contact customer support via info@xquisitebydesign.co.uk.
  • Device & Usage Information: IP address, unique device identifiers, browser type, network connection, and data regarding how you navigate our site, collected automatically via cookies. [1]
3. Lawful Bases for Processing (UK GDPR Compliance)
Under UK data protection law, we rely on the following legal bases to process your information:
  • Performance of a Contract: To process payments, fulfill orders, arrange delivery, and manage your customer account.
  • Legitimate Interests: To secure our store, prevent fraudulent transactions, provide customer support, optimize website performance, and deliver relevant marketing communications.
  • Consent: Where you have explicitly opted-in to receive email marketing or allowed the use of non-essential tracking cookies.
  • Legal Obligation: To comply with tax laws, bookkeeping regulations, or valid requests from law enforcement agencies. [1, 2, 3, 4, 5]
4. How We Disclose Personal Information to Third Parties
We do not sell your personal data. To provide our services, we share your information with trusted third-party processors who operate strictly under our instructions: [1]
  • Shopify: Our e-commerce platform host, which processes data to maintain store functionality.
  • Fulfillment and Dropshipping Partners: We securely transmit your name, delivery address, and telephone number to our wholesale suppliers—Hill Interiors and Ancient Wisdom (AW Dropship)—and their respective courier networks strictly to pack and deliver your orders.
  • Payment Processors: Such as Shopify Payments, Stripe, or PayPal, to securely process payments without storing raw card details on our servers.
  • Marketing & Analytics Partners: Third-party tools used with your consent to analyze site traffic or deliver tailored advertisements based on your preferences. [1, 2, 3, 4, 5]
5. International Data Transfers
Because our store is hosted by Shopify, your data may be transferred to, and processed in, countries outside the UK (including Canada and the United States). We ensure all such transfers are protected by legally recognized safeguarding mechanisms, such as Standard Contractual Clauses (SCCs) or UK International Data Transfer Agreements (IDTAs). [1, 2, 3, 4, 5]
6. Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements (such as holding HMRC transaction data for up to 6 years). [1]
7. Your Legal Rights as a UK Resident
Under the UK GDPR, you hold comprehensive rights regarding your personal information, including:
  • The Right of Access: You can request a copy of the personal data we hold about you.
  • The Right to Rectification: You can ask us to correct inaccurate or incomplete information.
  • The Right to Erasure ("Right to Be Forgotten"): You can request that we delete your data under certain circumstances.
  • The Right to Restrict or Object to Processing: You can object to your data being used for direct marketing or automated profiling.
  • The Right to Data Portability: You can request a transfer of your data to another provider. [1, 2, 3, 4]
To exercise any of these rights, please contact us directly at info@xquisitebydesign.co.uk. If you feel we have not handled your data appropriately, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) (www.ico.org.uk), though we welcome the opportunity to resolve any issues with you directly first.